10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") r4 = open(&(0x7f0000000000)='./bus\x00', 0x14937e, 0x4) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000084c0)={'#! ', './file0', [{0x20, 'nilfs2\x00'}]}, 0x13) (async) r5 = open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) (async) ftruncate(r6, 0x2007fff) (async) sendfile(r5, r6, 0x0, 0x1000000201004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) 06:16:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:14 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") r4 = open(&(0x7f0000000000)='./bus\x00', 0x14937e, 0x4) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000084c0)={'#! ', './file0', [{0x20, 'nilfs2\x00'}]}, 0x13) r5 = open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) (async) r6 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$sndmidi(0x0, 0x0, 0x0) (async, rerun: 64) dup(0xffffffffffffffff) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x1000000201004) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) [ 1035.994878][ T5212] usb 2-1: USB disconnect, device number 72 06:16:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1036.033235][ T27] audit: type=1804 audit(1681798574.889:3716): pid=17338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/548/bus" dev="sda1" ino=1180 res=1 errno=0 [ 1036.063975][ T27] audit: type=1800 audit(1681798574.919:3717): pid=17338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1180 res=0 errno=0 06:16:15 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000080)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:15 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1036.131944][T17342] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1036.183195][ T5166] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1036.213282][ T5164] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1036.221010][T10141] usb 6-1: new high-speed USB device number 40 using dummy_hcd 06:16:15 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1036.228640][ T2618] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1036.233594][ T27] audit: type=1804 audit(1681798575.099:3718): pid=17347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/549/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1036.281740][ T27] audit: type=1800 audit(1681798575.099:3719): pid=17347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1181 res=0 errno=0 [ 1036.453077][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1036.493657][ T5166] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1036.523168][T10141] usb 6-1: Using ep0 maxpacket: 8 [ 1036.528336][ T5164] usb 5-1: Using ep0 maxpacket: 8 [ 1036.533480][ T2618] usb 1-1: Using ep0 maxpacket: 8 [ 1036.613151][ T5166] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1036.620767][ T5166] usb 3-1: can't read configurations, error -61 [ 1036.673347][ T2618] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.683799][T10141] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.694016][ T5164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.704268][ T2618] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1036.713421][T10141] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1036.722331][ T5164] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1036.731368][ T2618] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1036.741927][T10141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.753799][ T5164] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.773081][ T5212] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1036.773107][ T5166] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1036.863406][ T2618] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1036.872539][ T5164] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1036.881724][T10141] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1036.890813][ T2618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1036.899417][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1036.908204][T10141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1036.916602][ T2618] usb 1-1: SerialNumber: syz [ 1036.921849][ T5164] usb 5-1: SerialNumber: syz [ 1036.926820][T10141] usb 6-1: SerialNumber: syz [ 1036.964252][ T2618] hub 1-1:1.0: bad descriptor, ignoring hub [ 1036.970180][ T2618] hub: probe of 1-1:1.0 failed with error -5 [ 1036.977664][T10141] hub 6-1:1.0: bad descriptor, ignoring hub [ 1036.984894][ T5164] hub 5-1:1.0: bad descriptor, ignoring hub [ 1036.990829][ T5164] hub: probe of 5-1:1.0 failed with error -5 [ 1036.997413][T10141] hub: probe of 6-1:1.0 failed with error -5 [ 1037.005169][ T2618] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1037.016550][ T5164] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1037.022485][ T5164] cdc_wdm 5-1:1.0: Unknown control protocol [ 1037.029249][ T5212] usb 2-1: Using ep0 maxpacket: 8 [ 1037.033145][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1037.034551][T10141] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1037.046274][T10141] cdc_wdm 6-1:1.0: Unknown control protocol [ 1037.074003][ T5166] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1037.163237][ T5212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.177888][ T5212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1037.187477][ T5212] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.203306][ T5166] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1037.211151][ T5166] usb 3-1: can't read configurations, error -61 [ 1037.217831][ T5166] usb usb3-port1: attempt power cycle [ 1037.283178][ T5212] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1037.292388][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1037.301026][ T5212] usb 2-1: SerialNumber: syz [ 1037.344525][ T5212] hub 2-1:1.0: bad descriptor, ignoring hub [ 1037.350571][ T5212] hub: probe of 2-1:1.0 failed with error -5 [ 1037.635877][ T5166] usb 3-1: new high-speed USB device number 125 using dummy_hcd 06:16:16 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4804000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273000300020018000100"/48], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf8c}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40040) 06:16:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1037.733155][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1037.773237][ T5166] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1037.933304][ T5166] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1037.941332][T17328] usb 5-1: reset high-speed USB device number 113 using dummy_hcd [ 1037.955270][ T5166] usb 3-1: can't read configurations, error -61 [ 1038.103059][ T5166] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1038.195641][T17328] usb 5-1: Using ep0 maxpacket: 8 [ 1038.203752][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1038.253653][ T5166] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1038.393432][ T5166] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1038.402414][ T5166] usb 3-1: can't read configurations, error -61 [ 1038.409103][ T5166] usb usb3-port1: unable to enumerate USB device [ 1038.417083][ T5212] cdc_wdm 2-1:1.0: cdc-wdm2: USB WDM device [ 1038.425167][ T5212] cdc_wdm 2-1:1.0: Unknown control protocol [ 1038.513269][T10141] usb 1-1: USB disconnect, device number 56 [ 1038.533296][ T5169] usb 6-1: USB disconnect, device number 40 06:16:17 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000040)=""/11, &(0x7f0000000080)=0xb) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'macvtap0\x00', 0x0}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x1ff) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="aef3aef80c1650d90f2692c5bf06a35b67dd66ad1ebd4bb25bdf1a9ba67b9db8aa0ba3c183c78bf47510af4a56", 0x2d}, {&(0x7f0000000280)="a234e13bce5963c0e92aedcbb4521e79f8dbc39baef4243df3d985612617bf09ae1bddf5981af343981b6741cb67d06e1cd91a4251d2dc22e487bf3c4e82b61bd5767564f70b8de45f4205b94fd666ecccda55d74da6e9320610666254ebd191d0961f98c78df919564aa218c15c501be46da3dd5046a324f1a67d5d1cbaeadfd336c8ae2db88b88594a974c6b020842c82a338d6d4f8a651e2cbcb1c938809f2413c9f04c3ede8d", 0xa8}, {&(0x7f00000001c0)="8f392a29286421d43a0d2dafff02e282faf7be8718a16b", 0x17}, {&(0x7f0000000340)="f9da624e72a87dba02e18456e5ca5aea85301cf94d93e6a2eca432049f3304c25d909032d1e13b7804a551a7a936fb0f603863ff28b2653caa8f3ed365f9ea136eca1612e5d0990ffff06d1b0af9021d6a6831c31babfbc43c0f1284a21c99fa28242be88da8dabce124287e8a42cf70217aaca40a4f86502812ddc9ef64a3ceb5f24a73fd94e4ec411312ff2e063c606c05ebc5a4a0c0b04d9348aca533e4c8bbb0ba48dbcc95ee6a83a3ba7529e89f09", 0xb1}], 0x4) socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000090000086a01082502000000f38cdc4401ba025c00020100f92a090400000102090000052406000105240800000d240f010000eaff000800000006241a0000ba190581006e71702e9fc2735102882b43460971d4fcabd420453657f29d19ea49e83406747b4ba5fa7e2f19be12e4f2f39f0010b218dde6966761ce5d9f312b1a64a8300a31c48e2a7b604bad8e703f2281001144b19a1a44606872eccc73f1fc462dc5c2c620de9107dd4851aa80a335dd4176480670697a7a497cc48a482a6ca301000000ad5c12c78674400ab2a4d6c6dd321305339b28b04b0233517a5368e05f3c8c05e438608dbcd3d58cbfa6f601ede0bce96db1e86b59aa675a2248eba3f3eab546e06ad595c42cef15b3705412cec68b244d686d8fcbda0b71823b5ea373bd151c031e4f4b2bc346a002c71660d14cd4ccec245a57d1dbec3d223e950a64667cfe12ff04780a515f913013e3c6ac4a51be534b47bd55f105bbda0c43d89f13d479bcd7d440420e836eb38f69238aba59084cbabcec15f938d174070192f5c0d4abe2faf9724864492b45d21eeaa4a97e942e9d96ab719b6a408eb2135fbd1fc93e5fe1e3aacd5e42634a83139e197a7c2cffbf8106b28445513ae127a7367416f91dbdc4b4855b1cc3fc6e8de88d32a2f0fbef0cee37f96f5d39375e8640db350533b6cb6c85b0e4353ce047c1c51fd3fd3a24e3a0902bb421e358c5563570bc4c2bbb57ea936006bf40e3873ffef5f00ac1ae349122e14b2e40093b0afdf21b313ca7"], 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000040)=""/11, &(0x7f0000000080)=0xb) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'macvtap0\x00', 0x0}) (async) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x1ff) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="aef3aef80c1650d90f2692c5bf06a35b67dd66ad1ebd4bb25bdf1a9ba67b9db8aa0ba3c183c78bf47510af4a56", 0x2d}, {&(0x7f0000000280)="a234e13bce5963c0e92aedcbb4521e79f8dbc39baef4243df3d985612617bf09ae1bddf5981af343981b6741cb67d06e1cd91a4251d2dc22e487bf3c4e82b61bd5767564f70b8de45f4205b94fd666ecccda55d74da6e9320610666254ebd191d0961f98c78df919564aa218c15c501be46da3dd5046a324f1a67d5d1cbaeadfd336c8ae2db88b88594a974c6b020842c82a338d6d4f8a651e2cbcb1c938809f2413c9f04c3ede8d", 0xa8}, {&(0x7f00000001c0)="8f392a29286421d43a0d2dafff02e282faf7be8718a16b", 0x17}, {&(0x7f0000000340)="f9da624e72a87dba02e18456e5ca5aea85301cf94d93e6a2eca432049f3304c25d909032d1e13b7804a551a7a936fb0f603863ff28b2653caa8f3ed365f9ea136eca1612e5d0990ffff06d1b0af9021d6a6831c31babfbc43c0f1284a21c99fa28242be88da8dabce124287e8a42cf70217aaca40a4f86502812ddc9ef64a3ceb5f24a73fd94e4ec411312ff2e063c606c05ebc5a4a0c0b04d9348aca533e4c8bbb0ba48dbcc95ee6a83a3ba7529e89f09", 0xb1}], 0x4) (async) [ 1039.343099][T10141] usb 3-1: new high-speed USB device number 127 using dummy_hcd 06:16:18 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:18 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000001905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:18 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:18 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000080)) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1039.455268][T17347] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1039.459876][ T5166] usb 5-1: USB disconnect, device number 113 06:16:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1039.583199][T10141] usb 3-1: Using ep0 maxpacket: 8 [ 1039.593364][ T27] audit: type=1804 audit(1681798578.459:3720): pid=17370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/550/bus" dev="sda1" ino=1181 res=1 errno=0 06:16:18 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000001905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:18 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000080)) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1039.628375][ T2618] usb 2-1: USB disconnect, device number 73 [ 1039.634665][T10141] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1039.640271][ T27] audit: type=1800 audit(1681798578.459:3721): pid=17370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1181 res=0 errno=0 06:16:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:18 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x1) dup(r1) open(0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x7fff) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0xfffffffffffffffc, 0x0, 0x2, 0x3, 0x400}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1039.783784][T10141] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1039.791390][T10141] usb 3-1: can't read configurations, error -61 [ 1039.823138][ T2618] usb 1-1: new high-speed USB device number 57 using dummy_hcd 06:16:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1039.849536][ T27] audit: type=1804 audit(1681798578.709:3722): pid=17388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/552/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1039.880220][ T27] audit: type=1800 audit(1681798578.709:3723): pid=17388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1181 res=0 errno=0 [ 1039.903348][ T5166] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1039.973074][T10141] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1040.023137][ T5212] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1040.103052][ T2618] usb 1-1: Using ep0 maxpacket: 8 [ 1040.173054][ T5166] usb 5-1: Using ep0 maxpacket: 8 [ 1040.203158][ T5164] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1040.213215][T10141] usb 3-1: Using ep0 maxpacket: 8 [ 1040.223364][ T2618] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.239076][ T2618] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1040.248367][ T2618] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1040.259207][T10141] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1040.267122][ T5212] usb 6-1: Using ep0 maxpacket: 8 [ 1040.333244][ T5166] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.343446][ T2618] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1040.343480][ T2618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.352642][ T5166] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1040.370305][ T5166] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.380141][ T2618] usb 1-1: SerialNumber: syz [ 1040.387772][ T5212] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.398055][T10141] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1040.407633][T10141] usb 3-1: can't read configurations, error -61 [ 1040.414025][ T5212] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1040.422934][ T5212] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1040.435209][T10141] usb usb3-port1: attempt power cycle [ 1040.454060][ T2618] hub 1-1:1.0: bad descriptor, ignoring hub [ 1040.459963][ T2618] hub: probe of 1-1:1.0 failed with error -5 [ 1040.466062][ T5164] usb 2-1: Using ep0 maxpacket: 8 [ 1040.471422][ T2618] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1040.473291][ T5166] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1040.489734][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.498219][ T5166] usb 5-1: SerialNumber: syz [ 1040.513407][ T5212] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1040.522607][ T5212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.531041][ T5212] usb 6-1: SerialNumber: syz [ 1040.544552][ T5166] hub 5-1:1.0: bad descriptor, ignoring hub [ 1040.550715][ T5166] hub: probe of 5-1:1.0 failed with error -5 [ 1040.559585][ T5166] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1040.566012][ T5166] cdc_wdm 5-1:1.0: Unknown control protocol [ 1040.574270][ T5212] hub 6-1:1.0: bad descriptor, ignoring hub [ 1040.583324][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.593722][ T5212] hub: probe of 6-1:1.0 failed with error -5 [ 1040.600161][ T5212] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1040.606863][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1040.628301][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.713203][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1040.722357][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.730541][ T5164] usb 2-1: SerialNumber: syz [ 1040.774685][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 1040.780627][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 1040.853134][T10141] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1040.953150][T10141] usb 3-1: Using ep0 maxpacket: 8 [ 1040.993153][T10141] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1041.113124][T10141] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1041.120878][T10141] usb 3-1: can't read configurations, error -61 [ 1041.273084][T10141] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1041.363183][T10141] usb 3-1: Using ep0 maxpacket: 8 [ 1041.403193][T10141] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1041.523112][T10141] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1041.530829][T10141] usb 3-1: can't read configurations, error -61 [ 1041.541677][T10141] usb usb3-port1: unable to enumerate USB device [ 1041.594168][T17365] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1041.599763][ T5166] usb 5-1: USB disconnect, device number 114 [ 1041.603474][ T5164] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1041.611727][T17379] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1041.619561][T17388] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1041.625493][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol [ 1041.666059][ T5164] usb 2-1: USB disconnect, device number 74 [ 1041.723328][T10141] usb 1-1: USB disconnect, device number 57 [ 1041.753343][ T5212] usb 6-1: USB disconnect, device number 41 06:16:20 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:20 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) open(0x0, 0x0, 0x0) (async, rerun: 32) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000090000086a01082502000000f38cdc4401ba025c00020100f92a090400000102090000052406000105240800000d240f010000eaff000800000006241a0000ba190581006e71702e9fc2735102882b43460971d4fcabd420453657f29d19ea49e83406747b4ba5fa7e2f19be12e4f2f39f0010b218dde6966761ce5d9f312b1a64a8300a31c48e2a7b604bad8e703f2281001144b19a1a44606872eccc73f1fc462dc5c2c620de9107dd4851aa80a335dd4176480670697a7a497cc48a482a6ca301000000ad5c12c78674400ab2a4d6c6dd321305339b28b04b0233517a5368e05f3c8c05e438608dbcd3d58cbfa6f601ede0bce96db1e86b59aa675a2248eba3f3eab546e06ad595c42cef15b3705412cec68b244d686d8fcbda0b71823b5ea373bd151c031e4f4b2bc346a002c71660d14cd4ccec245a57d1dbec3d223e950a64667cfe12ff04780a515f913013e3c6ac4a51be534b47bd55f105bbda0c43d89f13d479bcd7d440420e836eb38f69238aba59084cbabcec15f938d174070192f5c0d4abe2faf9724864492b45d21eeaa4a97e942e9d96ab719b6a408eb2135fbd1fc93e5fe1e3aacd5e42634a83139e197a7c2cffbf8106b28445513ae127a7367416f91dbdc4b4855b1cc3fc6e8de88d32a2f0fbef0cee37f96f5d39375e8640db350533b6cb6c85b0e4353ce047c1c51fd3fd3a24e3a0902bb421e358c5563570bc4c2bbb57ea936006bf40e3873ffef5f00ac1ae349122e14b2e40093b0afdf21b313ca7"], 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000040)=""/11, &(0x7f0000000080)=0xb) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'macvtap0\x00', 0x0}) (async, rerun: 32) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x1ff) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="aef3aef80c1650d90f2692c5bf06a35b67dd66ad1ebd4bb25bdf1a9ba67b9db8aa0ba3c183c78bf47510af4a56", 0x2d}, {&(0x7f0000000280)="a234e13bce5963c0e92aedcbb4521e79f8dbc39baef4243df3d985612617bf09ae1bddf5981af343981b6741cb67d06e1cd91a4251d2dc22e487bf3c4e82b61bd5767564f70b8de45f4205b94fd666ecccda55d74da6e9320610666254ebd191d0961f98c78df919564aa218c15c501be46da3dd5046a324f1a67d5d1cbaeadfd336c8ae2db88b88594a974c6b020842c82a338d6d4f8a651e2cbcb1c938809f2413c9f04c3ede8d", 0xa8}, {&(0x7f00000001c0)="8f392a29286421d43a0d2dafff02e282faf7be8718a16b", 0x17}, {&(0x7f0000000340)="f9da624e72a87dba02e18456e5ca5aea85301cf94d93e6a2eca432049f3304c25d909032d1e13b7804a551a7a936fb0f603863ff28b2653caa8f3ed365f9ea136eca1612e5d0990ffff06d1b0af9021d6a6831c31babfbc43c0f1284a21c99fa28242be88da8dabce124287e8a42cf70217aaca40a4f86502812ddc9ef64a3ceb5f24a73fd94e4ec411312ff2e063c606c05ebc5a4a0c0b04d9348aca533e4c8bbb0ba48dbcc95ee6a83a3ba7529e89f09", 0xb1}], 0x4) 06:16:20 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:20 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:20 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:20 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:20 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:21 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x1) (async) dup(r1) (async) open(0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x7fff) (async) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0xfffffffffffffffc, 0x0, 0x2, 0x3, 0x400}}) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:21 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'veth1_virt_wifi\x00', {}, 0x4}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:21 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdc2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x10, 0x70bd2a, 0xfffffffd}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1042.237313][ T27] audit: type=1804 audit(1681798581.099:3724): pid=17420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/553/bus" dev="sda1" ino=1177 res=1 errno=0 06:16:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1042.340710][ T27] audit: type=1800 audit(1681798581.099:3725): pid=17420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1042.367796][ T27] audit: type=1804 audit(1681798581.119:3726): pid=17425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/653/bus" dev="sda1" ino=1178 res=1 errno=0 06:16:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080), 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:21 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1042.440310][ T27] audit: type=1800 audit(1681798581.119:3727): pid=17425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 1042.533041][ T5166] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1042.549984][ T5212] usb 3-1: new high-speed USB device number 5 using dummy_hcd 06:16:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080), 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1042.663070][ T5164] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1042.773147][ T5166] usb 2-1: Using ep0 maxpacket: 8 [ 1042.803122][ T5212] usb 3-1: Using ep0 maxpacket: 8 [ 1042.893114][ T5166] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.903433][ T5166] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1042.912416][ T5166] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.913271][ T5164] usb 5-1: Using ep0 maxpacket: 8 [ 1042.928742][ T5212] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.938871][ T5212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1042.947894][ T5212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.003242][ T5166] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1043.012435][ T5166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1043.020757][ T5166] usb 2-1: SerialNumber: syz [ 1043.064032][ T5212] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1043.073250][ T5166] hub 2-1:1.0: bad descriptor, ignoring hub [ 1043.079271][ T5212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1043.086045][ T5166] hub: probe of 2-1:1.0 failed with error -5 [ 1043.087521][ T5164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.104899][ T5212] usb 3-1: SerialNumber: syz [ 1043.110966][ T5164] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1043.114541][ T5166] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1043.125315][ T5164] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.143916][ T5166] cdc_wdm 2-1:1.0: Unknown control protocol [ 1043.160877][ T5212] hub 3-1:1.0: bad descriptor, ignoring hub [ 1043.168216][ T5212] hub: probe of 3-1:1.0 failed with error -5 [ 1043.179090][ T5212] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1043.233224][ T5164] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1043.242424][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1043.250796][ T5164] usb 5-1: SerialNumber: syz [ 1043.279854][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.289013][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.299414][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.308154][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.308806][ T5164] hub 5-1:1.0: bad descriptor, ignoring hub [ 1043.322127][ T5164] hub: probe of 5-1:1.0 failed with error -5 [ 1043.323957][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.335406][ T5164] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1043.338334][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.342509][ T5164] cdc_wdm 5-1:1.0: Unknown control protocol [ 1043.352406][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.376103][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.384934][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.394650][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.493363][ T5169] usb 3-1: USB disconnect, device number 5 [ 1043.517560][T10141] usb 2-1: USB disconnect, device number 75 [ 1043.634843][ T5164] usb 5-1: USB disconnect, device number 115 06:16:22 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:22 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'veth1_virt_wifi\x00', {}, 0x4}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:22 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080), 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:22 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1043.907410][ T27] audit: type=1804 audit(1681798582.769:3728): pid=17445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/426/bus" dev="sda1" ino=1169 res=1 errno=0 [ 1043.937630][T17450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 06:16:22 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = open(0x0, 0x0, 0x0) (rerun: 64) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x1) (async) dup(r1) open(0x0, 0x0, 0x0) (async) socket(0x1d, 0x2, 0x7fff) ftruncate(r2, 0x800) (async, rerun: 32) lseek(r2, 0x0, 0x2) (rerun: 32) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0xfffffffffffffffc, 0x0, 0x2, 0x3, 0x400}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:22 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:22 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdc2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x10, 0x70bd2a, 0xfffffffd}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdc2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x10, 0x70bd2a, 0xfffffffd}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) (async) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x125000, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) [ 1043.952095][ T27] audit: type=1804 audit(1681798582.799:3729): pid=17447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/654/bus" dev="sda1" ino=1183 res=1 errno=0 [ 1043.962176][T17450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:16:23 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='pim6reg1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:23 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1044.184516][T10141] usb 3-1: new high-speed USB device number 6 using dummy_hcd 06:16:23 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:23 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:23 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1044.363124][ T5164] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1044.450712][T10141] usb 3-1: Using ep0 maxpacket: 8 [ 1044.503236][ T5166] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1044.583199][T10141] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.593522][T10141] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1044.602429][T10141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.623213][ T5164] usb 5-1: Using ep0 maxpacket: 8 [ 1044.683271][T10141] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1044.692309][T10141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1044.704867][T10141] usb 3-1: SerialNumber: syz [ 1044.743191][ T5166] usb 2-1: Using ep0 maxpacket: 8 [ 1044.753333][ T5164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.764888][T10141] hub 3-1:1.0: bad descriptor, ignoring hub [ 1044.770898][ T5164] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1044.780372][T10141] hub: probe of 3-1:1.0 failed with error -5 [ 1044.787157][T10141] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1044.794011][ T5164] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.863212][ T5166] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.874550][ T5166] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1044.883543][ T5166] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.903228][ T5164] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1044.912367][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1044.920857][ T5164] usb 5-1: SerialNumber: syz [ 1044.965429][ T5164] hub 5-1:1.0: bad descriptor, ignoring hub [ 1044.972769][ T5164] hub: probe of 5-1:1.0 failed with error -5 [ 1044.973378][ T5166] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1044.980699][ T5164] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1044.995851][ T5164] cdc_wdm 5-1:1.0: Unknown control protocol [ 1045.001700][ T5166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1045.010310][ T5166] usb 2-1: SerialNumber: syz [ 1045.054450][ T5166] hub 2-1:1.0: bad descriptor, ignoring hub [ 1045.060372][ T5166] hub: probe of 2-1:1.0 failed with error -5 [ 1045.067647][ T5166] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1045.073698][ T5166] cdc_wdm 2-1:1.0: Unknown control protocol [ 1045.083547][ T5176] usb 3-1: USB disconnect, device number 6 06:16:24 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:24 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:24 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:24 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdc2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x10, 0x70bd2a, 0xfffffffd}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x125000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1045.543328][T17491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.552763][T17491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:16:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1045.673727][T17465] usb 5-1: reset high-speed USB device number 116 using dummy_hcd [ 1045.783062][ T5176] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1045.793240][ T5166] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1045.803083][ T5212] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1045.923164][T17465] usb 5-1: Using ep0 maxpacket: 8 [ 1046.023069][ T5176] usb 1-1: Using ep0 maxpacket: 8 [ 1046.043110][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1046.073285][ T5212] usb 6-1: Using ep0 maxpacket: 8 [ 1046.143547][ T5176] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.154208][ T5176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1046.163563][ T5166] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.174441][ T5176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.185596][ T5166] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1046.194895][ T5166] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.213761][ T5212] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.223941][ T5212] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1046.232792][ T5212] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.253598][ T5164] usb 2-1: USB disconnect, device number 76 [ 1046.273283][ T5176] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1046.282459][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1046.290840][ T5166] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1046.300132][ T5176] usb 1-1: SerialNumber: syz [ 1046.305051][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1046.314602][ T5212] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1046.318377][ T5166] usb 3-1: SerialNumber: syz [ 1046.328497][ T5212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1046.338618][ T5212] usb 6-1: SerialNumber: syz [ 1046.364322][ T5176] hub 1-1:1.0: bad descriptor, ignoring hub [ 1046.370874][ T5176] hub: probe of 1-1:1.0 failed with error -5 [ 1046.378430][ T5176] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1046.385482][ T5166] hub 3-1:1.0: bad descriptor, ignoring hub [ 1046.391411][ T5166] hub: probe of 3-1:1.0 failed with error -5 [ 1046.397512][ T5176] cdc_wdm 1-1:1.0: Unknown control protocol [ 1046.404119][ T5212] hub 6-1:1.0: bad descriptor, ignoring hub [ 1046.406755][ T5166] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1046.410029][ T5212] hub: probe of 6-1:1.0 failed with error -5 [ 1046.461558][ T5212] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1046.703319][ T5166] usb 3-1: USB disconnect, device number 7 [ 1046.757682][ T2618] usb 6-1: USB disconnect, device number 42 [ 1047.164170][T17482] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1047.165707][T10141] usb 5-1: USB disconnect, device number 116 [ 1047.294117][ T5164] usb 1-1: USB disconnect, device number 58 06:16:26 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='pim6reg1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:16:26 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001a80)={&(0x7f0000000300)=@caif=@util, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f00000007c0)=""/28, 0x1c}, {&(0x7f0000000800)=""/107, 0x6b}, {&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001980)=""/222, 0xde}, 0x12062) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) flock(r2, 0x2) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0d0400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) write$6lowpan_enable(r6, &(0x7f0000000200)='1', 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c00060002000000020000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="e0498931411c011631bc95263a6801c6abbbbe00"/32], 0x110}, 0x1, 0x0, 0x0, 0x4c005}, 0x81) 06:16:26 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) 06:16:26 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) dup(r0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:26 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1047.758020][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1047.758036][ T27] audit: type=1804 audit(1681798586.619:3734): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/556/bus" dev="sda1" ino=1177 res=1 errno=0 06:16:26 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='pim6reg1\x00') (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1047.805691][ T27] audit: type=1800 audit(1681798586.649:3735): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 06:16:26 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) lseek(r0, 0x14, 0x2) r1 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) lseek(r1, 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1047.950195][ T27] audit: type=1804 audit(1681798586.809:3736): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/558/bus" dev="sda1" ino=1177 res=1 errno=0 06:16:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1047.987426][ T27] audit: type=1800 audit(1681798586.839:3737): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1048.013151][ T5176] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1048.020951][ T5166] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1048.030290][ T5169] usb 3-1: new high-speed USB device number 8 using dummy_hcd 06:16:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 06:16:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) [ 1048.103086][T14364] usb 1-1: new high-speed USB device number 59 using dummy_hcd 06:16:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) [ 1048.273128][ T5166] usb 6-1: Using ep0 maxpacket: 8 [ 1048.278829][ T5169] usb 3-1: Using ep0 maxpacket: 8 [ 1048.284011][ T5176] usb 5-1: Using ep0 maxpacket: 8 [ 1048.353190][T14364] usb 1-1: Using ep0 maxpacket: 8 [ 1048.403205][ T5164] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1048.424180][ T5169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.434490][ T5176] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1048.444872][ T5166] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.455125][ T5176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1048.464562][ T5169] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1048.473922][ T5166] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1048.482846][ T5176] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1048.496248][T14364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.506605][ T5169] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.517146][ T5166] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.527585][T14364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1048.536946][T14364] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.633319][T14364] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1048.642474][ T5169] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1048.643128][ T5164] usb 2-1: Using ep0 maxpacket: 8 [ 1048.651611][ T5166] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1048.665864][ T5176] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1048.675113][T14364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.683864][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.691943][ T5176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.700312][ T5166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.708576][T14364] usb 1-1: SerialNumber: syz [ 1048.713469][ T5169] usb 3-1: SerialNumber: syz [ 1048.718121][ T5176] usb 5-1: SerialNumber: syz [ 1048.725590][ T5166] usb 6-1: SerialNumber: syz [ 1048.784035][ T5169] hub 3-1:1.0: bad descriptor, ignoring hub [ 1048.789962][ T5169] hub: probe of 3-1:1.0 failed with error -5 [ 1048.797192][ T5176] hub 5-1:1.0: bad descriptor, ignoring hub [ 1048.804147][T14364] hub 1-1:1.0: bad descriptor, ignoring hub [ 1048.804897][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.810059][T14364] hub: probe of 1-1:1.0 failed with error -5 [ 1048.812358][ T5166] hub 6-1:1.0: bad descriptor, ignoring hub [ 1048.836764][ T5176] hub: probe of 5-1:1.0 failed with error -5 [ 1048.841344][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1048.843662][T14364] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1048.852321][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.858756][ T5169] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1048.875636][ T5176] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1048.883159][ T5166] hub: probe of 6-1:1.0 failed with error -5 [ 1048.897707][ T5166] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1048.904265][T14364] cdc_wdm 1-1:1.0: Unknown control protocol [ 1048.953434][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1048.962647][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.970999][ T5164] usb 2-1: SerialNumber: syz [ 1049.016039][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 1049.026809][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 1049.113258][ T5409] usb 5-1: USB disconnect, device number 117 [ 1049.123374][ T5169] usb 3-1: USB disconnect, device number 8 [ 1049.143695][T14364] usb 6-1: USB disconnect, device number 43 [ 1049.154192][ T5164] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1049.160112][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol [ 1049.220804][ T2618] usb 1-1: USB disconnect, device number 59 [ 1049.223422][T17522] cdc_wdm 1-1:1.0: Error autopm - -16 [ 1049.367046][ T5166] usb 2-1: USB disconnect, device number 77 06:16:28 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0), 0x0, 0x0) 06:16:28 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) 06:16:28 executing program 5: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x1040c) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_clone(0x0, &(0x7f00000003c0)="ef2070fc2b28073a0c464b5f447e117155e5b721392b20eccd2f0565edd78c5e2ff7900fe3071b7fec0ecd9eef80e97ebfc6ba640eba5d23a094909dd8a500268b31799d0d5c", 0x46, &(0x7f0000000000), &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYRES64, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000400000f2ff000008000100da33320020000200080003000000000000000000000000000000000000000000000000b5126cd62304c1367d2ff3530df5d9ac2dbec3c9695d35cc0f0e2c0a295d99e7e441662404757909fc750d13c5ea96ae20b0a143fc3efd6d622ebbe66080bc"], 0x4c}}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) [ 1049.583581][T17538] loop5: detected capacity change from 0 to 128 06:16:28 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x1040c) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_clone(0x0, &(0x7f00000003c0)="ef2070fc2b28073a0c464b5f447e117155e5b721392b20eccd2f0565edd78c5e2ff7900fe3071b7fec0ecd9eef80e97ebfc6ba640eba5d23a094909dd8a500268b31799d0d5c", 0x46, &(0x7f0000000000), &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYRES64, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000400000f2ff000008000100da33320020000200080003000000000000000000000000000000000000000000000000b5126cd62304c1367d2ff3530df5d9ac2dbec3c9695d35cc0f0e2c0a295d99e7e441662404757909fc750d13c5ea96ae20b0a143fc3efd6d622ebbe66080bc"], 0x4c}}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 06:16:28 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001a80)={&(0x7f0000000300)=@caif=@util, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f00000007c0)=""/28, 0x1c}, {&(0x7f0000000800)=""/107, 0x6b}, {&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001980)=""/222, 0xde}, 0x12062) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) (async) flock(r2, 0x2) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0d0400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async) write$6lowpan_enable(r6, &(0x7f0000000200)='1', 0x1) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c00060002000000020000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="e0498931411c011631bc95263a6801c6abbbbe00"/32], 0x110}, 0x1, 0x0, 0x0, 0x4c005}, 0x81) 06:16:28 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) 06:16:28 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0), 0x0, 0x0) 06:16:28 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) lseek(r0, 0x14, 0x2) (async) r1 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) lseek(r1, 0x8001, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1049.808592][T17550] loop0: detected capacity change from 0 to 128 06:16:28 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) 06:16:29 executing program 5: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x1040c) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_clone(0x0, &(0x7f00000003c0)="ef2070fc2b28073a0c464b5f447e117155e5b721392b20eccd2f0565edd78c5e2ff7900fe3071b7fec0ecd9eef80e97ebfc6ba640eba5d23a094909dd8a500268b31799d0d5c", 0x46, &(0x7f0000000000), &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYRES64, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000400000f2ff000008000100da33320020000200080003000000000000000000000000000000000000000000000000b5126cd62304c1367d2ff3530df5d9ac2dbec3c9695d35cc0f0e2c0a295d99e7e441662404757909fc750d13c5ea96ae20b0a143fc3efd6d622ebbe66080bc"], 0x4c}}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 06:16:29 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) lseek(r0, 0x14, 0x2) (async) r1 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) lseek(r1, 0x8001, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1050.807169][ T5166] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1050.833300][T17571] loop5: detected capacity change from 0 to 128 06:16:30 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000380)=0x81, 0x83d8) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)=""/37, &(0x7f00000000c0)=0x25) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, r4, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:30 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0), 0x0, 0x0) 06:16:30 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x700, 0x40, 0x1ff, 0x7, {{0x24, 0x4, 0x0, 0x16, 0x90, 0x66, 0x0, 0xe3, 0x2d, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x8, 0x6e, 0x0, 0x5, [0x9]}, @rr={0x7, 0x7, 0x41, [@broadcast]}, @generic={0x82, 0x6, "38d81409"}, @generic={0x82, 0x5, "6d0447"}, @timestamp_prespec={0x44, 0x34, 0x3b, 0x3, 0xf, [{@rand_addr=0x64010102, 0xd2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x1}, {@private=0xa010101, 0x3f8}, {@loopback, 0x1658a78}]}, @timestamp_addr={0x44, 0x2c, 0x9f, 0x1, 0xe, [{@rand_addr=0x64010100, 0xffffffff}, {@multicast2, 0x1}, {@broadcast, 0x7}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x400}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@delchain={0x54, 0x65, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb}, {0x8, 0xfff2}, {0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffdde, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x1000}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1052.110280][T17584] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 06:16:31 executing program 5: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r4, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4f, 0x2}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1052.223061][ T27] audit: type=1804 audit(1681798591.039:3738): pid=17586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/430/bus" dev="sda1" ino=1180 res=1 errno=0 [ 1052.300268][ T27] audit: type=1800 audit(1681798591.039:3739): pid=17586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1180 res=0 errno=0 [ 1052.321781][ T27] audit: type=1804 audit(1681798591.059:3740): pid=17584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/561/bus" dev="sda1" ino=1181 res=1 errno=0 06:16:31 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1052.348214][ T27] audit: type=1800 audit(1681798591.059:3741): pid=17584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1181 res=0 errno=0 [ 1052.369823][ T5169] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1052.398145][ T27] audit: type=1804 audit(1681798591.259:3742): pid=17591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/659/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1052.424532][ T5166] usb 5-1: Using ep0 maxpacket: 8 [ 1052.434933][ T27] audit: type=1800 audit(1681798591.289:3743): pid=17591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1173 res=0 errno=0 [ 1052.533242][ T5164] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1052.553577][ T5166] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1052.573078][ T5169] usb 3-1: device descriptor read/64, error 18 [ 1052.579492][ T5166] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1052.595763][ T5166] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 06:16:31 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001a80)={&(0x7f0000000300)=@caif=@util, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f00000007c0)=""/28, 0x1c}, {&(0x7f0000000800)=""/107, 0x6b}, {&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001980)=""/222, 0xde}, 0x12062) (async) recvmsg$can_j1939(r0, &(0x7f0000001a80)={&(0x7f0000000300)=@caif=@util, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f00000007c0)=""/28, 0x1c}, {&(0x7f0000000800)=""/107, 0x6b}, {&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001980)=""/222, 0xde}, 0x12062) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) flock(r2, 0x2) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0d0400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0d0400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) write$6lowpan_enable(r6, &(0x7f0000000200)='1', 0x1) (async) write$6lowpan_enable(r6, &(0x7f0000000200)='1', 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c00060002000000020000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="e0498931411c011631bc95263a6801c6abbbbe00"/32], 0x110}, 0x1, 0x0, 0x0, 0x4c005}, 0x81) [ 1052.683150][ T5166] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1052.692208][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1052.714614][ T5166] usb 5-1: SerialNumber: syz [ 1052.736912][ T5166] usb 5-1: can't set config #1, error -71 [ 1052.749937][T17597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.758067][ T5166] usb 5-1: USB disconnect, device number 118 [ 1052.759701][T17597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.766858][ T5176] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1052.783182][ T5409] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1052.790935][ T5164] usb 2-1: Using ep0 maxpacket: 8 [ 1052.853087][ T5169] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1052.923316][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.934031][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1052.943402][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.023065][ T5176] usb 4-1: Using ep0 maxpacket: 8 [ 1053.033523][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1053.043103][ T5169] usb 3-1: device descriptor read/64, error 18 [ 1053.048317][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1053.057556][ T5164] usb 2-1: SerialNumber: syz 06:16:31 executing program 0: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000108000000000d240f0100000000000000000006241a000000190581"], 0x0) [ 1053.073164][ T5409] usb 6-1: Using ep0 maxpacket: 8 [ 1053.116508][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 1053.129220][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 1053.133302][ T5166] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1053.145604][ T5164] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1053.153433][ T5176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.158324][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol [ 1053.164574][ T5169] usb usb3-port1: attempt power cycle [ 1053.175207][ T5176] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1053.193341][ T5409] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.203239][ T5176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.211859][ T5409] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1053.224097][ T5409] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.293150][ T5176] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1053.302331][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1053.310584][ T5176] usb 4-1: SerialNumber: syz [ 1053.330795][ T5409] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1053.343152][ T5166] usb 5-1: device descriptor read/64, error 18 [ 1053.352395][ T5409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1053.360709][ T5409] usb 6-1: SerialNumber: syz [ 1053.368591][ T5176] hub 4-1:1.0: bad descriptor, ignoring hub [ 1053.375213][ T5176] hub: probe of 4-1:1.0 failed with error -5 [ 1053.413130][T14364] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1053.423944][ T5409] hub 6-1:1.0: bad descriptor, ignoring hub [ 1053.432139][ T5409] hub: probe of 6-1:1.0 failed with error -5 [ 1053.459695][ T5176] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1053.465490][ T5409] cdc_wdm 6-1:1.0: cdc-wdm2: USB WDM device [ 1053.466167][ T5176] cdc_wdm 4-1:1.0: Unknown control protocol [ 1053.471585][ T5409] cdc_wdm 6-1:1.0: Unknown control protocol [ 1053.479323][ T5172] usb 2-1: USB disconnect, device number 78 [ 1053.603333][ T5169] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1053.613090][ T5166] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1053.653552][T14364] usb 1-1: Using ep0 maxpacket: 8 06:16:32 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) [ 1053.694718][ T5176] usb 4-1: USB disconnect, device number 115 [ 1053.733293][ T5169] usb 3-1: device descriptor read/8, error -71 [ 1053.773142][T14364] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1053.786091][T14364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1053.794510][ T5212] usb 6-1: USB disconnect, device number 44 [ 1053.795378][T14364] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1053.813976][ T5166] usb 5-1: device descriptor read/64, error 18 [ 1053.903165][T14364] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1053.912319][T14364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1053.920625][T14364] usb 1-1: SerialNumber: syz [ 1053.933641][ T5166] usb usb5-port1: attempt power cycle 06:16:32 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000380)=0x81, 0x83d8) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)=""/37, &(0x7f00000000c0)=0x25) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, r4, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x4) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async, rerun: 64) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (rerun: 64) open(0x0, 0x0, 0x0) (async) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1053.976289][T14364] hub 1-1:1.0: bad descriptor, ignoring hub [ 1053.982295][T14364] hub: probe of 1-1:1.0 failed with error -5 [ 1053.988966][T14364] cdc_wdm 1-1:1.0: skipping garbage [ 1053.994290][T14364] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1054.046250][T17606] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 06:16:33 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000380)=0x81, 0x83d8) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)=""/37, &(0x7f00000000c0)=0x25) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, r4, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1054.081392][ T27] audit: type=1804 audit(1681798592.939:3744): pid=17606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/562/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1054.110895][ T27] audit: type=1800 audit(1681798592.939:3745): pid=17606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1181 res=0 errno=0 [ 1054.150273][T17610] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1054.171412][ T27] audit: type=1804 audit(1681798593.029:3746): pid=17610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir363157862/syzkaller.Mb5z7L/835/bus" dev="sda1" ino=1183 res=1 errno=0 06:16:33 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7fffffff) sched_setscheduler(r0, 0x2, &(0x7f0000002480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x3e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x0, 0x33, 0x5, 0x401, 0x1, 0x20, 0x8, 0x79d5, 0x8000}, 0x0) syz_mount_image$ext4(&(0x7f0000002640)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) r7 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(0x0, &(0x7f0000002400)={0x38, 0x0, 0x11, 0x9, 0x1, 0x400, 0x87, 0x6, 0x7f, 0x8001}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x1) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000025c0)=@dellinkprop={0x54, 0x6d, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10541, 0x200}, [@IFLA_MAP={0x24, 0xe, {0x7252, 0x5, 0x8, 0x3, 0x4, 0xd7}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48804}, 0x40040) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002900)=ANY=[@ANYBLOB="3000000012000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000040000000e10f00128008000123132f19c2bf00687398e17bfdb60a0ae532083cf0cc8cdf1095e98c11a03b96931600e8570a3b8e20aedcd3f956561098cca205f6143fbea9b0323277536d06cbae7847cac618e3382bf85047041e3b9b94cda21a18b0a9286e7d3aafa33d42b33c2259a747bb60858cf4cc2a876263e6159e000000000000005a6315e10193f25e4f1244c6e261bd5a147df3c496bb2b41fe5534f75f153ce7deedf91e8f4e652ed6a45ba7a14943ce05ef83fa4637a8cabbd2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002e80)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r3, @ANYRESHEX=r7], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000002cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffff3e, 0x10, 0x0}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002540), 0x4400, 0x0) [ 1054.210005][ T27] audit: type=1800 audit(1681798593.029:3747): pid=17610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 1054.235602][ T5169] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1054.274647][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.280992][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.343206][ T5166] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1054.393745][T14364] usb 1-1: USB disconnect, device number 60 [ 1054.437719][T17615] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1054.459922][ T5169] usb 3-1: device descriptor read/8, error -61 [ 1054.600214][ T5166] usb 5-1: device descriptor read/8, error -61 [ 1054.608900][ T5169] usb usb3-port1: unable to enumerate USB device [ 1054.983133][ T5166] usb 5-1: new high-speed USB device number 122 using dummy_hcd 06:16:34 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7fffffff) sched_setscheduler(r0, 0x2, &(0x7f0000002480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x3e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x0, 0x33, 0x5, 0x401, 0x1, 0x20, 0x8, 0x79d5, 0x8000}, 0x0) syz_mount_image$ext4(&(0x7f0000002640)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) r7 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(0x0, &(0x7f0000002400)={0x38, 0x0, 0x11, 0x9, 0x1, 0x400, 0x87, 0x6, 0x7f, 0x8001}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x1) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000025c0)=@dellinkprop={0x54, 0x6d, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10541, 0x200}, [@IFLA_MAP={0x24, 0xe, {0x7252, 0x5, 0x8, 0x3, 0x4, 0xd7}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48804}, 0x40040) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002900)=ANY=[@ANYBLOB="3000000012000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000040000000e10f00128008000123132f19c2bf00687398e17bfdb60a0ae532083cf0cc8cdf1095e98c11a03b96931600e8570a3b8e20aedcd3f956561098cca205f6143fbea9b0323277536d06cbae7847cac618e3382bf85047041e3b9b94cda21a18b0a9286e7d3aafa33d42b33c2259a747bb60858cf4cc2a876263e6159e000000000000005a6315e10193f25e4f1244c6e261bd5a147df3c496bb2b41fe5534f75f153ce7deedf91e8f4e652ed6a45ba7a14943ce05ef83fa4637a8cabbd2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002e80)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r3, @ANYRESHEX=r7], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000002cc0)=ANY=[@ANYBLOB="bbb0a8881e2b6b87605ea61bd5e4428396686836bfb2eb1aceeadab80b6abc958337e178317c1525cac26bdbcb03911bfbfe0f40d5eec97c7fd2f4c37eee4a9ca90f15dcb1884d9c9613ce450b89e9c3ca540cb01f4016a953fbf28248fe712ecd7a87000000a8d53e4cbfb079dd4fc19fca4b551b1046dd75b4fd8a17986390c97f6ca21daddbcdf14a08f9aa2f1755be78b7c87fe9f5f78de1fe45766a767fbadd40aff830ef6f27b5f51698d918b319158543127c36de4cab368fdfef8b12e47d2177f80d73bddddee9d838461a560b168f9f597e5a0456c4b2346d3f62b4b7af3e8be915f8df08bc6400aa375845c31694e6c2bdac5602ef160828b8e61f644b92251479b52c940e124734f5eee4e770637e49a57197e78904f0d6ceafb421f7539e3a53ac6a36d1c158eb527e6c9bc8900d2cfc987338fddb294f88f5ae94aaff37e75c1fe34d6744d5b0f8916e2885ba2bbf556481bb586011b15ca71fb27b40cd5b40db8ea6a0b60000000000000000e19aecc38bce2dc645c311a3dff0798f6503a4edfe4f228dd7f801f3fc81ced89141ef25d5f20bda"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffff3e, 0x10, 0x0}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002540), 0x4400, 0x0) 06:16:34 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000380)=0x81, 0x83d8) (async) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000380)=0x81, 0x83d8) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)=""/37, &(0x7f00000000c0)=0x25) (async) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)=""/37, &(0x7f00000000c0)=0x25) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, r4, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, r4, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:34 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7fffffff) sched_setscheduler(r0, 0x2, &(0x7f0000002480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x3e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x0, 0x33, 0x5, 0x401, 0x1, 0x20, 0x8, 0x79d5, 0x8000}, 0x0) syz_mount_image$ext4(&(0x7f0000002640)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) r7 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(0x0, &(0x7f0000002400)={0x38, 0x0, 0x11, 0x9, 0x1, 0x400, 0x87, 0x6, 0x7f, 0x8001}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x1) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000025c0)=@dellinkprop={0x54, 0x6d, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10541, 0x200}, [@IFLA_MAP={0x24, 0xe, {0x7252, 0x5, 0x8, 0x3, 0x4, 0xd7}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48804}, 0x40040) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002900)=ANY=[@ANYBLOB="3000000012000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000040000000e10f00128008000123132f19c2bf00687398e17bfdb60a0ae532083cf0cc8cdf1095e98c11a03b96931600e8570a3b8e20aedcd3f956561098cca205f6143fbea9b0323277536d06cbae7847cac618e3382bf85047041e3b9b94cda21a18b0a9286e7d3aafa33d42b33c2259a747bb60858cf4cc2a876263e6159e000000000000005a6315e10193f25e4f1244c6e261bd5a147df3c496bb2b41fe5534f75f153ce7deedf91e8f4e652ed6a45ba7a14943ce05ef83fa4637a8cabbd2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002e80)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r3, @ANYRESHEX=r7], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000002cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffff3e, 0x10, 0x0}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002540), 0x4400, 0x0) [ 1055.221510][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1055.223300][ T5212] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1055.238314][ T27] audit: type=1804 audit(1681798594.099:3748): pid=17619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/563/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1055.270478][ T27] audit: type=1800 audit(1681798594.129:3749): pid=17619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 1057.231700][T17624] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1057.256217][T17626] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 06:16:36 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7fffffff) sched_setscheduler(r0, 0x2, &(0x7f0000002480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x3e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x0, 0x33, 0x5, 0x401, 0x1, 0x20, 0x8, 0x79d5, 0x8000}, 0x0) syz_mount_image$ext4(&(0x7f0000002640)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) r7 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setattr(0x0, &(0x7f0000002400)={0x38, 0x0, 0x11, 0x9, 0x1, 0x400, 0x87, 0x6, 0x7f, 0x8001}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x1) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000025c0)=@dellinkprop={0x54, 0x6d, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10541, 0x200}, [@IFLA_MAP={0x24, 0xe, {0x7252, 0x5, 0x8, 0x3, 0x4, 0xd7}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48804}, 0x40040) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002900)=ANY=[@ANYBLOB="3000000012000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000040000000e10f00128008000123132f19c2bf00687398e17bfdb60a0ae532083cf0cc8cdf1095e98c11a03b96931600e8570a3b8e20aedcd3f956561098cca205f6143fbea9b0323277536d06cbae7847cac618e3382bf85047041e3b9b94cda21a18b0a9286e7d3aafa33d42b33c2259a747bb60858cf4cc2a876263e6159e000000000000005a6315e10193f25e4f1244c6e261bd5a147df3c496bb2b41fe5534f75f153ce7deedf91e8f4e652ed6a45ba7a14943ce05ef83fa4637a8cabbd2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002e80)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r3, @ANYRESHEX=r7], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000002cc0)=ANY=[@ANYBLOB="bbb0a8881e2b6b87605ea61bd5e4428396686836bfb2eb1aceeadab80b6abc958337e178317c1525cac26bdbcb03911bfbfe0f40d5eec97c7fd2f4c37eee4a9ca90f15dcb1884d9c9613ce450b89e9c3ca540cb01f4016a953fbf28248fe712ecd7a87000000a8d53e4cbfb079dd4fc19fca4b551b1046dd75b4fd8a17986390c97f6ca21daddbcdf14a08f9aa2f1755be78b7c87fe9f5f78de1fe45766a767fbadd40aff830ef6f27b5f51698d918b319158543127c36de4cab368fdfef8b12e47d2177f80d73bddddee9d838461a560b168f9f597e5a0456c4b2346d3f62b4b7af3e8be915f8df08bc6400aa375845c31694e6c2bdac5602ef160828b8e61f644b92251479b52c940e124734f5eee4e770637e49a57197e78904f0d6ceafb421f7539e3a53ac6a36d1c158eb527e6c9bc8900d2cfc987338fddb294f88f5ae94aaff37e75c1fe34d6744d5b0f8916e2885ba2bbf556481bb586011b15ca71fb27b40cd5b40db8ea6a0b60000000000000000e19aecc38bce2dc645c311a3dff0798f6503a4edfe4f228dd7f801f3fc81ced89141ef25d5f20bda"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffff3e, 0x10, 0x0}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002540), 0x4400, 0x0) [ 1057.712675][ T5212] usb 4-1: Using ep0 maxpacket: 8 06:16:36 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000380)=0x81, 0x83d8) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)=""/37, &(0x7f00000000c0)=0x25) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, r4, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:36 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000080)={0x0, 0x9}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendto$netrom(r2, &(0x7f0000000180)="6541a0ae534604b80b95880de4979bf71afe733293533c0030298a96957e17ca5fe0c2dd8b2777a74598d6244f0770a4aa82e251724fab454f93a3d852f7f67d14c5ff931d531219", 0x48, 0x4040000, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:36 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000ec2306000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1057.790676][ T5166] usb 5-1: device descriptor read/8, error -61 [ 1057.823179][ T5212] usb 4-1: device descriptor read/all, error -71 [ 1057.833869][T17631] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1057.852961][ T27] audit: type=1804 audit(1681798596.709:3750): pid=17631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir363157862/syzkaller.Mb5z7L/836/bus" dev="sda1" ino=1167 res=1 errno=0 [ 1057.881272][ T27] audit: type=1800 audit(1681798596.749:3751): pid=17631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1167 res=0 errno=0 [ 1057.913851][ T5166] usb usb5-port1: unable to enumerate USB device [ 1057.985551][T17637] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1058.045655][ T27] audit: type=1804 audit(1681798596.769:3752): pid=17633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/433/bus" dev="sda1" ino=1176 res=1 errno=0 [ 1058.102248][ T27] audit: type=1800 audit(1681798596.779:3753): pid=17633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1176 res=0 errno=0 [ 1058.473252][T14364] usb 1-1: new high-speed USB device number 61 using dummy_hcd 06:16:37 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a3"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:37 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) open(0x0, 0x0, 0x0) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) [ 1058.763116][T14364] usb 1-1: Using ep0 maxpacket: 8 06:16:37 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1a0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) lseek(r3, 0x4, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1058.813417][ T2618] usb 2-1: new high-speed USB device number 79 using dummy_hcd 06:16:37 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x402002, 0x100) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92af60400000102090000052406000105244800000d78910100000000000000000006241a000000190581"], 0x0) [ 1058.873192][ T5166] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1058.883238][T14364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.900539][T14364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1058.916614][T14364] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.023284][T14364] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1059.032926][T14364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1059.041129][T14364] usb 1-1: SerialNumber: syz [ 1059.053204][ T5212] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1059.085100][T14364] hub 1-1:1.0: bad descriptor, ignoring hub [ 1059.091046][T14364] hub: probe of 1-1:1.0 failed with error -5 [ 1059.097280][ T5169] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1059.108471][T14364] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1059.114569][T14364] cdc_wdm 1-1:1.0: Unknown control protocol [ 1059.133099][ T5166] usb 5-1: Using ep0 maxpacket: 8 [ 1059.223140][T10141] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1059.253268][ T5166] usb 5-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1059.263792][ T5166] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1059.273481][ T5166] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1059.303160][ T5212] usb 4-1: Using ep0 maxpacket: 8 [ 1059.313541][ T2618] usb 2-1: device descriptor read/64, error -71 [ 1059.343082][ T5169] usb 6-1: Using ep0 maxpacket: 8 [ 1059.373807][ T5166] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1059.384425][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1059.392618][ T5166] usb 5-1: SerialNumber: syz [ 1059.434356][ T5166] hub 5-1:1.0: bad descriptor, ignoring hub [ 1059.441022][T14364] usb 1-1: USB disconnect, device number 61 [ 1059.447644][ T5166] hub: probe of 5-1:1.0 failed with error -5 [ 1059.453248][ T5212] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.457793][ T5166] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1059.470354][ T5169] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.483489][ T5169] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1059.485403][T10141] usb 3-1: Using ep0 maxpacket: 8 [ 1059.492383][ T5169] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.506405][ T5212] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1059.536227][ T5212] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.583214][ T2618] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1059.583760][ T5169] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1059.599970][ T5169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1059.608218][ T5169] usb 6-1: SerialNumber: syz [ 1059.633343][ T5212] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1059.642919][ T5212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1059.653362][T10141] usb 3-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 1059.654570][ T5169] hub 6-1:1.0: bad descriptor, ignoring hub [ 1059.664529][T10141] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1059.675882][ T5169] hub: probe of 6-1:1.0 failed with error -5 [ 1059.679207][ T5212] usb 4-1: SerialNumber: syz [ 1059.692899][ T5169] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1059.702720][ T5169] cdc_wdm 6-1:1.0: Unknown control protocol [ 1059.735770][ T5212] hub 4-1:1.0: bad descriptor, ignoring hub [ 1059.748892][ T5212] hub: probe of 4-1:1.0 failed with error -5 [ 1059.769961][T14364] usb 5-1: USB disconnect, device number 123 [ 1059.772190][ T5212] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1059.782357][T10141] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1059.794285][T10141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1059.808016][ T5212] cdc_wdm 4-1:1.0: Unknown control protocol [ 1059.814392][T10141] usb 3-1: SerialNumber: syz [ 1059.853068][ T2618] usb 2-1: Using ep0 maxpacket: 8 06:16:38 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x3004, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x9}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x330, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x100, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x10000}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x85, 0xa, "f6e2970a5b226afd404b71bdec1261885b4c2818552f99307996c74062729cd4a07f3430691b0865aeb8777d5da1ad488fd0317aeb1f871852e03e07ab979f051f9ac4fc5d2c901b8d2743879c09bc2b9e058f4024f836347894b80bfac6a6cb58879ae334ebaed1c96021cac75eb21a85f6b03824d9ac4249bf1882d0fc7eb358"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x81, 0x1}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x2, 0x90000000, 0x9}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @remote}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x3c, 0x6, "410c53889add1b0e13d1799719315e205e5cadc456aafcbdcba307d5f39bd9e16f69e3540575acc2515ea90b343f057ecdd3818e7c3e78f9"}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x214, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="0a63c9be5c89af0b0c97c38826327b113686bb7b1aa4627a6921aafeb9ab10"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x100}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x1ae, 0x2a, [@chsw_timing={0x68, 0x4, {0x7, 0x9}}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x4, 0x0, {0x225eb48, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3b5, 0x20}}, @perr={0x84, 0x7d, {0xb, 0x9, [@ext={{}, @broadcast, 0x1, @device_a, 0x1a}, @not_ext={{}, @device_b, 0x7, "", 0x2e}, @not_ext={{}, @device_a, 0x0, "", 0x30}, @not_ext={{}, @broadcast, 0x6, "", 0x3a}, @not_ext={{}, @device_a, 0x2, "", 0x23}, @not_ext={{}, @broadcast, 0x8001, "", 0x33}, @not_ext={{}, @device_a, 0x400, "", 0x1}, @not_ext={{}, @broadcast, 0x1, "", 0x32}, @not_ext={{}, @device_b, 0x7, "", 0x18}]}}, @supported_rates={0x1, 0x6, [{0x2}, {0x18, 0x1}, {0x3, 0x1}, {0x12, 0x1}, {0xc, 0x1}, {0x36}]}, @rann={0x7e, 0x15, {{0x1, 0x1c}, 0xc0, 0x5, @device_a, 0xfffffeff, 0x40, 0x8}}, @measure_req={0x26, 0xdd, {0x9, 0x5, 0x4, "f8c735a3c3d9ad563dab93952fe799ea650f22bb44ce7384e5da63948d21cf7d088f41b7229bc19820f151eec22b84e88241708f2dc6d36a288ac81ad0858a0f506b7422c0d012fd08c4d1eb884720729a812a0d596f235470939fa834d8546406bf3eaa5fcc7e51ff102cf8d83447c4395a967aa263c06a61d7edefe1f8d862b6a080a5608082db0164614ac4c1bb47aa662f0f9a7f65a8ae9ab96d28c3dbbf29a1e349136fea0ad80c13bbe2eba8d2a1505408a3f3d667f6a2af35c62e7e16238bed64dfab6d1b71466a66d0e25e6a9ea1b297994f61b749b1"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast1}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8001}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2c4c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2c44, 0x4, 0x0, 0x1, [{0x135c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x8a, 0x2, "b7b83b0346f6e471bc882c5a699796064f9cda2420f059ab6737c4141dc42d34733eec0230a1977b22ce381ee039a7b62f05a93a7cb0e3a093ffc2ec5ec405607c1ffb467b800258336bd1b002954aecf8049de8c491485dc25da0a054e2156764d39e8c1fa38b5bb83b22fc64071524ed819a6e3d1be7424b829de365f78f2d2b641e33a418"}, @NL80211_PKTPAT_MASK={0x62, 0x1, "0894cbef00d86a378a213d9931944f53779700c1fea12d8d2021677dc4f78d98fa0cf8987841955e2c734782bfcf4e2210574348819c985bd301d657fe5f24311b5a8ecf898c94d3d9966077336abf8e200161860741b0b34cd78a3926c6"}, @NL80211_PKTPAT_MASK={0xd5, 0x1, "9016c33825aa26660aba4ccb58a5a007efef082942b5077b440116ff80748289db274cdbab7acf39d5c3486b05c96415574ead061df925a070a1925a8fc027ed9fd515daf1129970ded96eb8c340b9299230690a8441729ee83e65f2fbf9436b082ab9b4b3a344de175c0cb5f9150534f6d110b0a4a77cf13064aef5a9f7d5eccf5b764ec1e6d20a71dcc70f6144b3823f5ec804d50dfd46adea234f7bff47f0e47415540f50408a9d5f5e94c2675e659cc1c575a0d49fd494d451d656002b642c67312755e1d1bb14d7e609ea0143ded8"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0xc5, 0x1, "de7a6eb0beaf5262b848db2e5eea7b6d9fb23ed473a09b2aeb048bdd7030ae7cb7efd34e194c3416beac1882f922b865f1eb38f7e6baf78ffeedf727e035f3d1fff4b62dda1800ca019053612cbfdc792a444b6c551953303169222b2730ca3985d4baadc265d23768fa0e48731c8ce615260fe0ef7bcd0d0351350f5388b832a06dea8896cadf13d933bdb18005617ffa23432d00aa9814016644b7764d901b54d1d0f530a1fd52e428f478ccb9d62c482abb5da6ef5961f4d8aafba74808fbe2"}, @NL80211_PKTPAT_MASK={0xbc, 0x1, "ae914570d68213805fc310dfbb90d512a873f56e0f61290c53576939aa8a06e93262323575a5b86c678f37cbf351cae03d8af737d34b11ff25305f72723d177405549e5d31a40cfc70ec4299a155d742179541d83937f3b66b6e771d755e95de345b7f54df550831707a591c616e3ab3b1dab539b17d061a50dd3280962359017a4ecd3c193738793b529b8c1100dbef58c861b5847c864eac03b7d91e46eb7acb649b28b14c29925040c6856dfa99f00b5e2f941c7f81a4"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xbf, 0x1, "7e3ab15a4679f018407a6712e697963c100770d1c3c8b990412920a8c70f133f021d81cb82fab11418ea27c6d2b4d845b55ccd3a90fbe755ae91ed4d82141b3e930202eb5d7e1da233c1f078af2dc0495d62cd737457e5a32d05cafa8942fe64d8852f0d9d46cf41bfdc255a464e3221e7604178c55f5c7ed6c783bea9a6c53b2934765cb27def763a052bb266d362de998f7281604f8fd58a76e16035c9ccbe6d1a1cface6cb216e8bbe29f8a2c7bb3c17084a6dd8b1dc9656a74"}, @NL80211_PKTPAT_MASK={0x13, 0x1, "a94d96ebf8529438c99560ad754ca3"}]}, {0x1124, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x37, 0x1, "25d082684819aa7d4332360a8e08d6add9113b12e502a9f4d7fc87574c9897d32c0828e453a246d3fa3a1a84f2ab9743f66b04"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "75cb1883a6a63ed102cf0e990e40e8ea1313bcaeac26e720a110b6fa8a617028f064661337bfd751f72cfef0cc4e365ab47822d1a60af85e81e013efbe1e586117a4f61c62cce96bcc4e7ccfa6b04d83e44e1971da47a39d577778f3329e2762c48e1f0fad8bbffcc200c1d14d09894756dc970b73a56205734b35f1222f82c6c6515ac9222e6de5fdc5759d04dffd344b5db3e2732f350141db09b722019bc728d7355c294073b1faf60826ca22f5a86384c6d26a0f64af479c5896510030180785c2633e8cf31c08b46ff1fb44980a48736548d1b6fbd115fbef906413cbb3d6629437a91b0f24ed4312f92f0d5b941f84357ec044695078c22a3443f5b3a1cf5bd73a1ae3bd8e343391e26c655619e7a21fd68732ec63adcb87f2ddab7db27b2043b2607bc29fbe6797476e9bca7df5205df2e00a1ab193084f49664968f462ee8b2c03b06e809d29aacf6df8d0b2a891940f5ddd34fc5264e4b8e0ad211f47ac07a9b204684c65668ab8f5501ff3e5bf40342898b385ce77d90687aad6c3d752c3edb90593af888766738425316e23446efcfde41ee6942b85bffa66ad71a8a343561079f92f8b83da6e8fa830a8656ea6771c0566cdf84829290d2a646e6dc2e044a932922259ed6293bf86768cca8474389e43b7a682db174e8b8bb6196a97033bd347975b07dfc7adfd7e2fc6824215aa1f64feaeaf1abec6baa0920272aaa2fee32ab8b3b79e254144ec424a8dc8ad6c73e4781e3caa7f35b4041ab954892f7aeaba58bde61613a09c5beeafe886ae4c880e55d4dad14d99f16273c7044c6cf58ab43723d9775cf28f3943a20ee6e137c347a6d98522dd2bce9ce3457dc1143ab59bae37cb61fef2f9c9983433045ab4d09924095d1c601419667810584bd277f300eaaab2cc68a554bd048b3cf9236af7b264148f9b762492dd8749121a61d1c9e650eb3511fa2c7048ea92c0c2141e9eb31651a603760c0cb70bf537857e5403db0129cdb91a76329771ba4b05ce54ea0b37066d8ede85c2424c3cde254e97660c28b56cf8781b2e89bf02771e7a766b0849d9371196eaaf9946589eb79f3eeb9216f8a5b74088e9b048f686387d0c0d48da005010347741740549cf4f2cebf8670080d2ac9b7b794d0f622cbad20031e58b6db8d5a678b3680ec5117dbd576798324217edca7da74df7934c3aca2d3af304afe504ac9fe743db13fee621fb1a81d6db0c1605499024b5cbe89d979b6da2ff5b025253db9e767b145576b6ba309339e271f464cfb0e3e36e30b63eb3820eb17db30215ceefbdb2677ac825271a6533013e3a6be41d629030daa729beaffde2a3501ac9dada9168323ec86cc72206007cb731bc6c5d2caaf0b477b9a7ecb661cfa0a7c0a121095a490c0ef2885a7dbbc08dd40263aaf4b070814d224c7c85f2bde0f2b77282dcfb68a6bb748aef6538d45c117f2592e041abc6452fbc44515f0e41cee04eb34d1fb6b9667d263ea06a34eeb3a3f4fdb801d0ce4488ca2fb00d825ceafa270630677afa30f5a548c941934d8083a4f6e32e91082627ddbc6646e15cd6b4851d3a4f693eee38ae58f3a6bc4e0b45f08c298d68dbab5295df939f12858c4bb94eabde095417188255c660e57216f2ef378c25649a03c23fc9856714b4bf8e553223abe8ba9cacc867b9328af40ff4a507325fc04d5bffe96ec13fb8241b65398001a80ef1efe2df595d34ad044e0dc2a372c69b37987c3c6147105d981845d5d3d63c023c87efada7d661139c084d155f269497433078ea3abe924b5c04f99441313ec38ae21eec32cc7028ceda1e27bb6d6ebb2abad9133e06b6ded8d31e8cdd9ed6793045993297457a2dc85b4513e525086abb88bb683276a6d8c2cd3866364af5dff61ddbefd65765797bd40529b0c533df9875a660ae91a278a4e36b333d3c3bcd48a8651270d25fec989d5e9d356631d5a2bbfb46f632f3f7cd8282876592735cb807974afce01472bf2107c5075d0d0ac327184967e13418bb188ea657465136e1585b2ad7fbc77f027e3c36a329b6f72285cae6bb6c69178ea1afdbe8e2465ea76f561a6b459d4ccf2964f65e36cc90ab898b4f8158b937ff582aab391f861b12ee53accf9a2a8251fce7f6b9b6446cb87a3a71bc58531415b1d73cd2118d0f5f6957934f6dc0d085c7e817f7d162186ab4a0cde9156fc14298b5f8b9239fac839782fc1a3e826d0f943f7bb8878e8bf0e9ec86e8f8151bd488fd661c406e1578ae1015e6ed3734adc430e35ae7ba762c18695774c915456b32478805ab2ed99a0dff96c6e666ff892409fd137fe802127764a964cfe0a0ba79eb11eb541cea3c1fe13ae76166e2aa7076803f676341a041d1c6fb0a63715dba480ef56fd8083bb9cd6112a87581993fbd858a86d75a5d093618901edd2455b6035a70f293f4e55a3422da6229b722d4923c05754b2109f90536ae0b5723d81ae3b2a13c4021a8c30be015e23e2b4df24762375e83211fd52d1c3237afde41e052191a649eff096442a22beee248230957de6f32d2db6a5f52c6558f26e4eceb0169189fdf53074c93fa2b1ec3740f4f5b586a80bed645ffd3e3432a9b1a8655691351f58aca12df96935c490cb124219e5c8db1d7b145f1984ad478389338a759721598aa45584b049c24e5f1e4208a5a02f57366599473203d9d7cc53ed2a7b1e69ce9f81847aba9fbeedffda8fc008cd037f3bfd872f88814b18e3a29afe2d6adcb3446595f7c30a81e6084de4563e3f9d3284e707de21a7cf2b4211a640472fbc2c5532002c21ba6eaf00a75c1b35439c0a2c735b0e0a12a55ce59f63aa55bf8cf78d20428a1440217c37e1745e0e0ea10af470449c00c73c249fbfa44dc999fa88995657a7bff0418f9b6b15d7d16f543d15bc085d34bfe0e940571ead3e53fc1b590794bc179be0bf2dbf50e51e260a0e5308bdd929c1553e556c3cc3afb9478f19bd0c499aca37e6daded176e4c23c9966243454c5052ebb05d2163fb5e706d1bc0361a9d85e8b89449be5b21be504377b115f9f919eeb193a6347dd58213259520e9f0166f3b7b1fead5d312236a6d2a74e802343292f404fad231fa67a911a5093887830e6e01e8c2e7eee0c5319485aa7372c8d4a47134a5f0118cebe8a50202e87e7d78e06359b3aa3f6d02857aaac86697666b8076cb90c5efadc5408edd8c0455921b898bbcb00366b0259a5f32ba7345fa673f0c7a34dbd18deed55ae8b882bd16211f1c38ca9439026123267fe3f36eb0939023f51e0b6861d787e7d6c6411bb9f62560374c27457c0febb50dd69a7350f827c96316b410f104849de006d84ee873b1f79111a3b5149c32f3fc13bba6f2b6deda2d4ceecd6988678768956ca887ee7b41cdf8812bbad9cda33ff62b956d64da77df7935aa5c8bd6ef23cab9628df3450d7407b684d82eed93e46b66e9c3fab366163a702b3c25755ff8f587c899c78edb01b61ef4cf56f45ae8574f2a1fcee2e63a7bfb8e4752daca3fcb03bf7764f88a6318c57a6b8ee05c0b5b965c9fba155d28988652f0539e6f72c3101141625a5f73748dc57b7efd344eb5fffcdda6cc17c5e65fe63d5ef0cfa68c19f075a286a09158793eb587c2fea8593664d89214d43d522f99abfd24e97a9fe6b58a567e802e6be0bfbc9a9829af0b7622bde34bf3b92e86cca074de638811ff3bb7530feb487b5b94f0dc1433e4e44f995b5c36fbf28b56804fb344bc88618d36a5f7ced890dea96be35ecb38e2291b40f386fd10463fe35411fa9b8233b941ed0f2c70cd53d487878cbd2bbc20aea84cfea2462a6337d4f17f6da6de2fb530ff95677820130351de7860ef0bc23b3ad318ecb23f382319195240c40f1b1f72ecaf07867730f9d71c4c9895517b55c5fcd866168c3197969bfc7fb4757df54badcbda363547fe6b98755ac1c9e45bc54444d4575f5945a5872c258fa23d863c820a4ba8b4daadd43fac6ff2767a19ffe2c41a14ba46816906299e2cc40091d7b3ddb9f66e88e8919d9c3177ceb2e0374c210acc4911f35a8d85fd2975b6b361093d466f07a3bd9537f23bd3111efb56faa3f760891f234ce883c536fdec67a266bb7a786ec687c558e273dac4a07bd03dca361ac4f69c470a436b45a1ff2445d43619e6355d6e845f64fcb0a859cd2c92e537f6d4e307e4798b105a0cc2f9fd91c0af9ad83c07ede88db260a2f1ea5b23b57441a66d01d1ba67dfe757a12ee3c2c2942d8038ba4ed4f31fe3040646b4df518a7f65f066a334a82388b81c34b752f01e748b94e81c6ec9e91299e1e3de0fa77e404d6fb82aa8beebbababe6b235f0bd2af5815783a75dd207f77fa8cb05c50ed31e230d53b1c91873932427dd97747bda477d30cfbd5950afa381f97ed776ef2161f060e3a81f13aa0ea92c2f279af7b6940bd9eb8d60b8231772bb6b03eaf095e35ee03a4d295e30a7a9e37eccc9d2a97f1e29961017046c4df5622cb7af9d04fb6c1f5207055065d546386315a9448b7482fd65b04a5db94f5ad764602b8820ca063e43b24d4426038ba5809e4e5f4223e4f3e9cd456a0443ef0129358edf6ab8c6492873d9cd26ee8047f21011a844cd285166db5183218ca81bc6ed748c0a473bf1b0e60cf8fa216bd4833c40cc157d23a78ed2ff1d4dfa867c481b5f43648d7c368d99bdb6fc8424e12e27476209f5351c097a208adf67cf5f83f3c4bbe11e87b2f928cb5a2309a966c796064d76461db07f288b427d9b487077ab2de5d4ad60f69a7f8544980772d6b44b951a5275d1d71a7b0dcb20484465706364d06dbc3866325e5fb9b256ffd6738bb8957bd38e3c2425041885a84949d19b1e6b1e4dd724b9f8b9f9c0ac5702ed6a934ef3fd79e5292bca1ccd50f359ad352646092c93c8a64e101cf514ba90e7f8349288ab05ef81b2d5fa8547e341052addb467e42619c27209a8d9d30a693784fd36665711329ea6ab176960f64d4bcec383548436ecc21b0205ed417eec690a5f02ff502e1437a735d7f38fbe4eada18fb02963bda1ef279404be0a2a1645541658e0e85dfb150674d3c12ba2da93597e9b8c60c54227bfe81ef0498abd9ba02d1793f49a2ca0486ab98a636e14b4ccbeae33d55c87f3b9aac3ce0f5e93e596ad052e9debe2bd870e166e2615b0c7aec3792f297164719659b966dc2ef69b71209fc5ff03cc0d803067b131ffcaec489a8bb3aee0d1fdfd4d87bbb9c026d15616e8b29b8e96e2035959ad42a5c5da6459b4a0e45e5d8d483f741b767d2281382cecea15067f461706333467c01594d2f8ca75e78b302cbb1116a22f2b620ddefd7733760dbc39d97665f6cf453720e7220231c266734993f700ecbfa95962f5135ef7e771acad0c78cb553828e34c94927fdd058e61c684eb6bdb7f253eecec00d1d40e57977f34819848ad1b534bd4338101b731767eeec39bc2517394faa501c368b4c23c1d894309aba865519b003c276ecfe64b12bd3154eaf647e140f588d42b678ceb5af2d6e8ce547ba6bf34ea1192aac4797c7b4e0aaa931743d81f10cd7e54458adea2112921362bb2fa602d01be5da1fce4c8ea53616a98c760e28610d1d16f5ffa894fbb13042a37d1ff3beb96139229167757e15120295a116f8eac3a82cb68c88b036fbc6fdbfd85e6189a99127b38dd95d0b89a344e43a14d6874adf413bf5530c3a6beeb690d0d1c4a1bc51aaac7b4f3d347124dd232a1b42625ffaba78f9f13b0c461e019468e893b2c7b8ba027eacd196dd01fc910eb8"}, @NL80211_PKTPAT_MASK={0x55, 0x1, "014ac8f70a3ceb03a69ba9068c5fa281a1978dd6b7b530642e8491a99d822f9c01d19f63d0cb89ebf63be2866479fa184572f9f205b2a84ce6bfa132b778ce42df2488524e49944f592d0a5b237d9196c0"}, @NL80211_PKTPAT_MASK={0x8a, 0x1, "ac10ac59ddb09e095d98fe14f0f364d6daaad56aaad3e43a67d3ab6b11172abe3c7531777c0f6488a52355f8264c6df7f5d841f80c9f63e596319a54d0dba71a81fde8f045a7982065fa0148dc61776d0f108d4e8add5bbe74d0f12447a3beb66776ea675ee89acde88c90dfd81ea89ff2a8c4bd92c138ed601ac92c88f507f124a5313f4fca"}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x85, 0x1, "3aca70b78c70a4df934d7de87dc3adf029a8ebb761531720af63ef0f05dd590256de3d44bacf2a60311cb35b3219fdf20be096721d3eed3b661f38feec43ac09a272a0a4b4c5c3e963354042ae2eca601f1a4770d204dc94c4e90cfeae468740dd152fe69e02105eebab2edb460a409d821d1a3b289b08f708890947740320e4bb"}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x88, 0x1, "38d0150a9d2585faf1a0351f08fc3f67dc06cc9d7fd7ed79f3ee690ec93ad0f76b46d6b1eb0b0531ce3bc217319a455e08e1b5226185754c89096f54dfb72caee2f38593ecab91029a267021b36b5ef204b65a0679e50d79bb8243c3b99c351b3616eec8351501d026cbafd82eed08aec5ddb838ab6f4399f0f9b10496cc80422ffbeb0c"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_PATTERN={0x65, 0x2, "f37bcbad89c1fa98a8213d3c6bb5c48e9a1065568529edc721cf8ec3dda4382e6ee899b6b55d6d6f1120d034beb50203ae803ce354714d88cc2f5fc908aef9378bbfde1370baa3dbaf43194e9528a0984b316160367325e582f543431dc721c788"}]}, {0x150, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x89, 0x2, "123ffbfd82eb28bfb642ebe8099c9ff694616881551a2f384d6e385ae1b874e966968eabab663751a95f5849b9906a004539108cf2b854aef2c934d757113cce7232ce2939a779b177b6409fd5575c6e9680fbac6d0aaa898617ca041be11842ef1785f5cae7cb68ddf12e418283e5be0d57fadcc52e956e60875d7fa084d2b9a95733de98"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}, @NL80211_PKTPAT_MASK={0x3c, 0x1, "d6f3112c5e404558a3fa27e3b4ef685dfbc163583e699919414714e501294786c787718020b1b1e3cf13f334f41df402a3a80167669a3676"}, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "4173a78e138a613dee1035bd5808b4c0104d4fab6e420280c08035b299f78cdae26fc3ac627d1392a63fe3750124da90e45fb5c3a4aad19e0423ab33d7f8b3e3afc346d58cf5f7859a16d3fdbf11dbd13b8531aff4215a6de7a069f852ff957d2caebbc423fcd83a9f53f92dec1d5f753828fbaf5d"}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xc9, 0x2, "1738235d5deafefcee11b4e0f581f391729ce18c12a7c8eef3d0d0b961f030680a735ed9b10539d45d7518336ff1c33f26359fdd6030b3bf8f3f35c3e6572ef5e03d4eec7089953fb0bca4245e03ad444ac6bc5a895f6f1f63f69f5e1ce0355d6f72ab20b55d9973747f88e1765d16b627f4f75ff5747a2ee68f691b7a8237cde416a607397581aa959621823db6ad5cfff0771003fb2f88152231d1a286e012292103c81b59f803fd1968a272ef05ad50697c802903e8a70159c80f7138dfc812bf52484f"}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x99, 0x2, "adb6e75e4383b8e166440d664633c6c7bfd409c64510c365dcfd4896e48347e828351678df1c245970fd2021493c700ae4813cc1668547fd4fdc10d30ffd083733c299234b1c132deae4f8ae53d689e35c12c7b710c55f150048d48845a3c787be14b5d9962a5b64921e16058233b42bd3cb18edf38c53f9e896e75071915889fc1f1ae4c79ee83fd6de86130092f584a8f0b8d067"}]}, {0x298, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf, 0x2, "f7bb523a5a7789934fc7b5"}, @NL80211_PKTPAT_PATTERN={0xb8, 0x2, "1092ed238ccd55fcd7ad86133cd424d96bac7ca77770ca434bc82608799e80674da938c66a212f5a6fcd6dc52cf9863bd07a861cc52c7497619d165bb0b758f02ef4d73004f1a9249958e428db02a62cfcbd1562fb49b6e0f53db41aa89e160b0aee2a8fed560d191e545543249f3b7b88d0225971b453c5e59c7e7e497d7ad3c20ba5da24429a38eb173d03974b614b9ac9e0f2850b30189c53ffbc06e7f5bc1be386e0f8d7120bb284fbcbab12e864b59798f9"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xee, 0x2, "c2719eba27339e31720f326e5014a00bf3139d50c44f0b92725e4669ca1ea034427741b29ce52ee8936709828686f645d245e30eacff6909f33838a8d174012eb1130b7cc368ac3dcd29736062c3da4531cb84bd81148b17e249fa93021abaa8fa691800060af3076d4b677d4bc5b113659250ca914ebd656dcce20c2ee3aa4325a6d222c5e70be125f8d20dcd0e1823eb3625796cd70a28c2ffa35d3a731112631c9b70cb60768b5e37585f4c730bfb653a92e886952e418626e6ab804da4a9d4ea74cbac57c2ff0521f0388327242b882603282a413944df4c75cf2a295d591b2841ff663756aa6943"}, @NL80211_PKTPAT_PATTERN={0x6, 0x2, "41c9"}, @NL80211_PKTPAT_PATTERN={0xc3, 0x2, "eb41fe71daa739be5ddd0a2a6ac2b8cb7ecdc1c980cb921b63a18dc3139731be53bc4ca3783595ddcd5a99e44e132b1b65825b4fa1fee13a588e9455df86c92696e73e9265e298befde20a4324ac483e9239dbff2f9088b708483e67e15586c2424f5d288b368ff3332557d7b76aab726754db521dff39d48cc2070140dde97a1b6ddd5d01f4b66ae4cd766140ca723c3d266eee03ea36e59d9d3065718d9d01e5949756c2dea0054678047a754385913cfed3c737a6208ebada8d66b31629"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x800}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x3004}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x1dd03) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1059.973227][ T2618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.003131][ T2618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1060.025246][T10141] usb 6-1: USB disconnect, device number 45 [ 1060.051106][ T2618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.098351][ T5164] usb 3-1: USB disconnect, device number 13 06:16:39 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000ec2306000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1060.153319][ T2618] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1060.162389][ T2618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1060.201660][ T2618] usb 2-1: SerialNumber: syz [ 1060.218262][ T5212] usb 4-1: USB disconnect, device number 117 [ 1060.244478][ T2618] hub 2-1:1.0: bad descriptor, ignoring hub [ 1060.250428][ T2618] hub: probe of 2-1:1.0 failed with error -5 [ 1060.260811][ T2618] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1060.281048][ T2618] cdc_wdm 2-1:1.0: Unknown control protocol [ 1060.363093][ T5169] usb 1-1: new high-speed USB device number 62 using dummy_hcd 06:16:39 executing program 5: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000ec2306000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:39 executing program 3: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000ec2306000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1060.533154][ T5172] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1060.555849][ T5164] usb 2-1: USB disconnect, device number 80 06:16:39 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) (async, rerun: 32) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x402002, 0x100) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92af60400000102090000052406000105244800000d78910100000000000000000006241a000000190581"], 0x0) [ 1060.603194][ T5169] usb 1-1: Using ep0 maxpacket: 8 06:16:39 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x402002, 0x100) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92af60400000102090000052406000105244800000d78910100000000000000000006241a000000190581"], 0x0) (rerun: 64) [ 1060.733155][ T5169] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.743665][ T5169] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1060.752712][ T5169] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.803158][ T5172] usb 5-1: Using ep0 maxpacket: 8 [ 1060.844086][ T5169] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1060.853411][ T5169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1060.861511][ T5169] usb 1-1: SerialNumber: syz [ 1060.863099][ T2618] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1060.893175][T10141] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1060.914407][ T5169] hub 1-1:1.0: bad descriptor, ignoring hub [ 1060.920345][ T5169] hub: probe of 1-1:1.0 failed with error -5 [ 1060.931960][ T5169] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1060.938387][ T5172] usb 5-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1060.948826][ T5169] cdc_wdm 1-1:1.0: Unknown control protocol [ 1060.955058][ T5166] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1060.962760][ T5172] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1060.982356][ T5172] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 06:16:39 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = open(0x0, 0x0, 0x0) (rerun: 32) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1a0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) lseek(r3, 0x4, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) [ 1061.083808][ T5172] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1061.092908][ T5172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1061.113214][ T5172] usb 5-1: SerialNumber: syz [ 1061.123342][ T2618] usb 6-1: Using ep0 maxpacket: 8 06:16:40 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1a0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) lseek(r3, 0x4, 0x3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1061.133089][T10141] usb 4-1: Using ep0 maxpacket: 8 [ 1061.164204][ T5172] hub 5-1:1.0: bad descriptor, ignoring hub [ 1061.170178][ T5172] hub: probe of 5-1:1.0 failed with error -5 [ 1061.176366][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1061.176380][ T27] audit: type=1804 audit(1681798600.039:3756): pid=17680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/566/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1061.208215][ T27] audit: type=1800 audit(1681798600.039:3757): pid=17680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 1061.213157][ T5172] cdc_wdm: probe of 5-1:1.0 failed with error -22 06:16:40 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000540)) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) syz_clone3(&(0x7f00000004c0)={0x1001000, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/153, 0x99, &(0x7f0000000440)=""/6, &(0x7f0000000480)=[0x0], 0x1, {r1}}, 0x58) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002800000000000000007fdf2500000000", @ANYRES32=0x0, @ANYBLOB="f3ff0800050010000500ffff06000500208000000b000100636c736163740000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x804) sendfile(r1, r3, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1061.273067][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1061.280465][T10141] usb 4-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1061.291004][ T2618] usb 6-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1061.307963][T10141] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1061.321474][ T2618] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1061.330532][ T27] audit: type=1804 audit(1681798600.189:3758): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/567/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1061.356339][ T5164] usb 1-1: USB disconnect, device number 62 [ 1061.362438][ T2618] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1061.378207][T10141] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1061.391316][ T27] audit: type=1800 audit(1681798600.189:3759): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 1061.423215][ T5166] usb 3-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 1061.433978][ T5166] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1061.473194][ T2618] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1061.482262][ T2618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1061.490480][T10141] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1061.499582][T10141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1061.503353][T14364] usb 5-1: USB disconnect, device number 124 [ 1061.508239][ T2618] usb 6-1: SerialNumber: syz [ 1061.526358][T10141] usb 4-1: SerialNumber: syz [ 1061.535840][ T5166] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1061.545155][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1061.553891][ T5166] usb 3-1: SerialNumber: syz [ 1061.574393][T10141] hub 4-1:1.0: bad descriptor, ignoring hub [ 1061.580319][T10141] hub: probe of 4-1:1.0 failed with error -5 [ 1061.587535][ T2618] hub 6-1:1.0: bad descriptor, ignoring hub [ 1061.593787][ T2618] hub: probe of 6-1:1.0 failed with error -5 [ 1061.600118][ T2618] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1061.607850][T10141] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1061.773098][ T5169] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1061.817748][T17672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.826528][T17672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.840222][T17672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.849652][T17672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.858438][T17672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 06:16:40 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000ec2306000105240800000d240f0100000000000000000006241a000000190581"], 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x125000, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000ec2306000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) 06:16:40 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1a0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) lseek(r3, 0x4, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1061.867248][T17672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.876117][T17672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.884995][T17672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.916883][ T5166] usb 6-1: USB disconnect, device number 46 [ 1061.923333][T10141] usb 4-1: USB disconnect, device number 118 [ 1061.931355][T17672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.964882][ T27] audit: type=1804 audit(1681798600.829:3760): pid=17689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/435/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1061.983950][T17672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.003101][ T5169] usb 2-1: device descriptor read/64, error 18 [ 1062.025834][ T27] audit: type=1800 audit(1681798600.849:3761): pid=17689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1062.033881][ T5166] usb 3-1: USB disconnect, device number 14 [ 1062.273224][T10141] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1062.303079][ T5169] usb 2-1: new high-speed USB device number 82 using dummy_hcd 06:16:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:41 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1062.353510][T14364] usb 1-1: new high-speed USB device number 63 using dummy_hcd 06:16:41 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x8000000000000000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) fdatasync(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1062.513287][ T5169] usb 2-1: device descriptor read/64, error 18 [ 1062.543069][T10141] usb 5-1: Using ep0 maxpacket: 8 [ 1062.603099][T14364] usb 1-1: Using ep0 maxpacket: 8 [ 1062.653543][ T5169] usb usb2-port1: attempt power cycle [ 1062.663247][T10141] usb 5-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1062.674102][T10141] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1062.683331][T10141] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1062.689616][ T5176] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1062.704280][ T5166] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1062.757645][T14364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.768000][T14364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1062.773422][T10141] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1062.783162][T14364] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.794483][T10141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1062.817131][T10141] usb 5-1: SerialNumber: syz [ 1062.864243][T10141] hub 5-1:1.0: bad descriptor, ignoring hub [ 1062.870192][T10141] hub: probe of 5-1:1.0 failed with error -5 [ 1062.876859][T10141] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1062.883060][ T5172] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1062.913301][T14364] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1062.922417][T14364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1062.931084][T14364] usb 1-1: SerialNumber: syz [ 1062.983225][ T5176] usb 4-1: Using ep0 maxpacket: 8 [ 1062.988418][ T5166] usb 6-1: Using ep0 maxpacket: 8 [ 1062.995364][T14364] hub 1-1:1.0: bad descriptor, ignoring hub [ 1063.001302][T14364] hub: probe of 1-1:1.0 failed with error -5 [ 1063.015866][T14364] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1063.021873][T14364] cdc_wdm 1-1:1.0: Unknown control protocol 06:16:41 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x17}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4048080) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406001c05240800000d240f0100000000000000000006241a000000190581"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) [ 1063.103267][ T5169] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1063.133263][ T5176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.143521][ T5166] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.153678][ T5172] usb 3-1: Using ep0 maxpacket: 8 [ 1063.174626][ T5166] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1063.174792][ T5176] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1063.193377][ T5166] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.205015][ T5176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.303374][ T5172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.313757][ T5166] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1063.322821][ T5166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1063.331244][ T5176] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1063.340438][ T5172] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1063.350039][ T5169] usb 2-1: device descriptor read/8, error -61 [ 1063.350506][ T2618] usb 1-1: USB disconnect, device number 63 [ 1063.356410][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1063.371192][ T5166] usb 6-1: SerialNumber: syz [ 1063.376188][ T5172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.376219][T10141] usb 5-1: reset high-speed USB device number 125 using dummy_hcd [ 1063.386988][ T5176] usb 4-1: SerialNumber: syz [ 1063.444479][ T5166] hub 6-1:1.0: bad descriptor, ignoring hub [ 1063.450420][ T5166] hub: probe of 6-1:1.0 failed with error -5 [ 1063.457853][ T5176] hub 4-1:1.0: bad descriptor, ignoring hub [ 1063.463885][ T5176] hub: probe of 4-1:1.0 failed with error -5 [ 1063.473735][ T5166] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1063.479658][ T5166] cdc_wdm 6-1:1.0: Unknown control protocol [ 1063.485753][ T5172] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1063.496477][ T5176] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1063.502400][ T5176] cdc_wdm 4-1:1.0: Unknown control protocol [ 1063.508432][ T5172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1063.519949][ T5172] usb 3-1: SerialNumber: syz [ 1063.604213][ T5172] hub 3-1:1.0: bad descriptor, ignoring hub [ 1063.610152][ T5172] hub: probe of 3-1:1.0 failed with error -5 [ 1063.617094][ T5172] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1063.643085][T10141] usb 5-1: Using ep0 maxpacket: 8 [ 1063.643083][ T5169] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1063.795842][ T5176] usb 6-1: USB disconnect, device number 47 [ 1063.823214][T17694] cdc_wdm 6-1:1.0: Error autopm - -16 [ 1063.843150][ T5169] usb 2-1: device descriptor read/8, error -61 06:16:42 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x80, "e646100be14ccdc80d5c249eba5fbd6c882a926612d25c531a2d26388bff4b1b", 0x100, 0x6, 0x3, 0x8, 0x2}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) [ 1063.926312][ T2618] usb 3-1: USB disconnect, device number 15 [ 1063.932649][ T27] audit: type=1804 audit(1681798602.789:3762): pid=17704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/436/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1063.962480][ T5164] usb 4-1: USB disconnect, device number 119 [ 1063.973327][ T5169] usb usb2-port1: unable to enumerate USB device [ 1063.977257][ T27] audit: type=1800 audit(1681798602.789:3763): pid=17704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1064.137228][ T5169] usb 5-1: USB disconnect, device number 125 06:16:43 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000540)) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) (async) syz_clone3(&(0x7f00000004c0)={0x1001000, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/153, 0x99, &(0x7f0000000440)=""/6, &(0x7f0000000480)=[0x0], 0x1, {r1}}, 0x58) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002800000000000000007fdf2500000000", @ANYRES32=0x0, @ANYBLOB="f3ff0800050010000500ffff06000500208000000b000100636c736163740000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) sendfile(r1, r3, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:43 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x8000000000000000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) fdatasync(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ftruncate(r0, 0x8000000000000000) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) fdatasync(r1) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) 06:16:43 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x1dd03) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:43 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:43 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000540)) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) syz_clone3(&(0x7f00000004c0)={0x1001000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/153, 0x99, &(0x7f0000000440)=""/6, &(0x7f0000000480)=[0x0], 0x1, {r1}}, 0x58) (async) syz_clone3(&(0x7f00000004c0)={0x1001000, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/153, 0x99, &(0x7f0000000440)=""/6, &(0x7f0000000480)=[0x0], 0x1, {r1}}, 0x58) lseek(r2, 0x0, 0x2) (async) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002800000000000000007fdf2500000000", @ANYRES32=0x0, @ANYBLOB="f3ff0800050010000500ffff06000500208000000b000100636c736163740000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x804) sendfile(r1, r3, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1064.411470][T17716] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1064.479396][ T27] audit: type=1804 audit(1681798603.339:3764): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/569/bus" dev="sda1" ino=1169 res=1 errno=0 06:16:43 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x17}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4048080) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406001c05240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 06:16:43 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x17}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) (async, rerun: 32) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4048080) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406001c05240800000d240f0100000000000000000006241a000000190581"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) [ 1064.509928][ T27] audit: type=1800 audit(1681798603.369:3765): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1169 res=0 errno=0 [ 1064.527241][T17718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.557333][T17718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:16:43 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:43 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r4, 0x0, 0x1dd03) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000540)="5c83d0f12e7939620085a286508b47240efbcdbdc4a16da3b6e80d753a09c984de1be4e0a77db03ed598894e19665e3491f9eee6b22d1185d3460244cf3e156703a0a82ddf43b0d82d23f610f44add2a134019575a047f2a9bd2f2ea32a12ef86543e1715c06879d7c642023aa827f2d4945abf3baa7926ac43c0b822d2e9ac6a8913d8ba8581a76e486a71a4a2ad57ac7fa71ae1dd5421f157ac82bb78816d6bc790697536cb623b40ec678882daa09aafe88f0f61f48c8fa8a949145adb2507a6e9cd11440f481bd1e72dfc27b2fd2b3c3fdd78e33c3ad3ae3b5d33c772c8451378cd3950a026df5c41755b7d393051ffb", 0xf2}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="240000000000000001000000010000006fc05add7c7ee7950a31efa300b57723eafc8cc64b4561d7ee7c21124c36bbaf621625eaf01d656f1b9e1b6efc93b4c4d58b9abc31b198d9d3b6761202f0452daf220aec25aeedd6626ba012dd454667da6892982e62498b373442284c11e010851630311216b3ec39f42cea2e038dd3e8df90438e3c8de6ba0273479b5cf8f1fd7d661ad0b608d9921f1b96afb7bf129842781e842b889b2b3ec42d97d800"/189, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x78}, 0x2404cc04) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000024c0)={0x3c, r11, 0x1, 0x0, 0x0, {0x42}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1f4, r11, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xdbdb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x15}, {0x6, 0x11, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2c}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x4e7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfff}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1064.663169][ T5169] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1064.693162][ T5176] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1064.701155][ T5166] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1064.793302][T14364] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1064.933083][ T5169] usb 3-1: Using ep0 maxpacket: 8 [ 1064.983249][ T5176] usb 6-1: Using ep0 maxpacket: 8 [ 1064.988404][ T5166] usb 4-1: Using ep0 maxpacket: 8 [ 1064.993835][T14364] usb 2-1: device descriptor read/64, error 18 [ 1065.023152][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1065.063232][ T5172] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1065.073861][ T5169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.084180][ T5169] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.093464][ T5169] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.123225][ T5176] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.133571][ T5166] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.144497][ T5176] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.154176][ T5166] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.163419][ T5176] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.174610][ T5166] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.185848][ T5169] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1065.195591][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1065.203996][ T5169] usb 3-1: SerialNumber: syz [ 1065.255239][ T5169] hub 3-1:1.0: bad descriptor, ignoring hub [ 1065.261275][ T5169] hub: probe of 3-1:1.0 failed with error -5 [ 1065.268312][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1065.273723][ T5176] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1065.282847][ T5166] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1065.296143][ T5169] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1065.303184][T14364] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1065.310810][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1065.319440][ T5176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1065.329482][ T5176] usb 6-1: SerialNumber: syz [ 1065.334383][ T5172] usb 5-1: Using ep0 maxpacket: 8 [ 1065.339507][ T5166] usb 4-1: SerialNumber: syz [ 1065.384019][ T5176] hub 6-1:1.0: bad descriptor, ignoring hub [ 1065.389946][ T5176] hub: probe of 6-1:1.0 failed with error -5 [ 1065.397360][ T5166] hub 4-1:1.0: bad descriptor, ignoring hub [ 1065.403348][ T5166] hub: probe of 4-1:1.0 failed with error -5 [ 1065.412128][ T5166] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1065.418483][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.429887][ T5176] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1065.435832][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.444809][ T5176] cdc_wdm 6-1:1.0: Unknown control protocol [ 1065.452879][ T5166] cdc_wdm 4-1:1.0: Unknown control protocol [ 1065.462138][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 06:16:44 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x8000000000000000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) fdatasync(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1065.479979][ T5172] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.493098][T14364] usb 2-1: device descriptor read/64, error 18 [ 1065.500894][ T5172] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.515517][ T5172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.593207][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1065.603280][ T5172] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1065.615784][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1065.625567][T14364] usb usb2-port1: attempt power cycle [ 1065.631247][ T5172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1065.639768][ T9] usb 1-1: SerialNumber: syz [ 1065.644930][ T5172] usb 5-1: SerialNumber: syz [ 1065.686699][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 1065.692831][ T9] hub: probe of 1-1:1.0 failed with error -5 [ 1065.704301][ T5172] hub 5-1:1.0: bad descriptor, ignoring hub [ 1065.710243][ T5172] hub: probe of 5-1:1.0 failed with error -5 [ 1065.843492][ T5176] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 1065.843877][ T5164] usb 6-1: USB disconnect, device number 48 [ 1065.924158][ T9] cdc_wdm 1-1:1.0: cdc-wdm2: USB WDM device [ 1065.925500][ T5212] usb 4-1: USB disconnect, device number 120 [ 1065.931515][ T5172] cdc_wdm 5-1:1.0: cdc-wdm3: USB WDM device [ 1065.943313][T17734] cdc_wdm 4-1:1.0: Error autopm - -16 [ 1065.947049][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 1065.955403][ T5172] cdc_wdm 5-1:1.0: Unknown control protocol [ 1065.985237][ T9] usb 1-1: USB disconnect, device number 64 [ 1065.995098][ T5172] usb 5-1: USB disconnect, device number 126 [ 1066.053270][T14364] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1066.083177][ T5176] usb 3-1: Using ep0 maxpacket: 8 [ 1066.273323][T14364] usb 2-1: device descriptor read/8, error -61 06:16:45 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x125000, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) 06:16:45 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:45 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) io_setup(0x0, &(0x7f0000000080)=0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x7, r2, &(0x7f00000000c0)="303d5ec5345d99c05f45871ed4e8e9567e0adcdc0bad2c8a2c26a383a09f0eea", 0x20, 0x7ff, 0x0, 0x1, r4}]) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1066.492708][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1066.492724][ T27] audit: type=1804 audit(1681798605.349:3768): pid=17745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/667/bus" dev="sda1" ino=1172 res=1 errno=0 06:16:45 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x100}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) ftruncate(r4, 0x800) lseek(r4, 0x20400, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ftruncate(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x7675, 0x7, 0x1, 0x207, r4, 0xf7, '\x00', r3, r0, 0x1, 0x0, 0x5}, 0x48) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1066.530120][ T27] audit: type=1800 audit(1681798605.389:3769): pid=17745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1172 res=0 errno=0 [ 1066.555929][T14364] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1066.593262][ T2618] usb 3-1: USB disconnect, device number 16 [ 1066.606555][ T27] audit: type=1804 audit(1681798605.469:3770): pid=17750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/438/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1066.642268][ T27] audit: type=1800 audit(1681798605.469:3771): pid=17750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1066.667573][ T27] audit: type=1804 audit(1681798605.529:3772): pid=17751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/438/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1066.700139][ T27] audit: type=1804 audit(1681798605.559:3773): pid=17750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/438/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1066.733300][ T5176] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1066.823923][T14364] usb 2-1: device descriptor read/8, error -61 [ 1066.830182][ T9] usb 4-1: new high-speed USB device number 121 using dummy_hcd 06:16:45 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x180) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}, 0x2}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) flock(r0, 0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000008000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000001901817fe2d2015d70df798c798c231fc99f94c4b83613a85d164b9f720b6d5c1d97827e9c3a66927ebc938bdc19bb2e8d333a7638604ac0c3f11b75d5f46ca96df6e3e810581e430946f0d265dbf020bc8209f2bd97f4043cb6d20b1f867b1b67d39e68a1220fb48bbcc035fa6f109ed198b7d9ae10798ce34741493060968e5ebb485744a0fbfa635915498c7322b7c1f9910067fbd88977b91dd63978"], 0x0) [ 1066.953228][T14364] usb usb2-port1: unable to enumerate USB device [ 1066.983228][ T5176] usb 5-1: Using ep0 maxpacket: 8 [ 1067.073529][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1067.123254][ T5176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.137810][ T5176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1067.147153][ T5176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.233217][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.243543][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1067.252544][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.264015][ T5176] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 06:16:46 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x100}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) ftruncate(r4, 0x800) lseek(r4, 0x20400, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ftruncate(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x7675, 0x7, 0x1, 0x207, r4, 0xf7, '\x00', r3, r0, 0x1, 0x0, 0x5}, 0x48) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1067.276730][ T5176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1067.285133][ T5176] usb 5-1: SerialNumber: syz [ 1067.285550][ T2618] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1067.325594][ T5176] hub 5-1:1.0: bad descriptor, ignoring hub [ 1067.331540][ T5176] hub: probe of 5-1:1.0 failed with error -5 [ 1067.335158][ T27] audit: type=1804 audit(1681798606.199:3774): pid=17755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/439/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1067.350683][ T5176] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1067.378001][ T5176] cdc_wdm 5-1:1.0: Unknown control protocol [ 1067.386504][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1067.394931][ T27] audit: type=1800 audit(1681798606.249:3775): pid=17755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1067.402392][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1067.425403][ T9] usb 4-1: SerialNumber: syz 06:16:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x282080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0x40, 0x4, &(0x7f00000002c0)="34fa58d82a5e0faceb97fbdf5ec8247aa7d40a3eaf0d16e2199c903a08cd98619757009dc206ebfc96e767c5ca6a76173c846c8f3ca3dbcb8cae4640f11bf7858c2581a5bb2e2ade48849774123f62b630bb9e3e3a024a54710cdfd999f3a8d7c41645509b84f9c89d26484c7a7b8aabce6541b124e8ef3eea98194fb14e5a9c5b64dc769ed0f689ca44d87fa77109a06a6eb6d411b4b82c4ea1d48bce24e2d1c7ab85aa4d4c2454e503228cc1f202e54ba3aa9549339a5e08786a1963562ce1dd180b30904bfc64e5300f54fa0a8edb", {0x101, 0x9, 0x42303159, 0x3, 0xffffffff, 0x401, 0x2, 0x9}}) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x2, 0x2, 0x3eb1}, 0x14) open(0x0, 0x400200, 0xa4) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000003c0)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900f19b3c8e000000000009025c00020100f92a090424d78b1308d03fb0e5ed7a2430f3853f00000102090000052406000105240800000d240f010000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:46 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1067.460148][ T27] audit: type=1804 audit(1681798606.309:3776): pid=17756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/439/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1067.494758][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 1067.500710][ T9] hub: probe of 4-1:1.0 failed with error -5 06:16:46 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1067.538671][ T9] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1067.562386][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 1067.573240][ T2618] usb 3-1: Using ep0 maxpacket: 8 [ 1067.593261][ T27] audit: type=1804 audit(1681798606.319:3777): pid=17755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/439/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1067.693338][ T2618] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1067.702878][ T2618] usb 3-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 1067.714779][ T2618] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1067.724203][ T2618] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1067.813166][ T2618] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.08 [ 1067.822505][ T2618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1067.830899][ T2618] usb 3-1: SerialNumber: syz [ 1067.863569][T17758] usb 5-1: reset high-speed USB device number 127 using dummy_hcd [ 1067.877316][ T2618] hub 3-1:1.0: bad descriptor, ignoring hub [ 1067.883484][ T2618] hub: probe of 3-1:1.0 failed with error -5 [ 1067.889899][ T2618] cdc_wdm 3-1:1.0: skipping garbage [ 1067.895680][ T2618] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1067.903347][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1068.103447][T17758] usb 5-1: Using ep0 maxpacket: 8 [ 1068.113159][ T9] usb 2-1: device descriptor read/64, error 18 [ 1068.203153][T10141] usb 3-1: USB disconnect, device number 17 [ 1068.393080][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1068.485297][ T5176] usb 5-1: USB disconnect, device number 127 06:16:47 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x180) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}, 0x2}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) flock(r0, 0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000008000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000001901817fe2d2015d70df798c798c231fc99f94c4b83613a85d164b9f720b6d5c1d97827e9c3a66927ebc938bdc19bb2e8d333a7638604ac0c3f11b75d5f46ca96df6e3e810581e430946f0d265dbf020bc8209f2bd97f4043cb6d20b1f867b1b67d39e68a1220fb48bbcc035fa6f109ed198b7d9ae10798ce34741493060968e5ebb485744a0fbfa635915498c7322b7c1f9910067fbd88977b91dd63978"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) creat(&(0x7f0000000140)='./file0\x00', 0x180) (async) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}, 0x2}, 0x18) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) flock(r0, 0x5) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000008000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000001901817fe2d2015d70df798c798c231fc99f94c4b83613a85d164b9f720b6d5c1d97827e9c3a66927ebc938bdc19bb2e8d333a7638604ac0c3f11b75d5f46ca96df6e3e810581e430946f0d265dbf020bc8209f2bd97f4043cb6d20b1f867b1b67d39e68a1220fb48bbcc035fa6f109ed198b7d9ae10798ce34741493060968e5ebb485744a0fbfa635915498c7322b7c1f9910067fbd88977b91dd63978"], 0x0) (async) [ 1068.603089][ T9] usb 2-1: device descriptor read/64, error 18 [ 1068.623482][ T5172] usb 4-1: USB disconnect, device number 121 [ 1068.723498][ T9] usb usb2-port1: attempt power cycle 06:16:47 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000080)={0x7, 'bond_slave_0\x00', {0xcec8}, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x20400, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x1, 0x1}}, 0x18) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) ftruncate(r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="011a00000100000018000000", @ANYRES32=r5, @ANYRES16=r2]) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000706241a000000190581"], 0x0) [ 1068.883066][T14364] usb 3-1: new high-speed USB device number 18 using dummy_hcd 06:16:47 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ppoll(&(0x7f0000000080)=[{r1, 0x90}, {r2, 0x204}, {r3, 0x100}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x1f]}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:47 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0xb9db0000) lseek(r1, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r5, r2, &(0x7f0000000180)=0xbb, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) lchown(&(0x7f0000000080)='./bus\x00', r7, 0xffffffffffffffff) 06:16:47 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1069.143077][T14364] usb 3-1: Using ep0 maxpacket: 8 [ 1069.148282][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1069.193082][ T5164] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1069.253388][ T9] usb 2-1: Invalid ep0 maxpacket: 155 [ 1069.283264][ T5172] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1069.313357][T14364] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1069.322063][T14364] usb 3-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 1069.332462][T14364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1069.342021][T14364] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1069.363067][ T5176] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1069.413215][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1069.433111][ T5164] usb 1-1: Using ep0 maxpacket: 8 [ 1069.433286][T14364] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.08 [ 1069.447366][T14364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1069.455475][T14364] usb 3-1: SerialNumber: syz [ 1069.504817][T14364] hub 3-1:1.0: bad descriptor, ignoring hub [ 1069.511349][T14364] hub: probe of 3-1:1.0 failed with error -5 [ 1069.518152][T14364] cdc_wdm 3-1:1.0: skipping garbage [ 1069.523788][ T9] usb 2-1: Invalid ep0 maxpacket: 155 [ 1069.529413][ T9] usb usb2-port1: unable to enumerate USB device [ 1069.536113][ T5172] usb 5-1: Using ep0 maxpacket: 8 [ 1069.541379][T14364] cdc_wdm: probe of 3-1:1.0 failed with error -22 06:16:48 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1069.553262][ T5164] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.570065][ T5164] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1069.579205][ T5164] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.644062][ T5176] usb 4-1: Using ep0 maxpacket: 8 [ 1069.663433][ T5172] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.673144][ T5164] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1069.679791][ T5172] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 06:16:48 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x180) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}, 0x2}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}, 0x2}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) flock(r0, 0x5) (async) flock(r0, 0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000008000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000001901817fe2d2015d70df798c798c231fc99f94c4b83613a85d164b9f720b6d5c1d97827e9c3a66927ebc938bdc19bb2e8d333a7638604ac0c3f11b75d5f46ca96df6e3e810581e430946f0d265dbf020bc8209f2bd97f4043cb6d20b1f867b1b67d39e68a1220fb48bbcc035fa6f109ed198b7d9ae10798ce34741493060968e5ebb485744a0fbfa635915498c7322b7c1f9910067fbd88977b91dd63978"], 0x0) [ 1069.682828][ T5164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1069.691884][ T5172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.700206][ T5164] usb 1-1: SerialNumber: syz [ 1069.765727][ T5164] hub 1-1:1.0: bad descriptor, ignoring hub [ 1069.773445][ T5176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.776662][ T5164] hub: probe of 1-1:1.0 failed with error -5 [ 1069.784660][ T5176] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1069.796984][ T5164] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1069.799208][ T5176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.823447][ T5172] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1069.832526][ T5172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1069.845220][ T5172] usb 5-1: SerialNumber: syz [ 1069.884196][ T5172] hub 5-1:1.0: bad descriptor, ignoring hub [ 1069.893041][ T5172] hub: probe of 5-1:1.0 failed with error -5 [ 1069.901591][ T5172] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1069.907967][ T5176] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1069.917191][ T5172] cdc_wdm 5-1:1.0: Unknown control protocol [ 1069.923751][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1069.933332][ T5176] usb 4-1: SerialNumber: syz [ 1070.005594][ T5176] hub 4-1:1.0: bad descriptor, ignoring hub [ 1070.014823][ T5176] hub: probe of 4-1:1.0 failed with error -5 [ 1070.021927][ T5176] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1070.031159][ T5176] cdc_wdm 4-1:1.0: Unknown control protocol [ 1070.033450][ T5212] usb 3-1: reset high-speed USB device number 18 using dummy_hcd 06:16:49 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 1070.093295][ T5164] usb 1-1: USB disconnect, device number 65 [ 1070.213086][ T5176] usb 5-1: USB disconnect, device number 2 [ 1070.293162][ T5212] usb 3-1: Using ep0 maxpacket: 8 [ 1070.373298][ T5176] usb 4-1: USB disconnect, device number 122 06:16:49 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0xb9db0000) lseek(r1, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r5, r2, &(0x7f0000000180)=0xbb, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) lchown(&(0x7f0000000080)='./bus\x00', r7, 0xffffffffffffffff) 06:16:49 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x282080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r2 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0x40, 0x4, &(0x7f00000002c0)="34fa58d82a5e0faceb97fbdf5ec8247aa7d40a3eaf0d16e2199c903a08cd98619757009dc206ebfc96e767c5ca6a76173c846c8f3ca3dbcb8cae4640f11bf7858c2581a5bb2e2ade48849774123f62b630bb9e3e3a024a54710cdfd999f3a8d7c41645509b84f9c89d26484c7a7b8aabce6541b124e8ef3eea98194fb14e5a9c5b64dc769ed0f689ca44d87fa77109a06a6eb6d411b4b82c4ea1d48bce24e2d1c7ab85aa4d4c2454e503228cc1f202e54ba3aa9549339a5e08786a1963562ce1dd180b30904bfc64e5300f54fa0a8edb", {0x101, 0x9, 0x42303159, 0x3, 0xffffffff, 0x401, 0x2, 0x9}}) (async) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x2, 0x2, 0x3eb1}, 0x14) (async) open(0x0, 0x400200, 0xa4) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000003c0)) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900f19b3c8e000000000009025c00020100f92a090424d78b1308d03fb0e5ed7a2430f3853f00000102090000052406000105240800000d240f010000000000"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:49 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x282080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0x40, 0x4, &(0x7f00000002c0)="34fa58d82a5e0faceb97fbdf5ec8247aa7d40a3eaf0d16e2199c903a08cd98619757009dc206ebfc96e767c5ca6a76173c846c8f3ca3dbcb8cae4640f11bf7858c2581a5bb2e2ade48849774123f62b630bb9e3e3a024a54710cdfd999f3a8d7c41645509b84f9c89d26484c7a7b8aabce6541b124e8ef3eea98194fb14e5a9c5b64dc769ed0f689ca44d87fa77109a06a6eb6d411b4b82c4ea1d48bce24e2d1c7ab85aa4d4c2454e503228cc1f202e54ba3aa9549339a5e08786a1963562ce1dd180b30904bfc64e5300f54fa0a8edb", {0x101, 0x9, 0x42303159, 0x3, 0xffffffff, 0x401, 0x2, 0x9}}) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x2, 0x2, 0x3eb1}, 0x14) open(0x0, 0x400200, 0xa4) ftruncate(r3, 0x800) (async) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000003c0)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900f19b3c8e000000000009025c00020100f92a090424d78b1308d03fb0e5ed7a2430f3853f00000102090000052406000105240800000d240f010000000000"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900f19b3c8e000000000009025c00020100f92a090424d78b1308d03fb0e5ed7a2430f3853f00000102090000052406000105240800000d240f010000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:49 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ppoll(&(0x7f0000000080)=[{r1, 0x90}, {r2, 0x204}, {r3, 0x100}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x1f]}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:49 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ppoll(&(0x7f0000000080)=[{r1, 0x90}, {r2, 0x204}, {r3, 0x100}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x1f]}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x125000, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) (async) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ppoll(&(0x7f0000000080)=[{r1, 0x90}, {r2, 0x204}, {r3, 0x100}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x1f]}, 0x8) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) 06:16:49 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) [ 1070.686702][T17802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 06:16:49 executing program 3: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ppoll(&(0x7f0000000080)=[{r1, 0x90}, {r2, 0x204}, {r3, 0x100}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x1f]}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:16:49 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) [ 1070.741804][T17802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.773364][ T5176] usb 3-1: USB disconnect, device number 18 06:16:49 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) 06:16:49 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1dd03) [ 1070.905547][T10141] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1070.963168][T14364] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1071.013088][ T5172] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1071.113078][ T5176] usb 4-1: new high-speed USB device number 123 using dummy_hcd 06:16:50 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='8)\'}(\xb4@-:,$-]/\x00', 0xf, 0x2) 06:16:50 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1dd03) [ 1071.153207][T10141] usb 1-1: Using ep0 maxpacket: 8 [ 1071.163331][T14364] usb 2-1: device descriptor read/64, error 18 [ 1071.263100][ T5172] usb 5-1: Using ep0 maxpacket: 8 [ 1071.273489][T10141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.283718][T10141] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1071.292703][T10141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.383179][T10141] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1071.392324][T10141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1071.393079][ T5176] usb 4-1: Using ep0 maxpacket: 8 [ 1071.400585][T10141] usb 1-1: SerialNumber: syz [ 1071.405795][ T5172] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.430849][ T5172] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1071.439860][ T5172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.468178][T10141] hub 1-1:1.0: bad descriptor, ignoring hub [ 1071.476069][T10141] hub: probe of 1-1:1.0 failed with error -5 [ 1071.483908][T14364] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1071.491565][ T7] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1071.495401][T10141] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1071.508830][T10141] cdc_wdm 1-1:1.0: Unknown control protocol [ 1071.543289][ T5176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.553698][ T5172] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1071.563365][ T5172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1071.571413][ T5176] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1071.580692][ T5172] usb 5-1: SerialNumber: syz [ 1071.585587][ T5176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.634209][ T5172] hub 5-1:1.0: bad descriptor, ignoring hub [ 1071.640153][ T5172] hub: probe of 5-1:1.0 failed with error -5 [ 1071.648735][ T5172] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1071.654958][ T5172] cdc_wdm 5-1:1.0: Unknown control protocol [ 1071.683533][ T5176] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1071.692707][T14364] usb 2-1: device descriptor read/64, error 18 [ 1071.699906][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1071.708597][ T5176] usb 4-1: SerialNumber: syz [ 1071.764810][ T5176] hub 4-1:1.0: bad descriptor, ignoring hub [ 1071.770887][ T5176] hub: probe of 4-1:1.0 failed with error -5 [ 1071.777483][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1071.813275][T14364] usb usb2-port1: attempt power cycle [ 1071.826127][ T5176] cdc_wdm 4-1:1.0: cdc-wdm2: USB WDM device [ 1071.831761][T10141] usb 1-1: USB disconnect, device number 66 [ 1071.833325][ T5176] cdc_wdm 4-1:1.0: Unknown control protocol [ 1071.913540][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.924052][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1071.933016][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.993416][ T5212] usb 5-1: USB disconnect, device number 3 [ 1072.043173][ T7] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1072.052359][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1072.060763][ T7] usb 3-1: SerialNumber: syz [ 1072.093302][ T5176] usb 4-1: USB disconnect, device number 123 [ 1072.114400][ T7] hub 3-1:1.0: bad descriptor, ignoring hub [ 1072.120443][ T7] hub: probe of 3-1:1.0 failed with error -5 [ 1072.127031][ T7] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1072.263113][T14364] usb 2-1: new high-speed USB device number 95 using dummy_hcd 06:16:51 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1dd03) 06:16:51 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1dd03) [ 1072.376260][T14364] usb 2-1: Invalid ep0 maxpacket: 155 [ 1072.377381][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 1072.377397][ T27] audit: type=1804 audit(1681798611.239:3830): pid=17831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/677/bus" dev="sda1" ino=1165 res=1 errno=0 [ 1072.434155][ T5212] usb 3-1: USB disconnect, device number 19 [ 1072.478142][ T27] audit: type=1804 audit(1681798611.289:3831): pid=17831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/677/bus" dev="sda1" ino=1165 res=1 errno=0 [ 1072.510057][ T27] audit: type=1804 audit(1681798611.299:3832): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/442/bus" dev="sda1" ino=1175 res=1 errno=0 [ 1072.539260][ T27] audit: type=1804 audit(1681798611.299:3833): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/442/bus" dev="sda1" ino=1175 res=1 errno=0 [ 1072.564453][ T27] audit: type=1804 audit(1681798611.299:3834): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/442/bus" dev="sda1" ino=1175 res=1 errno=0 [ 1072.591470][ T27] audit: type=1804 audit(1681798611.299:3835): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/442/bus" dev="sda1" ino=1175 res=1 errno=0 [ 1072.593085][T14364] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1072.624569][ T27] audit: type=1804 audit(1681798611.309:3836): pid=17831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/677/bus" dev="sda1" ino=1165 res=1 errno=0 [ 1072.649988][ T27] audit: type=1804 audit(1681798611.309:3837): pid=17831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/677/bus" dev="sda1" ino=1165 res=1 errno=0 [ 1072.743147][T14364] usb 2-1: Invalid ep0 maxpacket: 155 [ 1072.748690][T14364] usb usb2-port1: unable to enumerate USB device 06:16:52 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendmsg$AUDIT_USER(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1dd03) 06:16:52 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x314, r0, 0x80000}) bind(r1, &(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0xff, 0x85, "937b569064f99aec49831726a5f522bb086d57173bc55a6aa17b5b05c1c6445f14512cd48ccb41682ebd1f5684f09805cbd8e8445f90784cf047e707dfd2e9", 0x11}, 0x80) 06:16:52 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) 06:16:52 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200000, 0x44) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="01b9ee95c0e19ece4669ceb7", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 06:16:52 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='8)\'}(\xb4@-:,$-]/\x00', 0xf, 0x2) [ 1073.646251][ T27] audit: type=1804 audit(1681798612.509:3838): pid=17839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/443/bus" dev="sda1" ino=1182 res=1 errno=0 06:16:52 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c00000018001c052dbd7000fcdbdf2580008006fe01fd060088000008000b40400000000c00090007000440", @ANYRES32=0x0, @ANYBLOB="08000700ac1414aa1800168014000200ff0200000000000000000000000000011c0008801bce1a080e3a3e27cee3efde51de391bef947a6a9fa61df308000b00060000000800100005000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) r4 = socket(0x15, 0x800, 0x1) lseek(r2, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r5, 0x0, 0x1dd03) setuid(0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x38) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r8]) sendmmsg$unix(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}], 0x78, 0x10}}, {{&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001540)="43f1a258ee71d2092e94f3b7546feca0b37164facf061e7abf547d03a7f991b48692bd303592a539ad713a3b03ebc907116ba44cc01b7d4b10d98c57138470d25624be4d440a6b955b25e2c478e46e4b9f952ba3e872c6aab0067c837770b027621a75cd63eb990e64a84636dde166071d0de99faf19b97ae7626909477b59ac19461e9aca59d36662883922", 0x8c}, {&(0x7f0000001600)="884b586942e971e371289b0864c754feb81640165f37c8c215bf54e6f8674ed4fc725d5e3037567989b7bc5d", 0x2c}, {&(0x7f0000001640)="a44aa258fc08db8a480f3991c8a9860c698acbfdddc6079c98af1d6eb0f347475a7af3721a6853a944370fcb5c87e02d91538f6ac5fe041a2e0501a39dc371722784ebfb5f03220f2bb2ca8d42232bd003d0ffedd75a4aea6f8d22f136b4819ab2040c351c378bb0235e22c0974181225c09a5a4fd134d7095", 0x79}], 0x3, &(0x7f0000001840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x48, 0x8080}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001940)="ac4300921069439414d4ba94e3f0a991680652fd091f55e0524515b7c71ec033773162746ddeab134bda7e25a8d12a799b1adfe4d0e69d9cbf50dd121c4ef7bfc9f0b8851f3ed8ea8c9a07017b65a0833dee65c34d48c699ada690027ba2ed98e703c83916a420510bf43bdd0f4c2c6fe54b487ee5721e03a49f2d92d3", 0x7d}, {&(0x7f00000019c0)='A', 0x1}, {&(0x7f0000001a00)="65cbfc22a167f32740472a61b0747325c65cbf7e7459205ec91b9228f82443fc30d217fa969cab6862723b465d29fd9f28e1a95746dcd46a99368861fb6b1461bf6364664efee51fbee753bfa1432c1f17aaed02c20208eb3bbd9ad63516a7ffcfc11bae9f6e3d6bc65b4d144e00172f2b33e09590107852a1f4dc77663444d9a7e8591a1c111cadc774082be9429e2675d4e1270360734fc086d81c5713b7587a8c96c69079a8302d9481accc86960bbba3bc8c7a53f78c0e478043331502424dda2d18f56c6a2430b7", 0xca}, {&(0x7f0000001b00)="2f5240bf42498b1614e55f6bbd4e1267ae1700ccb2101a9865bdd118dadab55bfcc31c1f0e0c6e260867983c408383e86f0304db132998a8ef42868fdcd8d54950d669930e51098b2c33f105064ec6fa6092e1d5baa407d9ee4c9278316e3b6d30330e58b7b2448be92c152d61775575622ba13cec531c7fcac8cfc99d58978dad36a1a4e28f356a1efed3f619313d2e2f66", 0x92}, {&(0x7f0000001bc0)="2c88b4c60e3e0773494bf99339679711423e0aa814e169daa8bdaa610465c8a89895971ab8e8051e9f4165c5c6f61adcd0cbbd4a2eab1114444228746691bf08a9437d7d38371b909e7404026574cb2e9a517c6982d248af3d49168a768de7656ac6f36150a0a86a30697733309388e4866dde7e7591e75134c59493c262a902d75e60d1a9c850144eb718b9ac201f21926260ad1d84efd90d52e7bd7130fbcb225848a42d0f6a67ba1f9ec853d3ea79afe8e886015ed4879ba1c501d6f6a76bf9dea4932eaf56a58a8cb45f", 0xcc}, {&(0x7f0000001cc0)="9c5351ae69f0c83566ca553f356949b37809be39c7c63c615ad05ca1bde011135af0f7bbad5d9ccc149e", 0x2a}, {&(0x7f0000001d00)="789b6da005319d5e463e1a217ae1b2a1542c7b154ba0e1d524d759999c426f3d8f693aae0bd8dab6117754a42006e7a8002d467100df726b84521f8d809aac7a26865a7f431ecaa36aec9265d3e58555947e3cac0b6c45866874f4b566d38bac013535e7dd", 0x65}], 0x7, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x98, 0x4040}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001fc0)="995e876fda98a0a3a37bea632cff6098924385e4487e0129e5fb537a1316d047cbd6bf9cc6b262c3bf94b782f0e1c3cd51b57481cf067b9cb5744b70c27740e8c40d307727f9fd91648e1ee2bb8c56378580daf6265f3bfe3a5a63286ec90c7e7e1b31e4c90f97ea56b9b1fb3abdd7474a666b66de28c47ed6715a4ff4ba7157", 0x80}, {&(0x7f0000002040)="8f443adc9ba670b39acc6e5f5e27a5d005b61d8b59ee5939b89c8f163624819d784f96449e9a15163437cc890d85ee72599936e74b63820af61e236ece4aef110db634e3fe700aa7baaaa15ed83466a6764677cd5b49fb", 0x57}, {&(0x7f00000020c0)="5710aaee6bb54ad841a216a9900394ba7a1fd853344d2cd930c1832bcea5c9ca6f1bc931e48a1e3503a4ed7576543d004a0726dab1a4f64c649fd957c52c87af7e23a1609a795b7fdcf75abf48e7f3409c8159f8b6a46185e93f359a2b10156714de5a4725c9d967a17c14f8669d2994162a5bb1b6a8be4fadc7393e8009f917058d1392f05e3a8c3dbe9a456e728753843569e9c65ffddb09134b40cd5218fa3eb6a3cb02e827fd9671538c498de1ea33936b65c7b38998e476d1caa77b9d682750adb2b9b1a01bcb725e523e2be33660eac060864ac14afe417c2be4206809b585e431d417b4a1e21f9ad46b41ef25c16a46214641ae81a4cd0a", 0xfb}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="b499ef2af626706d8a4ba07b2dea00c555740cbacf666fb6c61da892019f88487f84c2324815aaaa825d10b770d92d34f5", 0x31}, {&(0x7f0000003200)="304463cf22ee1b4c33e582e8cb4bdcf8f240cc60ad41393164bdc14888e1cd9ff783d8b07f97761cb8ee135862bae3eb0e042c2508e591ced5933a3e5fac8f4114f3eae1e6190de3c1e292e5b9551b45bcd0bd871016487dc7058af625c52748858f2254a2a7f3a3f329b8a4ca7452d61bdc6694a74165d2ba825b8ff8a397dca75f038dfd67bd8573770ab00bed6dd0a6cd7c6a", 0x94}, {&(0x7f00000032c0)="2be4e0734c13e590dd515ac97138e243f0cacec5a81aecd7bebbd3546ebfc6df5864867599f49b63ca2e725a49964ee23ec01b7d4f884307abc8b1c1cc788d2a3198c371f7a5522442ede5b04bd97b5d596537556de843499b0c0456efaf50fd0cccc25bef4dfffdac443c32e11977dc99c8b9c221e127d83ffffc0f73918cf7109831fac070ec72ff9ac87d2b9d3c130722e229611873734663b216fce3284726657c8dee5916d6bd2c0b9e9cce3d6e65a4e1a6fbdf8c470014283beb3adfefbbfde63a53378241087025fca91818d7ea3a07568cbdf393cc96b4c7228cba67ba42", 0xe2}], 0x7, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r5, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x68, 0x4}}], 0x4, 0xc044) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090000082502000000000000010109000011000000000009d68254cd00000000052406000125240800000d240f0100830aa7190000000006241a000000190581c02a841001957d5d17c1ada6f4f9cbb8277e80bf3a1ab13f0da9cf01f1d824d6d3eae97a209e618c0b7739f96d71d63c5202f8176d899f15ef53c242d99e413c2ab3e19d54b5ddc7328a23acdfd310717b4caf5afd3064395ff2f5d1d7e6eb8ee872d1c7fe70fa7b889b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0xec, 0x3, 0x9, 0x80, 0x7f, 0xfe, 0xfd, 0x40, 0x8, 0x4, 0x4, 0xcf5}, {0x5, 0x7f, 0x8, 0x6, 0x3, 0x3, 0x1, 0x80, 0x53, 0x1, 0xa4, 0xff, 0x9d}, {0xff, 0x7, 0xff, 0x20, 0x9b, 0x20, 0x3, 0x2, 0xa6, 0x87, 0x5, 0x1, 0xfffffffffffffffd}], 0xff}) 06:16:52 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='8)\'}(\xb4@-:,$-]/\x00', 0xf, 0x2) 06:16:52 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x20400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x334, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0x2}, @mesh_chsw={0x76, 0x6, {0x0, 0xc1, 0x17, 0xe4}}]}, @NL80211_ATTR_IE={0x57, 0x2a, [@perr={0x84, 0x35, {0xba, 0x3, [@ext={{}, @device_b, 0x9, @device_a, 0x3a}, @ext={{}, @broadcast, 0x1, @broadcast, 0x8}, @not_ext={{}, @broadcast, 0x0, "", 0x10}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "d3f9549b2277"}, @NL80211_ATTR_FILS_ERP_RRK={0x8f, 0xfc, "d82b8bcf16dcc5ba98dc92ef0bd75c32b152cbc2a7ce408e29217d4c39f720302c4cb0c89cc346a8e77b977269c579fef100cabb65def803acb9c3e1f250ecc44dc22e305761c1c064a3a2b105255173bf6d279d80f7d064d919eea1fb458ecf1564db0ee48d56d14c61ac86bd03716a18f4195910c0995360d5ef0f939745fcf0adcb3cccf49435399bd3"}, @NL80211_ATTR_FILS_ERP_RRK={0xf6, 0xfc, "f2f94626e1fdfaadfbcf68e7b74836d8b0c2ad365c7e21ba784244c81d7eb8fda213bdbdcce7658324b7e7d128143c95944964d9d781003134090c49f46752eb054b3355868c4f23b11ba44e7fd7c37783d7db790b1247fe14eecece31257025e16924ca0918bb334ebe72ed5693fff2d8dad1bc41c5e79ec80fe9f4943824793104771e255980794259eb11ca51a0f3c163e11f5457eaab956f8144db0a297670ff8b5c55ded70075fef7b7b0c6badcd47c308ad9d16eacb6cf531df6cd6e800ce960c80a7bd0e62ec6b46501ad41f69c5efaa0c5b5a83a1322cce7888eca3376c26a671df61545c7e3638a5638da900d40"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xd6, 0xfa, "016c200397b9a2f4908f2d34ca0f6a45c76e3daaef346b01133b7a011acaeb68bc07def5840925eba818d3f505f4ed99d821780c7e2ac3972c87701d535777fb66f42701bdc37966aeb04258130fc5282f0f6c47a757b4c2f58dc235b7f4e191b1e411257bef4603cf9d8c48701de34136d705c1c6af6df4d2746fca854279312c6fa5e7e2a5a2856c3c0a810a3cefe15caaeefec6f12201b92021322def278b92cbf2863b934c18baa912ae9f91b8ea7884f0acb671254c0beb3b4b85eaf0d3e3bd2aaf7667220d502adf75f3e5f8cd9a1b"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "8bc2335f94c25f06c8e154dfca"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "16e43f5e2dadc6de90dd3a4c2803542a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x400}]]}, 0x334}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c095) ftruncate(r1, 0x0) recvfrom$packet(r1, &(0x7f0000000100)=""/33, 0x21, 0x40000000, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) lseek(r6, 0x0, 0x1) r7 = socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r7) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:52 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1073.752878][ T27] audit: type=1804 audit(1681798612.509:3839): pid=17837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir363157862/syzkaller.Mb5z7L/843/bus" dev="sda1" ino=1184 res=1 errno=0 06:16:52 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:16:52 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1073.943160][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1073.993149][ T5212] usb 4-1: new high-speed USB device number 124 using dummy_hcd 06:16:52 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:16:52 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1074.133228][ T5172] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1074.163366][T14364] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1074.197301][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 1074.243056][ T5212] usb 4-1: Using ep0 maxpacket: 8 [ 1074.313550][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.324158][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1074.337767][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.363110][ T5212] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.373360][ T5212] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1074.382349][ T5212] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.403265][ T5172] usb 2-1: Using ep0 maxpacket: 8 [ 1074.453503][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1074.462686][T14364] usb 3-1: Using ep0 maxpacket: 8 [ 1074.468259][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1074.473241][ T5212] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1074.476678][ T7] usb 5-1: SerialNumber: syz [ 1074.492056][ T5212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1074.500322][ T5212] usb 4-1: SerialNumber: syz [ 1074.537158][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 1074.543201][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 1074.544160][ T5212] hub 4-1:1.0: bad descriptor, ignoring hub [ 1074.552082][ T7] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1074.561642][ T7] cdc_wdm 5-1:1.0: Unknown control protocol [ 1074.564064][ T5212] hub: probe of 4-1:1.0 failed with error -5 [ 1074.583381][ T5172] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1074.598877][ T5172] usb 2-1: can't read configurations, error -61 [ 1074.606333][ T5212] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1074.613225][T14364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.620307][ T5212] cdc_wdm 4-1:1.0: Unknown control protocol [ 1074.630016][T14364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1074.640206][T14364] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.723162][T14364] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1074.732349][T14364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1074.743543][T14364] usb 3-1: SerialNumber: syz [ 1074.783288][ T5172] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1074.794085][T14364] hub 3-1:1.0: bad descriptor, ignoring hub [ 1074.800008][T14364] hub: probe of 3-1:1.0 failed with error -5 [ 1074.810153][T14364] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1074.853303][ T5212] usb 5-1: USB disconnect, device number 4 [ 1074.859246][T17837] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1074.993260][T14364] usb 4-1: USB disconnect, device number 124 [ 1075.023166][ T5172] usb 2-1: Using ep0 maxpacket: 8 [ 1075.123319][ T5212] usb 3-1: USB disconnect, device number 20 06:16:54 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x314, r0, 0x80000}) bind(r1, &(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0xff, 0x85, "937b569064f99aec49831726a5f522bb086d57173bc55a6aa17b5b05c1c6445f14512cd48ccb41682ebd1f5684f09805cbd8e8445f90784cf047e707dfd2e9", 0x11}, 0x80) 06:16:54 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1075.215851][ T5172] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1075.223517][ T5172] usb 2-1: can't read configurations, error -61 [ 1075.229900][ T5172] usb usb2-port1: attempt power cycle 06:16:54 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'rose0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:54 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf6ffffff00000000) [ 1075.560429][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1075.663100][ T5172] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1075.733059][ T5212] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1075.773461][ T5172] usb 2-1: Using ep0 maxpacket: 8 [ 1075.833049][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 1075.943156][ T5172] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1075.950796][ T5172] usb 2-1: can't read configurations, error -61 [ 1075.961261][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.972063][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1075.981432][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.993117][ T5212] usb 1-1: Using ep0 maxpacket: 8 [ 1076.063315][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1076.072845][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1076.081183][ T7] usb 5-1: SerialNumber: syz [ 1076.113076][ T5172] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1076.129345][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 1076.135524][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 1076.144970][ T5212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.145375][ T7] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1076.161016][ T7] cdc_wdm 5-1:1.0: Unknown control protocol [ 1076.161012][ T5212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1076.161059][ T5212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.203215][ T5172] usb 2-1: Using ep0 maxpacket: 8 [ 1076.273128][ T5212] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1076.282283][ T5212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1076.292211][ T5212] usb 1-1: SerialNumber: syz [ 1076.333750][ T5212] hub 1-1:1.0: bad descriptor, ignoring hub [ 1076.339661][ T5212] hub: probe of 1-1:1.0 failed with error -5 [ 1076.350457][ T5212] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1076.356544][ T5212] cdc_wdm 1-1:1.0: Unknown control protocol [ 1076.363393][ T5172] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1076.371586][ T5172] usb 2-1: can't read configurations, error -61 [ 1076.386461][ T5172] usb usb2-port1: unable to enumerate USB device [ 1076.443268][ T7] usb 5-1: USB disconnect, device number 5 [ 1076.684016][ T7] usb 1-1: USB disconnect, device number 67 06:16:55 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c00000018001c052dbd7000fcdbdf2580008006fe01fd060088000008000b40400000000c00090007000440", @ANYRES32=0x0, @ANYBLOB="08000700ac1414aa1800168014000200ff0200000000000000000000000000011c0008801bce1a080e3a3e27cee3efde51de391bef947a6a9fa61df308000b00060000000800100005000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) open(0x0, 0x0, 0x0) (async) r3 = open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) (async) ftruncate(r2, 0x800) socket(0x15, 0x800, 0x1) (async) r4 = socket(0x15, 0x800, 0x1) lseek(r2, 0x0, 0x2) (async) lseek(r2, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r5, 0x0, 0x1dd03) setuid(0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x38) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r8]) sendmmsg$unix(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}], 0x78, 0x10}}, {{&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001540)="43f1a258ee71d2092e94f3b7546feca0b37164facf061e7abf547d03a7f991b48692bd303592a539ad713a3b03ebc907116ba44cc01b7d4b10d98c57138470d25624be4d440a6b955b25e2c478e46e4b9f952ba3e872c6aab0067c837770b027621a75cd63eb990e64a84636dde166071d0de99faf19b97ae7626909477b59ac19461e9aca59d36662883922", 0x8c}, {&(0x7f0000001600)="884b586942e971e371289b0864c754feb81640165f37c8c215bf54e6f8674ed4fc725d5e3037567989b7bc5d", 0x2c}, {&(0x7f0000001640)="a44aa258fc08db8a480f3991c8a9860c698acbfdddc6079c98af1d6eb0f347475a7af3721a6853a944370fcb5c87e02d91538f6ac5fe041a2e0501a39dc371722784ebfb5f03220f2bb2ca8d42232bd003d0ffedd75a4aea6f8d22f136b4819ab2040c351c378bb0235e22c0974181225c09a5a4fd134d7095", 0x79}], 0x3, &(0x7f0000001840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x48, 0x8080}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001940)="ac4300921069439414d4ba94e3f0a991680652fd091f55e0524515b7c71ec033773162746ddeab134bda7e25a8d12a799b1adfe4d0e69d9cbf50dd121c4ef7bfc9f0b8851f3ed8ea8c9a07017b65a0833dee65c34d48c699ada690027ba2ed98e703c83916a420510bf43bdd0f4c2c6fe54b487ee5721e03a49f2d92d3", 0x7d}, {&(0x7f00000019c0)='A', 0x1}, {&(0x7f0000001a00)="65cbfc22a167f32740472a61b0747325c65cbf7e7459205ec91b9228f82443fc30d217fa969cab6862723b465d29fd9f28e1a95746dcd46a99368861fb6b1461bf6364664efee51fbee753bfa1432c1f17aaed02c20208eb3bbd9ad63516a7ffcfc11bae9f6e3d6bc65b4d144e00172f2b33e09590107852a1f4dc77663444d9a7e8591a1c111cadc774082be9429e2675d4e1270360734fc086d81c5713b7587a8c96c69079a8302d9481accc86960bbba3bc8c7a53f78c0e478043331502424dda2d18f56c6a2430b7", 0xca}, {&(0x7f0000001b00)="2f5240bf42498b1614e55f6bbd4e1267ae1700ccb2101a9865bdd118dadab55bfcc31c1f0e0c6e260867983c408383e86f0304db132998a8ef42868fdcd8d54950d669930e51098b2c33f105064ec6fa6092e1d5baa407d9ee4c9278316e3b6d30330e58b7b2448be92c152d61775575622ba13cec531c7fcac8cfc99d58978dad36a1a4e28f356a1efed3f619313d2e2f66", 0x92}, {&(0x7f0000001bc0)="2c88b4c60e3e0773494bf99339679711423e0aa814e169daa8bdaa610465c8a89895971ab8e8051e9f4165c5c6f61adcd0cbbd4a2eab1114444228746691bf08a9437d7d38371b909e7404026574cb2e9a517c6982d248af3d49168a768de7656ac6f36150a0a86a30697733309388e4866dde7e7591e75134c59493c262a902d75e60d1a9c850144eb718b9ac201f21926260ad1d84efd90d52e7bd7130fbcb225848a42d0f6a67ba1f9ec853d3ea79afe8e886015ed4879ba1c501d6f6a76bf9dea4932eaf56a58a8cb45f", 0xcc}, {&(0x7f0000001cc0)="9c5351ae69f0c83566ca553f356949b37809be39c7c63c615ad05ca1bde011135af0f7bbad5d9ccc149e", 0x2a}, {&(0x7f0000001d00)="789b6da005319d5e463e1a217ae1b2a1542c7b154ba0e1d524d759999c426f3d8f693aae0bd8dab6117754a42006e7a8002d467100df726b84521f8d809aac7a26865a7f431ecaa36aec9265d3e58555947e3cac0b6c45866874f4b566d38bac013535e7dd", 0x65}], 0x7, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x98, 0x4040}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001fc0)="995e876fda98a0a3a37bea632cff6098924385e4487e0129e5fb537a1316d047cbd6bf9cc6b262c3bf94b782f0e1c3cd51b57481cf067b9cb5744b70c27740e8c40d307727f9fd91648e1ee2bb8c56378580daf6265f3bfe3a5a63286ec90c7e7e1b31e4c90f97ea56b9b1fb3abdd7474a666b66de28c47ed6715a4ff4ba7157", 0x80}, {&(0x7f0000002040)="8f443adc9ba670b39acc6e5f5e27a5d005b61d8b59ee5939b89c8f163624819d784f96449e9a15163437cc890d85ee72599936e74b63820af61e236ece4aef110db634e3fe700aa7baaaa15ed83466a6764677cd5b49fb", 0x57}, {&(0x7f00000020c0)="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", 0xfb}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="b499ef2af626706d8a4ba07b2dea00c555740cbacf666fb6c61da892019f88487f84c2324815aaaa825d10b770d92d34f5", 0x31}, {&(0x7f0000003200)="304463cf22ee1b4c33e582e8cb4bdcf8f240cc60ad41393164bdc14888e1cd9ff783d8b07f97761cb8ee135862bae3eb0e042c2508e591ced5933a3e5fac8f4114f3eae1e6190de3c1e292e5b9551b45bcd0bd871016487dc7058af625c52748858f2254a2a7f3a3f329b8a4ca7452d61bdc6694a74165d2ba825b8ff8a397dca75f038dfd67bd8573770ab00bed6dd0a6cd7c6a", 0x94}, {&(0x7f00000032c0)="2be4e0734c13e590dd515ac97138e243f0cacec5a81aecd7bebbd3546ebfc6df5864867599f49b63ca2e725a49964ee23ec01b7d4f884307abc8b1c1cc788d2a3198c371f7a5522442ede5b04bd97b5d596537556de843499b0c0456efaf50fd0cccc25bef4dfffdac443c32e11977dc99c8b9c221e127d83ffffc0f73918cf7109831fac070ec72ff9ac87d2b9d3c130722e229611873734663b216fce3284726657c8dee5916d6bd2c0b9e9cce3d6e65a4e1a6fbdf8c470014283beb3adfefbbfde63a53378241087025fca91818d7ea3a07568cbdf393cc96b4c7228cba67ba42", 0xe2}], 0x7, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r5, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x68, 0x4}}], 0x4, 0xc044) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090000082502000000000000010109000011000000000009d68254cd00000000052406000125240800000d240f0100830aa7190000000006241a000000190581c02a841001957d5d17c1ada6f4f9cbb8277e80bf3a1ab13f0da9cf01f1d824d6d3eae97a209e618c0b7739f96d71d63c5202f8176d899f15ef53c242d99e413c2ab3e19d54b5ddc7328a23acdfd310717b4caf5afd3064395ff2f5d1d7e6eb8ee872d1c7fe70fa7b889b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0xec, 0x3, 0x9, 0x80, 0x7f, 0xfe, 0xfd, 0x40, 0x8, 0x4, 0x4, 0xcf5}, {0x5, 0x7f, 0x8, 0x6, 0x3, 0x3, 0x1, 0x80, 0x53, 0x1, 0xa4, 0xff, 0x9d}, {0xff, 0x7, 0xff, 0x20, 0x9b, 0x20, 0x3, 0x2, 0xa6, 0x87, 0x5, 0x1, 0xfffffffffffffffd}], 0xff}) 06:16:55 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) 06:16:55 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400f60002090000052406000105240800000d240f0000000000000006241a00000019058185ea7c0c5f82f05fdb49f522cceb5dc014fe3ecc1844b4e72e834d5f377f13a1a14089c7a1d5f4d84bd5e24c13c7de806d868c3d4b54590ebdf9f2b4f340a4187bf37084a7740b41cb5e95491c6af02cd2a6877562c69067673fab1dfb01d03ec78969edef36df0a7a5a1d2d09902937f0265b690b0455e9d3000009c1"], 0x0) 06:16:55 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x53}) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x3}) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x1dd03) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a290400000102090000052406000105240800000d240f0100000000000000000006241a0000c283000004c7e7fe24ebd41a727ddaa314d1ff11807852cd84e5f0852968fbe400"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:55 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r5, 0x0, 0x1dd03) 06:16:55 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) ftruncate(0xffffffffffffffff, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x314, r0, 0x80000}) bind(r1, &(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0xff, 0x85, "937b569064f99aec49831726a5f522bb086d57173bc55a6aa17b5b05c1c6445f14512cd48ccb41682ebd1f5684f09805cbd8e8445f90784cf047e707dfd2e9", 0x11}, 0x80) 06:16:55 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRESDEC=r3], 0x0) 06:16:55 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c00000018001c052dbd7000fcdbdf2580008006fe01fd060088000008000b40400000000c00090007000440", @ANYRES32=0x0, @ANYBLOB="08000700ac1414aa1800168014000200ff0200000000000000000000000000011c0008801bce1a080e3a3e27cee3efde51de391bef947a6a9fa61df308000b00060000000800100005000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) socket(0x15, 0x800, 0x1) (async) r4 = socket(0x15, 0x800, 0x1) lseek(r2, 0x0, 0x2) (async) lseek(r2, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r5, 0x0, 0x1dd03) (async) sendfile(r2, r5, 0x0, 0x1dd03) setuid(0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x38) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r8]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r8]) sendmmsg$unix(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}], 0x78, 0x10}}, {{&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001540)="43f1a258ee71d2092e94f3b7546feca0b37164facf061e7abf547d03a7f991b48692bd303592a539ad713a3b03ebc907116ba44cc01b7d4b10d98c57138470d25624be4d440a6b955b25e2c478e46e4b9f952ba3e872c6aab0067c837770b027621a75cd63eb990e64a84636dde166071d0de99faf19b97ae7626909477b59ac19461e9aca59d36662883922", 0x8c}, {&(0x7f0000001600)="884b586942e971e371289b0864c754feb81640165f37c8c215bf54e6f8674ed4fc725d5e3037567989b7bc5d", 0x2c}, {&(0x7f0000001640)="a44aa258fc08db8a480f3991c8a9860c698acbfdddc6079c98af1d6eb0f347475a7af3721a6853a944370fcb5c87e02d91538f6ac5fe041a2e0501a39dc371722784ebfb5f03220f2bb2ca8d42232bd003d0ffedd75a4aea6f8d22f136b4819ab2040c351c378bb0235e22c0974181225c09a5a4fd134d7095", 0x79}], 0x3, &(0x7f0000001840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x48, 0x8080}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001940)="ac4300921069439414d4ba94e3f0a991680652fd091f55e0524515b7c71ec033773162746ddeab134bda7e25a8d12a799b1adfe4d0e69d9cbf50dd121c4ef7bfc9f0b8851f3ed8ea8c9a07017b65a0833dee65c34d48c699ada690027ba2ed98e703c83916a420510bf43bdd0f4c2c6fe54b487ee5721e03a49f2d92d3", 0x7d}, {&(0x7f00000019c0)='A', 0x1}, {&(0x7f0000001a00)="65cbfc22a167f32740472a61b0747325c65cbf7e7459205ec91b9228f82443fc30d217fa969cab6862723b465d29fd9f28e1a95746dcd46a99368861fb6b1461bf6364664efee51fbee753bfa1432c1f17aaed02c20208eb3bbd9ad63516a7ffcfc11bae9f6e3d6bc65b4d144e00172f2b33e09590107852a1f4dc77663444d9a7e8591a1c111cadc774082be9429e2675d4e1270360734fc086d81c5713b7587a8c96c69079a8302d9481accc86960bbba3bc8c7a53f78c0e478043331502424dda2d18f56c6a2430b7", 0xca}, {&(0x7f0000001b00)="2f5240bf42498b1614e55f6bbd4e1267ae1700ccb2101a9865bdd118dadab55bfcc31c1f0e0c6e260867983c408383e86f0304db132998a8ef42868fdcd8d54950d669930e51098b2c33f105064ec6fa6092e1d5baa407d9ee4c9278316e3b6d30330e58b7b2448be92c152d61775575622ba13cec531c7fcac8cfc99d58978dad36a1a4e28f356a1efed3f619313d2e2f66", 0x92}, {&(0x7f0000001bc0)="2c88b4c60e3e0773494bf99339679711423e0aa814e169daa8bdaa610465c8a89895971ab8e8051e9f4165c5c6f61adcd0cbbd4a2eab1114444228746691bf08a9437d7d38371b909e7404026574cb2e9a517c6982d248af3d49168a768de7656ac6f36150a0a86a30697733309388e4866dde7e7591e75134c59493c262a902d75e60d1a9c850144eb718b9ac201f21926260ad1d84efd90d52e7bd7130fbcb225848a42d0f6a67ba1f9ec853d3ea79afe8e886015ed4879ba1c501d6f6a76bf9dea4932eaf56a58a8cb45f", 0xcc}, {&(0x7f0000001cc0)="9c5351ae69f0c83566ca553f356949b37809be39c7c63c615ad05ca1bde011135af0f7bbad5d9ccc149e", 0x2a}, {&(0x7f0000001d00)="789b6da005319d5e463e1a217ae1b2a1542c7b154ba0e1d524d759999c426f3d8f693aae0bd8dab6117754a42006e7a8002d467100df726b84521f8d809aac7a26865a7f431ecaa36aec9265d3e58555947e3cac0b6c45866874f4b566d38bac013535e7dd", 0x65}], 0x7, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x98, 0x4040}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001fc0)="995e876fda98a0a3a37bea632cff6098924385e4487e0129e5fb537a1316d047cbd6bf9cc6b262c3bf94b782f0e1c3cd51b57481cf067b9cb5744b70c27740e8c40d307727f9fd91648e1ee2bb8c56378580daf6265f3bfe3a5a63286ec90c7e7e1b31e4c90f97ea56b9b1fb3abdd7474a666b66de28c47ed6715a4ff4ba7157", 0x80}, {&(0x7f0000002040)="8f443adc9ba670b39acc6e5f5e27a5d005b61d8b59ee5939b89c8f163624819d784f96449e9a15163437cc890d85ee72599936e74b63820af61e236ece4aef110db634e3fe700aa7baaaa15ed83466a6764677cd5b49fb", 0x57}, {&(0x7f00000020c0)="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", 0xfb}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="b499ef2af626706d8a4ba07b2dea00c555740cbacf666fb6c61da892019f88487f84c2324815aaaa825d10b770d92d34f5", 0x31}, {&(0x7f0000003200)="304463cf22ee1b4c33e582e8cb4bdcf8f240cc60ad41393164bdc14888e1cd9ff783d8b07f97761cb8ee135862bae3eb0e042c2508e591ced5933a3e5fac8f4114f3eae1e6190de3c1e292e5b9551b45bcd0bd871016487dc7058af625c52748858f2254a2a7f3a3f329b8a4ca7452d61bdc6694a74165d2ba825b8ff8a397dca75f038dfd67bd8573770ab00bed6dd0a6cd7c6a", 0x94}, {&(0x7f00000032c0)="2be4e0734c13e590dd515ac97138e243f0cacec5a81aecd7bebbd3546ebfc6df5864867599f49b63ca2e725a49964ee23ec01b7d4f884307abc8b1c1cc788d2a3198c371f7a5522442ede5b04bd97b5d596537556de843499b0c0456efaf50fd0cccc25bef4dfffdac443c32e11977dc99c8b9c221e127d83ffffc0f73918cf7109831fac070ec72ff9ac87d2b9d3c130722e229611873734663b216fce3284726657c8dee5916d6bd2c0b9e9cce3d6e65a4e1a6fbdf8c470014283beb3adfefbbfde63a53378241087025fca91818d7ea3a07568cbdf393cc96b4c7228cba67ba42", 0xe2}], 0x7, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r5, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x68, 0x4}}], 0x4, 0xc044) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090000082502000000000000010109000011000000000009d68254cd00000000052406000125240800000d240f0100830aa7190000000006241a000000190581c02a841001957d5d17c1ada6f4f9cbb8277e80bf3a1ab13f0da9cf01f1d824d6d3eae97a209e618c0b7739f96d71d63c5202f8176d899f15ef53c242d99e413c2ab3e19d54b5ddc7328a23acdfd310717b4caf5afd3064395ff2f5d1d7e6eb8ee872d1c7fe70fa7b889b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0xec, 0x3, 0x9, 0x80, 0x7f, 0xfe, 0xfd, 0x40, 0x8, 0x4, 0x4, 0xcf5}, {0x5, 0x7f, 0x8, 0x6, 0x3, 0x3, 0x1, 0x80, 0x53, 0x1, 0xa4, 0xff, 0x9d}, {0xff, 0x7, 0xff, 0x20, 0x9b, 0x20, 0x3, 0x2, 0xa6, 0x87, 0x5, 0x1, 0xfffffffffffffffd}], 0xff}) 06:16:55 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:16:55 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:16:55 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:55 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1077.054705][ T5164] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1077.069281][ T5172] usb 4-1: new high-speed USB device number 125 using dummy_hcd 06:16:56 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x100, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x20400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ftruncate(r1, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000002c0)={{r4}, 0x0, 0x8, @unused=[0x80, 0xb4dc, 0x9, 0x2], @name="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"}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x0, 0x70bd26}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:56 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1077.243198][ T5176] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1077.333056][ T5172] usb 4-1: Using ep0 maxpacket: 8 [ 1077.343348][ T5164] usb 3-1: Using ep0 maxpacket: 8 [ 1077.443355][ T7] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1077.451024][ T5176] usb 5-1: device descriptor read/64, error 18 [ 1077.457437][ T5172] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.467682][ T5172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1077.473187][ T5164] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.476710][ T5172] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1077.494798][ T5164] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1077.503231][ T5166] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1077.518905][ T5164] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1077.573135][ T5172] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1077.582541][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1077.591081][ T5172] usb 4-1: SerialNumber: syz [ 1077.623293][ T5164] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1077.632321][ T5164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1077.634462][ T5172] hub 4-1:1.0: bad descriptor, ignoring hub [ 1077.647150][ T5172] hub: probe of 4-1:1.0 failed with error -5 [ 1077.653929][ T5172] cdc_wdm 4-1:1.0: skipping garbage [ 1077.659345][ T5172] cdc_wdm 4-1:1.0: skipping garbage [ 1077.659491][ T5164] usb 3-1: SerialNumber: syz [ 1077.665311][ T5172] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1077.693057][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 1077.714299][ T5164] hub 3-1:1.0: bad descriptor, ignoring hub [ 1077.720244][ T5164] hub: probe of 3-1:1.0 failed with error -5 [ 1077.733179][ T5176] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1077.734687][ T5164] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1077.763068][ T5166] usb 2-1: Using ep0 maxpacket: 8 [ 1077.813123][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.825419][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1077.834655][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.883388][ T5166] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.898629][ T5166] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1077.909341][ T5166] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1077.924871][ T5176] usb 5-1: device descriptor read/64, error 18 [ 1077.933239][ T7] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1077.942289][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1077.950530][ T7] usb 1-1: SerialNumber: syz [ 1077.973449][T14364] usb 4-1: USB disconnect, device number 125 [ 1077.994035][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 1077.999972][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 1078.006299][ T5166] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1078.017290][ T5166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1078.026803][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1078.032702][ T7] cdc_wdm 1-1:1.0: Unknown control protocol [ 1078.033266][ T5164] usb 3-1: USB disconnect, device number 21 [ 1078.038853][ T5166] usb 2-1: SerialNumber: syz [ 1078.049411][ T5176] usb usb5-port1: attempt power cycle [ 1078.114238][ T5166] hub 2-1:1.0: bad descriptor, ignoring hub [ 1078.120182][ T5166] hub: probe of 2-1:1.0 failed with error -5 [ 1078.127084][ T5166] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1078.326877][ T2618] usb 1-1: USB disconnect, device number 68 [ 1078.343581][T17916] cdc_wdm 1-1:1.0: Error autopm - -16 06:16:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400f60002090000052406000105240800000d240f0000000000000006241a00000019058185ea7c0c5f82f05fdb49f522cceb5dc014fe3ecc1844b4e72e834d5f377f13a1a14089c7a1d5f4d84bd5e24c13c7de806d868c3d4b54590ebdf9f2b4f340a4187bf37084a7740b41cb5e95491c6af02cd2a6877562c69067673fab1dfb01d03ec78969edef36df0a7a5a1d2d09902937f0265b690b0455e9d3000009c1"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400f60002090000052406000105240800000d240f0000000000000006241a00000019058185ea7c0c5f82f05fdb49f522cceb5dc014fe3ecc1844b4e72e834d5f377f13a1a14089c7a1d5f4d84bd5e24c13c7de806d868c3d4b54590ebdf9f2b4f340a4187bf37084a7740b41cb5e95491c6af02cd2a6877562c69067673fab1dfb01d03ec78969edef36df0a7a5a1d2d09902937f0265b690b0455e9d3000009c1"], 0x0) 06:16:57 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:16:57 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3f00000000000000) 06:16:57 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1078.443993][ T27] kauditd_printk_skb: 82 callbacks suppressed [ 1078.444009][ T27] audit: type=1804 audit(1681798617.309:3922): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/691/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1078.475744][ T5176] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1078.498446][ T5166] usb 2-1: USB disconnect, device number 101 [ 1078.520058][ T27] audit: type=1804 audit(1681798617.309:3923): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/691/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1078.529600][T17930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.546100][ T27] audit: type=1804 audit(1681798617.309:3924): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/691/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1078.573619][T17930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.602933][ T27] audit: type=1804 audit(1681798617.309:3925): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/691/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1078.632395][ T27] audit: type=1804 audit(1681798617.349:3926): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/692/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1078.658517][ T27] audit: type=1804 audit(1681798617.349:3927): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/692/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1078.688367][ T27] audit: type=1804 audit(1681798617.359:3928): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/692/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1078.715817][ T5176] usb 5-1: device descriptor read/8, error -61 [ 1078.727869][ T27] audit: type=1804 audit(1681798617.369:3929): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/692/bus" dev="sda1" ino=1173 res=1 errno=0 [ 1078.755441][ T27] audit: type=1804 audit(1681798617.449:3930): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir363157862/syzkaller.Mb5z7L/846/bus" dev="sda1" ino=1183 res=1 errno=0 [ 1078.781184][ T27] audit: type=1800 audit(1681798617.449:3931): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 1078.833344][ T5212] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1078.993090][ T7] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1079.000809][ T5176] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1079.083139][ T5212] usb 3-1: Using ep0 maxpacket: 8 [ 1079.203127][ T5212] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.213393][ T5212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1079.222361][ T5212] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1079.233258][ T5176] usb 5-1: device descriptor read/8, error -61 [ 1079.239830][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 1079.303197][ T5212] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1079.317596][ T5212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1079.326512][ T5212] usb 3-1: SerialNumber: syz [ 1079.363976][ T5212] hub 3-1:1.0: bad descriptor, ignoring hub [ 1079.369897][ T5212] hub: probe of 3-1:1.0 failed with error -5 [ 1079.373182][ T5176] usb usb5-port1: unable to enumerate USB device [ 1079.382853][ T5212] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1079.383492][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.400097][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1079.409410][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.493256][ T7] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1079.502518][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1079.510726][ T7] usb 4-1: SerialNumber: syz [ 1079.567889][ T7] hub 4-1:1.0: bad descriptor, ignoring hub [ 1079.573908][ T7] hub: probe of 4-1:1.0 failed with error -5 [ 1079.582468][ T7] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1079.588441][ T7] cdc_wdm 4-1:1.0: Unknown control protocol [ 1079.683598][ T5212] usb 3-1: USB disconnect, device number 22 06:16:58 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRESDEC=r3], 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ftruncate(r0, 0x800) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x125000, 0x0) (async) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRESDEC=r3], 0x0) (async) 06:16:58 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:16:58 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400f60002090000052406000105240800000d240f0000000000000006241a00000019058185ea7c0c5f82f05fdb49f522cceb5dc014fe3ecc1844b4e72e834d5f377f13a1a14089c7a1d5f4d84bd5e24c13c7de806d868c3d4b54590ebdf9f2b4f340a4187bf37084a7740b41cb5e95491c6af02cd2a6877562c69067673fab1dfb01d03ec78969edef36df0a7a5a1d2d09902937f0265b690b0455e9d3000009c1"], 0x0) 06:16:58 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = open(0x0, 0x100, 0x0) (rerun: 32) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x20400, 0x0) (async) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) (async) ftruncate(r1, 0x0) (async, rerun: 32) getsockopt$packet_buf(r1, 0x107, 0x1, 0x0, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000002c0)={{r4}, 0x0, 0x8, @unused=[0x80, 0xb4dc, 0x9, 0x2], @name="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"}) (async) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x0, 0x70bd26}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) (async) lseek(r5, 0x0, 0x2) (async) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1079.905437][T10141] usb 4-1: USB disconnect, device number 126 06:16:58 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x100, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) (async) ftruncate(r1, 0x800) lseek(r1, 0x20400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ftruncate(r1, 0x0) (async) ftruncate(r1, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1, 0x0, 0x0) (async) getsockopt$packet_buf(r1, 0x107, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000002c0)={{r4}, 0x0, 0x8, @unused=[0x80, 0xb4dc, 0x9, 0x2], @name="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"}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x0, 0x70bd26}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x0, 0x70bd26}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) (async) lseek(r5, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:16:58 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:16:58 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400f60002090000052406000105240800000d240f0000000000000006241a00000019058185ea7c0c5f82f05fdb49f522cceb5dc014fe3ecc1844b4e72e834d5f377f13a1a14089c7a1d5f4d84bd5e24c13c7de806d868c3d4b54590ebdf9f2b4f340a4187bf37084a7740b41cb5e95491c6af02cd2a6877562c69067673fab1dfb01d03ec78969edef36df0a7a5a1d2d09902937f0265b690b0455e9d3000009c1"], 0x0) 06:16:58 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) lseek(r2, 0x4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:16:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x80000) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46900) ftruncate(r3, 0x800) lseek(r3, 0x20400, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ftruncate(r3, 0x0) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12011d00090000082502000000000000010109025c00020100f92a0904108f5f41ee9ab91142006c4838cc00000102090000052406000105240800000d240f010000000000000000008606241a000000190581806e44c2028e8ad454d0ab42e9ea1991e2b15a59473877e3637f4559d04cd2e1099ce0ef4a49f8b95a6c694e30bc6963d2eed3ae54ecc33413fa8c7c5771b8ed8a776e6f2229b2af66a832641fee3c036ec2bee3e39ec1f57936173b4fcb46bd03f8af72e95ac09fdd669bbd3101473ecdd795696f48eeb6449f385f08a5e35df0e9add467c3d87cccc744de723dc15661204e643c0000000000000000"], 0x0) 06:16:59 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) lseek(r2, 0x4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1080.213204][ T5164] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1080.383052][ T5212] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1080.393136][ T2618] usb 2-1: new high-speed USB device number 102 using dummy_hcd 06:16:59 executing program 3: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRESDEC=r3], 0x0) 06:16:59 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) lseek(r2, 0x4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1080.453092][ T5164] usb 1-1: Using ep0 maxpacket: 8 [ 1080.513238][T10141] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1080.573112][ T5164] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.583320][ T5212] usb 5-1: device descriptor read/64, error 18 [ 1080.589622][ T5164] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1080.598789][ T5164] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1080.633076][ T2618] usb 2-1: Using ep0 maxpacket: 8 [ 1080.683673][ T5164] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1080.692930][ T5164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1080.701250][ T5164] usb 1-1: SerialNumber: syz [ 1080.744273][ T5164] hub 1-1:1.0: bad descriptor, ignoring hub [ 1080.750360][ T5164] hub: probe of 1-1:1.0 failed with error -5 [ 1080.756788][ T2618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.767039][T10141] usb 3-1: Using ep0 maxpacket: 8 [ 1080.772183][ T22] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1080.782428][ T5164] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1080.789351][ T2618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1080.800127][ T2618] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1080.853267][ T5212] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1080.897147][T10141] usb 3-1: config 1 has an invalid interface number: 16 but max is 1 [ 1080.905339][ T2618] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1080.915209][T10141] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.925437][ T2618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1080.933532][ T2618] usb 2-1: SerialNumber: syz [ 1080.938223][T10141] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1080.948053][T10141] usb 3-1: config 1 has no interface number 0 [ 1080.955358][T10141] usb 3-1: too many endpoints for config 1 interface 16 altsetting 143: 95, using maximum allowed: 30 [ 1080.966495][T10141] usb 3-1: config 1 interface 16 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 1080.983990][ T22] usb 4-1: device descriptor read/64, error 18 [ 1080.990319][T10141] usb 3-1: config 1 interface 16 has no altsetting 0 [ 1080.998226][ T2618] hub 2-1:1.0: bad descriptor, ignoring hub [ 1081.004617][ T2618] hub: probe of 2-1:1.0 failed with error -5 [ 1081.010941][ T2618] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1081.073098][ T5212] usb 5-1: device descriptor read/64, error 18 [ 1081.083256][T10141] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1081.083490][ T7] usb 1-1: USB disconnect, device number 69 [ 1081.100156][T10141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1081.108562][T10141] usb 3-1: SerialNumber: syz [ 1081.193257][ T5212] usb usb5-port1: attempt power cycle [ 1081.253226][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1081.323717][ T2618] usb 2-1: USB disconnect, device number 102 [ 1081.393521][T10141] hub 3-1:1.16: bad descriptor, ignoring hub [ 1081.399528][T10141] hub: probe of 3-1:1.16 failed with error -5 [ 1081.433740][T10141] usb 3-1: USB disconnect, device number 23 [ 1081.447116][ T22] usb 4-1: device descriptor read/64, error 18 [ 1081.573213][ T22] usb usb4-port1: attempt power cycle [ 1081.613075][ T5212] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1081.783194][ T5212] usb 5-1: device descriptor read/8, error -61 [ 1081.983065][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1082.053256][ T5212] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1082.157687][ T22] usb 4-1: device descriptor read/8, error -61 [ 1082.233170][ T5212] usb 5-1: device descriptor read/8, error -61 [ 1082.353816][ T5212] usb usb5-port1: unable to enumerate USB device [ 1082.443209][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1082.613177][ T22] usb 4-1: device descriptor read/8, error -61 [ 1082.734389][ T22] usb usb4-port1: unable to enumerate USB device 06:17:01 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRESDEC=r3], 0x0) (rerun: 64) 06:17:01 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:17:01 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x100, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x20400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ftruncate(r1, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000002c0)={{r4}, 0x0, 0x8, @unused=[0x80, 0xb4dc, 0x9, 0x2], @name="0fd0afbe8b7c8fd35a29bd529719ebf14749812ba8314aac990e7f32f814ba2505d49598eef5f86db42c944ff2f183e873e3fcdb0b213742e87bc36a45b61726f8262e7aba049c535234fc52eba1f68ddaa17f3645810ea2e08a5d6f4eebf3d7e2e7fe33bd3974304d9dab07b3c2edbe5ba4352d33e3af172291a95e1ba019e7b01180cc2ed9231a14e26750bfc872b04fb471c5ecd7e54d58f2f9b91ade4bf36b6be5a15514bad6a7d2557d2d8ebce225c3550d145e87466368cedb33c0840c340cf2cb580d74ff05f5a14c39595bcc7e8e7ba176fa56b3d336bb4def885291b18d30ca7c7496390166c244d9600a5386e69d1de438131a434d70865e2efc6961970c0846c0da41b7a41f7f0efed988c5f2452b3e8b6cbaf61955dc4cd449780eac8309e1414f0ad98ff5bdd034b312eb8bc1f2716015cca4248334b68ca9d5324b6e9e4c6bf5aa4d8e2561ec215c4f7d9076ea35e0522082c52b2674f2acdaea9cfe55d3aba00a6dbccb5015c7242be064532e70ccb38f377956424eec0a0890b542a7d947649546b210dc67fbc0ca0db614711f232a40e16fba0bcc5a19072dd1889306a6a157a4022d4ec7a24a80299e85db0ed1febf0286e61df6694885dc67f0881142c3e47e6a2a03ff26c68a60f22b669ba237693dc7c71d65ddaa9c254c12915275ab9a963c8ac72f69d4744db4640fe6315da11a4066337e43ebb75ad1ac229e6cfe1372edb5b9711cc8125aef8d45b0ec405e8874f9f383151ba8bf33055d2a41f94f74b031e26d7d3603dd9c06b7ab5a187468495132aaa91a16910128c73f024257f63114147649fb9f2c155fccf46c0c84f7c14982ab37896b202d4e0166c4b3ad494018c33f60e3f4236cc7a6861d573a18ecefc364cfec2aff75fd4124683a68bbcbc94933d2d47eeb8d914ec810894c10091c56937f22b9f13c30cf75bb777c74ddc1a5acc2e7f3a8ac08ce14144981e102717b39ba7a2c6827d1421483014b5dad8e9adfe328a4291295236bc059e57528c945a4190e769be0bf5a3fbebd4c4ba41786e6d78efa509612fe6838c3048c8ff6a4a57a5d40df3256b924a107057370be94c13b25117bb0dfc08025b3617b41c8e979f629fd1f4dbbe55325eb455329c0324cdfe299363ad47c5781f4cc862ffe216bbf0ee7900e67822c429319da2a8e2a93b4fca0fc2f1e0cff531c86a467b7734272b35d37391ea58dcfadc4291640578185c04e5e65588c8dd27fa9c69f1d659789d8f2a0a775a9e8d52831c90da9c0f818e1d8b5c1686ea23a35de8c3e007fd5dda806c95a2bddb9bdbad6da366b0977efce9f49682666afc7dcfa42a0043697599dd290a601db79b41eb63dad5287425ee65a91bb56410fc81239c5b3f0dd86eaebb95a6cb96e6bcf55a0978605304165e41c2db052de7e69ff9fbb06afe4e0ffdebcccd92919a50a8f6707baddbd46f0fb86de650d648b22600a8b5a8db4fd0ac002796b38f003440932cca544c810408089ef4bb456888a8f280d1a462610f77c07e649cb27f1031c8a0811f72d8b40345c9bf51d4db489e3ae5a405e0c6d7e6c5672a851bd79fe668f745a20298f0b850d4dc57ecf91ce2d35392209c46c9c2d7f8263c383ce8622f35af8828be2cd8cb68fa75e21040049907a1b3f5369122e73dadd89a771e5912c10a05277c9d17dd51c29272049c642b19824b91641015beecc986a8d2b6374263b5a6344967b4dc03e574d88f9d1ee37a32c70b7562f88e6cf8efc7aaa4930cd058efd24b05b68d746ebba827ef51c66aab4dc98af631ed5585e7fc79af5e6737d7dab5ca6c8f38769d4a83d2dee8b716a79351678c01d63aeafa722e88d6ebeb719f46c9826aee9140e8fa3b05c297f5b95eae9e11eb61c6aafa5f31545d7dbcd25a02cfe9ef2cd9df848345fb508a919ffb59da8e880148ef1af42eebb8e571f18d51f489290e7075169d2e22d60e1d03d439a1fb808a45b08abd2f47d13815efa5456a34f3664b956df1b04c252a923581aed4bf1b41cc4f62a8a63981a24bb0845d20865b22ba3f9ea88fa8e6b3693c71395e97c2eb40e3bceb4eff68b6bc7d87b3a9c0150b9542525f760aa0d3bc659c0facd6f6eee68b401365d2102b8444dec69d038083ea738fc9fb4df28bc0b060ed2015861323272c8744039ccf69d15be54887d03683d7ec42f8f76f0281381b443b5439a832e6bb021f24ca5c81fbc0078745f1bae1e05f0b7eafac63472a8f67b5784df0855cd7dfb7306fdc10661c52c4ec53be3ccbc8d235d14e592e17c09812bdc5bbea6c711ed3eef1d0f63f6bcfc8da36f5e799c563a654fc619b2accdd32a089409533f416c16ec602c86150653da9f42f8ef105e335c83a6209ba421644d20561cad857ed11e214c5bba1a86a52d7f4d5012e244de13474774651915b35174bc25d4f5b66487601de090b3f0a3a16f8a7b798d0a60821d2cc48ed19de8d7ca81d21c18a8f37d829e673348e4a2c75925fd95c6d50536a7b27cd384a0567bfface21b30df6e84460b385d5e7dd8a37e2d7e5b5993123a82ea641a562c0055e36ccf01a70bef93049c2b8377c54abe0204d9db7cf3a9f2e18348f5907457a8fd45ea3d1b809b001bc8cbc26fcca7d6bf5c26f41050fbf08f6da776e2fa758f6c9b93414c842819438862108cd9af491e64c4934e043fdcc9618788980d35bdaa071e0e21be3ec7d30d7e33a71966f9d8f2a918e2e3f2c9406cbbc271fee87290bcaca895037479345e73453cd11f0340edf415f6b9dd8726ca665a70b82f8eae93dc41c124329aa19f668d3a395d45e25cc4763ec89891e742ee1ed44e105baa13e684255ffedd969e8abfe22741370d2e3a29fc33adb6d02cc2c04e362f947c76eaf4bf51399d50cc6d851957a9bb2e2a4fdb06b9dafcf07c9e0070f46755d2333bb92a0e8209c5eeb23d9690c802a69cc0f5269f6c9aa03f6284437193ba2cf16c8ddcb251caf599c795e2f94490b03bed233aba357b29d8d4d2d141ceff38f28e98bd849035bc860abc343782f292d5d812057c139e096b9ce3c4cf8ef3e4a2922f4370f78c8192804489108294d8592523ffd8a9398d077f262a2270ebd9e1477795de56f9c602721d879d4caeae74886936b861885ec63ff04fbefcfb5eff93bb27e4f8cca4362d5d176c45d3fe0c0d7898fb898160bb51125b0d6366daecaf03b8aade85f113c903242828b09da303f6e259bc8283b73a2fe04775618e29dcc0a7ce52ce022be6dd47f364afe2cc88cc389e6481e4c531879acca91e7853fe44916a413b1ad00d52f11495d6e04eacc8c38b91a0358a7c84da7e67928379b9d89e1a1cee390873ab68e639ece02a863363e1e8f87d716d4c363874433c92571e02a83e7b866235334fa9e54c2cb74ee72bcfbe132021a160e8358c655f62d6801ef50f173b34ef13a90f8e91f7bd7d0e22ec62d80fca8710b8e0b87fdac39641a39ad9c50259caeef3d1f93047ffd557c791cee6666e785517fd2db94941b5d5ee5ed2a510c1d7ccc9ff071b5f2292e2c067c0c12e2bbfc56a4c29f0da1d1b2e37d6c25d8edeeef82cc2073c58840492e7ab741ff1add63b020c9bb96c4a4b98fa56d2f0e0f7fd7600ff4ab54e823fd279855579996885569576821242be0e49f06a3806214a526cc1f7128b7a3cca3c0c2afb287e08efe2a1016f3feac7d2d228c268273ec04a5fab1cb674c1bea3b60c4cd0ec1afbc9c1e1987ab663ca1e46849d7e39c5eaf686a3e0f4a26d8c6d5dd8dda42ff82563a627b6ffb87f687079f6aed98401d35e37f1b03733011f58fc1f8a90af579eb932843cc9bb82644b59c073b75871d7606909fc7169bac7e6d1fbd815029dd62b9c30c1d03223d59893db57c68b6c702aad8c99efc08e2254bb5101fddb11aca49b9b58f2ecbef252d652b7f34254ae6f48d6ece1024a00401a07e1104f650e04191b9cade01e9ffb9a703ea43b2163ca5ed94fbb492ef4b481515cdf31b720e74c34fdfba9b5e23d66b67252f9afc6c69cc3da49811f5037a6447aec98c2725dae79255ded77294082e7ebafed3c470c130acab20de3edbdb52be444ecdf78ef2aa6207d449e9d7e4b845f1ad21801d810b545475c82eb9657e4e81f63fef67291534cfe6cf66cd0fec71918be00067854babc8ddf062c313404874f0e0e7d5739b65843baacbaf8f6163c79cab8ca492218be29aae50997af3ba86c34c9df2396a17e40adfb11e5e9793a549c65d3097b45150dfde971bdc3629a6be7ad0dd112e219ff4f2365a373b16119381000bf4eaa2ae9e9aa3b0074c3b58f020cdbbf28298f6cbbc5e141e4b4e0a613a92ffcf7ea15cdf4e0f4f7c22c3f240ba99ab8e15b0608048be3caa2df2301eff28eecb04b3c185bcc48c4fdcd773480256f8c30e9edcb249e3a7f6f7d06d77b77b06b89708161b6717cbb272d5c0ba09a12820e20a6841e582e86b80cfed425e3dceff02af1d6cbc6dd70f8d0dad8b33b9e576d8737588a1b913587c21def40ad5162338965d879a9c0a9dd28c34196c7efe819562afc77a6d9fe59f66daf8dcf59dc02556ccd047950700542e72994c5818b2bba92748d74044f1b4dbae2321fc066c7779521ad39686fbdc61d694dc1c87a313245ce8d665aeab3723c1e6cba0c45c2c31a4c006e7b61c3fe421170d7c932438b74e56b4ef695c0e87b0d01d96c45c8249af82682acb23dbdcae344ead5cb2cb9bb48f0ca7887d31af2cb907bd348457b4bc79727e09f1ca3ddfe129b972987083d28d74d1e1e17b4c0b9882f94b7631dcbef1524de5486508e563c897cca87261d617f566c162b66d2972d0464705c5ddbefb2130cafd815eb2f8b45cb2824ed259b8bae0444266a23d4887a013b1b48d1b877da53377a01aeb5b1b30bffdc58e6524fa2e94391c9d8b07eded303f3e30837df65648e2a3d3b598e06bf838323d2b16ca1f79bf5645dba42959e91407102eff7790b5b34046d1de0289151b9147502171a0a6737d7dfdc6a53391d35eebf24d4b9978eee3bc14b2dea1145fb1b07d4f9bb67727800770cc93a20eb4a01b51ecb74e5a5d06955afd7e0fd03e7476448f43868952b7812664818f4501142c6b93261873cea6e85da789e4de62b5e7a9aeafcca53517dbd150f135be6d4b2f227d2124e93e2cd43c3c564eebde1f38986b5f665c30967f7a1006c8674b49df31242744d2f426b8add41c8bd45cc6266e07b96ddae8ffb16da2219317b7361068167d37302119d9ea3f9f70632240813f556b159c2b581d92a2d621f956f5eba9dc4cc5e1171eed5794b9161e1239967278f0eeb1d9b2812603d6bf6afad74f99e774a12ef6cd03d11f5e0ed0c1978c98c0b88ae931d51f3adcb318bc5da1feceeabd7c4e890fa1976a3593c53735fea37cbaeb8f1855ceb4f1a86c7149a68e90b4d492c6cb460290cd24ac64ca6dd764293cfc400f38a4c87cf9846c47a7d6812825ca8265c49e25f28109325825611531f8c4c3bae268df29484e310aa45aa7b09655e8d51938e2dedd8459f7149975d75c8a80f7c5ddb459d31a9b7e17becb00961a8a281d34a3b8bd537b32d70e5e3dcbafb214a35361b59151002c1172afe075b35f9526cfa2976ba43b984b189ddce86f28bb6d25626d38eaf6a50eff729193506e01243d815b4a92ca7bb8dbf39f330e28a774385037eaf01bd"}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x0, 0x70bd26}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:01 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8a402, 0x0) openat(r2, &(0x7f00000000c0)='./bus\x00', 0x100, 0x86) sendfile(r0, r1, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, r4, &(0x7f0000000180)=0xfffffffffffffffc, 0x6) 06:17:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x80000) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) (async) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46900) ftruncate(r3, 0x800) (async) lseek(r3, 0x20400, 0x0) (async) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) (async) ftruncate(r3, 0x0) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000040), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12011d00090000082502000000000000010109025c00020100f92a0904108f5f41ee9ab91142006c4838cc00000102090000052406000105240800000d240f010000000000000000008606241a000000190581806e44c2028e8ad454d0ab42e9ea1991e2b15a59473877e3637f4559d04cd2e1099ce0ef4a49f8b95a6c694e30bc6963d2eed3ae54ecc33413fa8c7c5771b8ed8a776e6f2229b2af66a832641fee3c036ec2bee3e39ec1f57936173b4fcb46bd03f8af72e95ac09fdd669bbd3101473ecdd795696f48eeb6449f385f08a5e35df0e9add467c3d87cccc744de723dc15661204e643c0000000000000000"], 0x0) 06:17:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = dup3(r1, r0, 0x80000) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46900) (async) ftruncate(r3, 0x800) lseek(r3, 0x20400, 0x0) (async) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) (async) ftruncate(r3, 0x0) (async) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000040), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12011d00090000082502000000000000010109025c00020100f92a0904108f5f41ee9ab91142006c4838cc00000102090000052406000105240800000d240f010000000000000000008606241a000000190581806e44c2028e8ad454d0ab42e9ea1991e2b15a59473877e3637f4559d04cd2e1099ce0ef4a49f8b95a6c694e30bc6963d2eed3ae54ecc33413fa8c7c5771b8ed8a776e6f2229b2af66a832641fee3c036ec2bee3e39ec1f57936173b4fcb46bd03f8af72e95ac09fdd669bbd3101473ecdd795696f48eeb6449f385f08a5e35df0e9add467c3d87cccc744de723dc15661204e643c0000000000000000"], 0x0) 06:17:02 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0xfffffffffffffff8, 0x200, 0x1, 0x3, 0x0, [0x4, 0x10001, 0x4, 0x1]}) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1083.313084][ T22] usb 2-1: new high-speed USB device number 103 using dummy_hcd 06:17:02 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffa) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46900) ftruncate(r3, 0x800) lseek(r3, 0x20400, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000040), &(0x7f0000000180)=0x8) [ 1083.463058][ T5212] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1083.483136][T10141] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1083.573097][ T22] usb 2-1: Using ep0 maxpacket: 8 06:17:02 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x1f, 0x3f, 0x40, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x8, 0x2}}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x1, 0x180, 0xfffffffd, {0x0, 0xea60}, {r2, r3/1000+60000}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x26, 0x1, 0x0, 0x0, "548511e27d20c4f31152b0f8ceb177c5d16b9de297a8eee1b94f8434e8f036f61d88ef7b9fba306a5455e72a3b93ecf761bfaf566e2e6d16182c0545a1c12879"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0xc810) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r6, 0x1, {0x1, 0xf0, 0x2}, 0xfd}, 0x18, &(0x7f0000000040)={&(0x7f0000000180)="95288a23f277ebb100b7b2f8f5f4b8122742645f4c0e217c979e1dfa37f08fe19b0299c39716852d6a8341881d4479106684822f30f16e4e72678c0d3a481b433f4c6a2305ac76a931e7afab13437684e47b1381e974f8080a70c1c2837cbee309896884e3dfb9e20dd04052f2b3100883b7c67e6cfb0b17ffb1ad50d61d5a5865c1e6de236dab76ca1aa69b607ac4c6dc5e06ce00f3b2f15f610ad01f22a76aa0d670a2eb", 0xa5}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r7 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x1dd03) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000482502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES32=r7, @ANYRES16=r8], 0x0) [ 1083.703296][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.713665][ T5212] usb 1-1: Using ep0 maxpacket: 8 [ 1083.715901][T17994] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1083.728660][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1083.756286][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.769705][T10141] usb 3-1: Using ep0 maxpacket: 8 06:17:02 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1083.843366][ T5212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.863372][ T5212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1083.872341][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 1083.872354][ T27] audit: type=1804 audit(1681798622.729:3966): pid=17996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/699/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1083.904849][ T22] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1083.914566][ T5212] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1083.927974][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1083.936246][ T22] usb 2-1: SerialNumber: syz [ 1083.943362][T10141] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.955949][T10141] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1083.965187][ T27] audit: type=1804 audit(1681798622.729:3967): pid=17996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/699/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1083.990654][ T2618] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1083.998305][T10141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.003087][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1084.009455][ T22] hub 2-1:1.0: bad descriptor, ignoring hub [ 1084.022099][ T22] hub: probe of 2-1:1.0 failed with error -5 [ 1084.028506][ T5212] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1084.037919][ T5212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1084.047236][ T5212] usb 1-1: SerialNumber: syz [ 1084.048985][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1084.062558][ T22] cdc_wdm 2-1:1.0: Unknown control protocol [ 1084.074320][ T27] audit: type=1804 audit(1681798622.739:3968): pid=17996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/699/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1084.103958][ T27] audit: type=1804 audit(1681798622.799:3969): pid=17997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/699/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1084.131394][ T5212] hub 1-1:1.0: bad descriptor, ignoring hub [ 1084.138814][ T5212] hub: probe of 1-1:1.0 failed with error -5 [ 1084.145277][T10141] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1084.156350][ T5212] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1084.162905][T10141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1084.172172][T10141] usb 3-1: SerialNumber: syz [ 1084.223231][ T7] usb 5-1: device descriptor read/64, error 18 [ 1084.225349][T10141] hub 3-1:1.0: bad descriptor, ignoring hub [ 1084.238868][T10141] hub: probe of 3-1:1.0 failed with error -5 [ 1084.250387][T10141] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1084.259305][ T2618] usb 4-1: Using ep0 maxpacket: 8 [ 1084.329363][T10141] usb 2-1: USB disconnect, device number 103 [ 1084.383439][ T2618] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.393921][ T2618] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1084.403915][ T2618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.483334][ T5212] usb 1-1: USB disconnect, device number 70 [ 1084.493196][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1084.503222][ T2618] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1084.514309][ T2618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1084.522615][ T2618] usb 4-1: SerialNumber: syz [ 1084.543554][ T5164] usb 3-1: USB disconnect, device number 24 [ 1084.584460][ T2618] hub 4-1:1.0: bad descriptor, ignoring hub [ 1084.590694][ T2618] hub: probe of 4-1:1.0 failed with error -5 [ 1084.602155][ T2618] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1084.609016][ T2618] cdc_wdm 4-1:1.0: Unknown control protocol 06:17:03 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) [ 1084.687575][ T7] usb 5-1: device descriptor read/64, error 18 [ 1084.741362][ T27] audit: type=1804 audit(1681798623.599:3970): pid=17999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/700/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1084.770103][ T27] audit: type=1804 audit(1681798623.629:3971): pid=17999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/700/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1084.798443][ T27] audit: type=1804 audit(1681798623.659:3972): pid=17999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/700/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1084.821442][ T7] usb usb5-port1: attempt power cycle 06:17:03 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x0, 0x2) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8a402, 0x0) openat(r2, &(0x7f00000000c0)='./bus\x00', 0x100, 0x86) sendfile(r0, r1, 0x0, 0x1dd03) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, r4, &(0x7f0000000180)=0xfffffffffffffffc, 0x6) [ 1084.852389][ T27] audit: type=1804 audit(1681798623.689:3973): pid=17992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir363157862/syzkaller.Mb5z7L/848/bus" dev="sda1" ino=1184 res=1 errno=0 06:17:03 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) recvmsg$can_j1939(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/41, 0x29}], 0x1, &(0x7f0000000180)=""/149, 0x95}, 0x40002100) 06:17:03 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0xfffffffffffffff8, 0x200, 0x1, 0x3, 0x0, [0x4, 0x10001, 0x4, 0x1]}) (async) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1084.883453][ T27] audit: type=1804 audit(1681798623.709:3974): pid=18000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/700/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1085.233146][ T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1085.283077][ T5164] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1085.283231][ T5176] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1085.303868][ T2618] usb 3-1: new high-speed USB device number 25 using dummy_hcd 06:17:04 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) open(0x0, 0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8a402, 0x0) openat(r2, &(0x7f00000000c0)='./bus\x00', 0x100, 0x86) (async) sendfile(r0, r1, 0x0, 0x1dd03) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, r4, &(0x7f0000000180)=0xfffffffffffffffc, 0x6) [ 1085.333341][ T7] usb 5-1: Invalid ep0 maxpacket: 72 06:17:04 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv4_getnexthop={0x4c, 0x6a, 0xe28, 0x4, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) lseek(r1, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000380)=""/56, &(0x7f00000003c0)=0x38) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1085.421262][ T27] audit: type=1804 audit(1681798624.279:3975): pid=18019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/582/bus" dev="sda1" ino=1164 res=1 errno=0 [ 1085.493286][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1085.543089][ T5176] usb 1-1: Using ep0 maxpacket: 8 06:17:04 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1085.576939][ T2618] usb 3-1: Using ep0 maxpacket: 8 [ 1085.593682][ T7] usb 5-1: Invalid ep0 maxpacket: 72 [ 1085.599842][ T7] usb usb5-port1: unable to enumerate USB device 06:17:04 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1085.663315][ T5176] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.676591][ T5176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1085.693266][ T2618] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 06:17:04 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x4}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1085.709719][ T2618] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1085.715309][ T5176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.723860][ T2618] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.813398][ T5164] usb 2-1: device descriptor read/64, error -71 [ 1085.813604][ T5176] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1085.833441][ T2618] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1085.846913][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1085.850332][ T2618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1085.856567][ T5176] usb 1-1: SerialNumber: syz [ 1085.867341][ T2618] usb 3-1: SerialNumber: syz [ 1085.914024][ T5176] hub 1-1:1.0: bad descriptor, ignoring hub [ 1085.919953][ T5176] hub: probe of 1-1:1.0 failed with error -5 [ 1085.926568][ T5176] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1085.934834][ T2618] hub 3-1:1.0: bad descriptor, ignoring hub [ 1085.940750][ T2618] hub: probe of 3-1:1.0 failed with error -5 [ 1085.959053][ T2618] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1086.103154][ T5164] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1086.243411][ T7] usb 1-1: USB disconnect, device number 71 [ 1086.253961][ T2618] usb 3-1: USB disconnect, device number 25 [ 1086.363060][ T5164] usb 2-1: Using ep0 maxpacket: 8 06:17:05 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1086.523227][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.543166][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1086.552649][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.623623][ T2618] usb 4-1: USB disconnect, device number 5 06:17:05 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x1f, 0x3f, 0x40, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x8, 0x2}}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x1, 0x180, 0xfffffffd, {0x0, 0xea60}, {r2, r3/1000+60000}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x26, 0x1, 0x0, 0x0, "548511e27d20c4f31152b0f8ceb177c5d16b9de297a8eee1b94f8434e8f036f61d88ef7b9fba306a5455e72a3b93ecf761bfaf566e2e6d16182c0545a1c12879"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0xc810) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) r4 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r6, 0x1, {0x1, 0xf0, 0x2}, 0xfd}, 0x18, &(0x7f0000000040)={&(0x7f0000000180)="95288a23f277ebb100b7b2f8f5f4b8122742645f4c0e217c979e1dfa37f08fe19b0299c39716852d6a8341881d4479106684822f30f16e4e72678c0d3a481b433f4c6a2305ac76a931e7afab13437684e47b1381e974f8080a70c1c2837cbee309896884e3dfb9e20dd04052f2b3100883b7c67e6cfb0b17ffb1ad50d61d5a5865c1e6de236dab76ca1aa69b607ac4c6dc5e06ce00f3b2f15f610ad01f22a76aa0d670a2eb", 0xa5}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ftruncate(0xffffffffffffffff, 0x800) (async) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r7 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x1dd03) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000482502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES32=r7, @ANYRES16=r8], 0x0) 06:17:05 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46900) ftruncate(r2, 0x800) lseek(r2, 0x4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r4, 0x0, 0x1dd03) 06:17:05 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0xfffffffffffffff8, 0x200, 0x1, 0x3, 0x0, [0x4, 0x10001, 0x4, 0x1]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:05 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000000000) [ 1086.673355][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1086.682411][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1086.697540][ T5164] usb 2-1: SerialNumber: syz [ 1086.774414][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 1086.780384][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 1086.812831][ T5164] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device 06:17:05 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x100, 0x2c) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1086.813459][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1086.820251][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol 06:17:05 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:05 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1087.027909][ T5212] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1087.063209][ T2618] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1087.073400][T10141] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1087.127765][ T5166] usb 2-1: USB disconnect, device number 105 [ 1087.133861][ T5176] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1087.293150][ T5212] usb 3-1: Using ep0 maxpacket: 8 [ 1087.323132][ T5176] usb 5-1: device descriptor read/64, error 18 [ 1087.323278][ T2618] usb 4-1: Using ep0 maxpacket: 8 [ 1087.336236][T10141] usb 1-1: Using ep0 maxpacket: 8 [ 1087.443200][ T5212] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.457703][ T5212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1087.466904][T10141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.477112][ T2618] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.487276][ T5212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.497255][T10141] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1087.506309][ T2618] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1087.515411][T10141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.526590][ T2618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.593057][ T5176] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1087.593277][ T5212] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1087.610081][ T5212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1087.618421][T10141] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1087.627571][ T2618] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1087.637585][ T5212] usb 3-1: SerialNumber: syz 06:17:06 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:06 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv4_getnexthop={0x4c, 0x6a, 0xe28, 0x4, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) (async) lseek(r1, 0x0, 0x2) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r4, 0x0, 0x1dd03) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000380)=""/56, &(0x7f00000003c0)=0x38) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1087.642629][T10141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1087.651012][ T2618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1087.669339][T10141] usb 1-1: SerialNumber: syz [ 1087.674485][ T2618] usb 4-1: SerialNumber: syz 06:17:06 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1087.709854][ T5212] hub 3-1:1.0: bad descriptor, ignoring hub [ 1087.722419][ T5212] hub: probe of 3-1:1.0 failed with error -5 [ 1087.730229][T10141] hub 1-1:1.0: bad descriptor, ignoring hub [ 1087.736944][T10141] hub: probe of 1-1:1.0 failed with error -5 [ 1087.744769][ T2618] hub 4-1:1.0: bad descriptor, ignoring hub [ 1087.750703][ T2618] hub: probe of 4-1:1.0 failed with error -5 06:17:06 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async, rerun: 64) open(0x0, 0x0, 0x0) (rerun: 64) ftruncate(r1, 0x800) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv4_getnexthop={0x4c, 0x6a, 0xe28, 0x4, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) lseek(r1, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000380)=""/56, &(0x7f00000003c0)=0x38) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1087.763517][ T5212] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1087.775499][T10141] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1087.783263][ T5176] usb 5-1: device descriptor read/64, error 18 [ 1087.798988][ T2618] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1087.807464][ T2618] cdc_wdm 4-1:1.0: Unknown control protocol [ 1087.813594][T10141] cdc_wdm 1-1:1.0: Unknown control protocol [ 1087.913614][ T5176] usb usb5-port1: attempt power cycle [ 1088.023173][ T5166] usb 3-1: USB disconnect, device number 26 [ 1088.069128][ T7] usb 1-1: USB disconnect, device number 72 [ 1088.184813][ T9] usb 4-1: USB disconnect, device number 6 [ 1088.323064][ T5176] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1088.413347][ T5176] usb 5-1: Invalid ep0 maxpacket: 72 06:17:07 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1088.563050][ T5176] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1088.663177][ T5176] usb 5-1: Invalid ep0 maxpacket: 72 [ 1088.668596][ T5176] usb usb5-port1: unable to enumerate USB device 06:17:08 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x1f, 0x3f, 0x40, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x8, 0x2}}) (async) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x1, 0x180, 0xfffffffd, {0x0, 0xea60}, {r2, r3/1000+60000}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x26, 0x1, 0x0, 0x0, "548511e27d20c4f31152b0f8ceb177c5d16b9de297a8eee1b94f8434e8f036f61d88ef7b9fba306a5455e72a3b93ecf761bfaf566e2e6d16182c0545a1c12879"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0xc810) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r6, 0x1, {0x1, 0xf0, 0x2}, 0xfd}, 0x18, &(0x7f0000000040)={&(0x7f0000000180)="95288a23f277ebb100b7b2f8f5f4b8122742645f4c0e217c979e1dfa37f08fe19b0299c39716852d6a8341881d4479106684822f30f16e4e72678c0d3a481b433f4c6a2305ac76a931e7afab13437684e47b1381e974f8080a70c1c2837cbee309896884e3dfb9e20dd04052f2b3100883b7c67e6cfb0b17ffb1ad50d61d5a5865c1e6de236dab76ca1aa69b607ac4c6dc5e06ce00f3b2f15f610ad01f22a76aa0d670a2eb", 0xa5}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) (async) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r7 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x1dd03) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000482502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES32=r7, @ANYRES16=r8], 0x0) 06:17:08 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0b0400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:08 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0ffffffffffff) 06:17:08 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x2, {0x3, 0x0, 0x2}, 0x2}, 0x18) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:08 executing program 0: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x41) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x20400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = syz_io_uring_setup(0x2de7, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x880) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x6ae9, &(0x7f00000002c0)={0x0, 0x1, 0x10}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x13, 0x20000000, r11) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r11) r12 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r12, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r13, &(0x7f0000000240)='./file0\x00') syz_io_uring_submit(r4, r10, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x75, 0x0, 0x0, 0x3, &(0x7f0000000200)=[r3, r1, r6, r2, r0, r7], 0x6, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 06:17:08 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1089.816989][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 1089.817006][ T27] audit: type=1804 audit(1681798628.679:4006): pid=18069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/711/bus" dev="sda1" ino=1168 res=1 errno=0 06:17:08 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1089.877490][ T27] audit: type=1804 audit(1681798628.679:4007): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/585/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1089.909863][T18074] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1089.947844][ T27] audit: type=1800 audit(1681798628.679:4008): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1174 res=0 errno=0 06:17:08 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x840) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r0, 0x800) lseek(r0, 0x4, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) [ 1089.985666][ T27] audit: type=1804 audit(1681798628.689:4009): pid=18072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/451/bus" dev="sda1" ino=1180 res=1 errno=0 [ 1090.019242][ T27] audit: type=1804 audit(1681798628.719:4010): pid=18069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/711/bus" dev="sda1" ino=1168 res=1 errno=0 06:17:08 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x840) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r0, 0x800) lseek(r0, 0x4, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) [ 1090.061381][ T27] audit: type=1804 audit(1681798628.719:4011): pid=18066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir363157862/syzkaller.Mb5z7L/850/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1090.101275][ T27] audit: type=1800 audit(1681798628.719:4012): pid=18066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 1090.123361][T10141] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1090.123795][ T27] audit: type=1804 audit(1681798628.849:4013): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/712/bus" dev="sda1" ino=1168 res=1 errno=0 06:17:09 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x840) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r0, 0x800) lseek(r0, 0x4, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) [ 1090.180913][ T27] audit: type=1804 audit(1681798628.849:4014): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/712/bus" dev="sda1" ino=1168 res=1 errno=0 06:17:09 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1090.213422][ T27] audit: type=1804 audit(1681798628.959:4015): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/713/bus" dev="sda1" ino=1168 res=1 errno=0 [ 1090.239584][ T9] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1090.243300][ T2618] usb 4-1: new high-speed USB device number 7 using dummy_hcd 06:17:09 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1090.283172][ T5176] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1090.413745][T10141] usb 3-1: Using ep0 maxpacket: 8 [ 1090.473276][ T5176] usb 5-1: device descriptor read/64, error 18 [ 1090.493148][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1090.533149][ T2618] usb 4-1: Using ep0 maxpacket: 8 [ 1090.538407][T10141] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.549154][T10141] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1090.558630][T10141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.613249][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.628017][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1090.638504][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1090.653508][T10141] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1090.664152][T10141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1090.672198][T10141] usb 3-1: SerialNumber: syz [ 1090.680670][ T2618] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.692640][ T2618] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1090.707369][ T2618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.733580][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1090.743055][ T5176] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1090.756793][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1090.764389][T10141] hub 3-1:1.0: bad descriptor, ignoring hub [ 1090.768241][ T9] usb 2-1: SerialNumber: syz [ 1090.770673][T10141] hub: probe of 3-1:1.0 failed with error -5 [ 1090.771131][T10141] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1090.803283][ T2618] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1090.813680][ T2618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1090.815008][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1090.822431][ T2618] usb 4-1: SerialNumber: syz [ 1090.841576][ T9] hub: probe of 2-1:1.0 failed with error -5 [ 1090.849107][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1090.860172][ T9] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1090.874155][ T2618] hub 4-1:1.0: bad descriptor, ignoring hub [ 1090.880095][ T2618] hub: probe of 4-1:1.0 failed with error -5 [ 1090.905778][ T2618] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1090.912227][ T2618] cdc_wdm 4-1:1.0: Unknown control protocol [ 1090.943456][ T5176] usb 5-1: device descriptor read/64, error 18 [ 1091.063214][ T5176] usb usb5-port1: attempt power cycle [ 1091.093285][T10141] usb 3-1: USB disconnect, device number 27 [ 1091.146837][ T5212] usb 4-1: USB disconnect, device number 7 [ 1091.263426][T10141] usb 2-1: USB disconnect, device number 106 [ 1091.473165][ T5176] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1091.583170][ T5176] usb 5-1: Invalid ep0 maxpacket: 72 [ 1091.739060][ T5176] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1091.833376][ T5176] usb 5-1: Invalid ep0 maxpacket: 72 [ 1091.838994][ T5176] usb usb5-port1: unable to enumerate USB device 06:17:11 executing program 4: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x80440, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f00000000c0)=""/41, &(0x7f0000000100)=0x29) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x10002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2ed05a6f1ed5eaa83a8d8ea783bc0eb484281a2f66696c653000"]) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x10f4, 0x0, 0x3, 0x5, 0x70bd27, 0x25dfdbfb, {0x3, 0x0, 0x1}, [@nested={0xc, 0x3b, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r2}]}, @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x2d, 0x2b, 0x0, 0x1, [@generic="5764b7578d42cbd8a1a809a606999152454f1c9fecfc959895dbf2e0ae74dcfd00e79eb9d717ddebe7"]}, @generic="c25d4e26c02ade24b3f23a300b67ded127f49cbddc589ded263d36091ed456123a424f76b216ca8c260ec0ea364006ecfe30485c37e405e06fe7c759ae43dbda99897f171505c375683cc8fcabd641923dfac1761e0e583d1297e4a5af13cd0ba5d97883a826c948d3657f56980a784b35ff46f59f2827ebf963f45b57fcfbcd22d1", @typed={0xc, 0x41, 0x0, 0x0, @u64=0x15f}, @generic="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"]}, 0x10f4}, 0x1, 0x0, 0x0, 0x8840}, 0x4040891) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:11 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:11 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x2, {0x3, 0x0, 0x2}, 0x2}, 0x18) (async) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:11 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) (async) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) (async) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0b0400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:11 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff6) 06:17:11 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000040)=0x10, 0x80000) lseek(r0, 0xfffffffffffffffc, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:11 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:11 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x2, {0x3, 0x0, 0x2}, 0x2}, 0x18) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:11 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0b0400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x0, 0x2) (async) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) sendfile(r1, r2, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0b0400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) 06:17:11 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) 06:17:11 executing program 5: r0 = creat(0x0, 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:12 executing program 5: r0 = creat(0x0, 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1093.223299][ T5176] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1093.433312][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1093.483073][ T5176] usb 4-1: Using ep0 maxpacket: 8 [ 1093.513762][ T5166] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1093.623258][ T5176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.633859][ T5176] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1093.642807][ T5176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.683085][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1093.703128][T14364] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1093.710777][ T5166] usb 3-1: device descriptor read/64, error 18 06:17:12 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) fallocate(r0, 0x0, 0x1, 0x9) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00000102090000052406000105240800000d240f0100000000000000000006241a004000190581"], 0x0) 06:17:12 executing program 5: r0 = creat(0x0, 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:12 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1093.733313][ T5176] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1093.759680][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1093.768298][ T5176] usb 4-1: SerialNumber: syz 06:17:12 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1093.823489][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.834695][ T5176] hub 4-1:1.0: bad descriptor, ignoring hub [ 1093.840639][ T5176] hub: probe of 4-1:1.0 failed with error -5 [ 1093.848596][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1093.859571][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.874827][ T5176] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1093.880777][ T5176] cdc_wdm 4-1:1.0: Unknown control protocol [ 1093.963180][T14364] usb 1-1: Using ep0 maxpacket: 8 [ 1093.983232][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1093.992680][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1094.000975][ T5166] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1094.009097][ T9] usb 2-1: SerialNumber: syz [ 1094.054349][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1094.060287][ T9] hub: probe of 2-1:1.0 failed with error -5 [ 1094.067113][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1094.072355][ T9] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1094.079104][ T7] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1094.113456][T14364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.124430][T14364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1094.133970][T14364] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.213289][T10141] usb 4-1: USB disconnect, device number 8 [ 1094.219678][ T5166] usb 3-1: device descriptor read/64, error 18 [ 1094.233301][T14364] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1094.242375][T14364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1094.250437][T14364] usb 1-1: SerialNumber: syz [ 1094.304373][T14364] hub 1-1:1.0: bad descriptor, ignoring hub [ 1094.315863][T14364] hub: probe of 1-1:1.0 failed with error -5 [ 1094.322208][T14364] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1094.343260][ T5166] usb usb3-port1: attempt power cycle [ 1094.363242][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 1094.386621][ T9] usb 2-1: USB disconnect, device number 107 [ 1094.493279][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.503830][ T7] usb 5-1: config 1 has no interfaces? 06:17:13 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1094.583130][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1094.592310][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1094.601608][ T7] usb 5-1: SerialNumber: syz [ 1094.644021][ T9] usb 1-1: USB disconnect, device number 73 [ 1094.753154][ T5166] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1094.894379][ T7] usb 5-1: USB disconnect, device number 26 [ 1094.923305][ T5166] usb 3-1: device descriptor read/8, error -61 06:17:13 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:13 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './bus', [{0x20, '&\''}, {0x20, '\\)'}, {0x20, ',$'}, {}, {0x20, '\'!-]'}, {0x20, '^/t/'}], 0xa, "33049a08503da161963dea087eb4d20a3a5c3ed996bed55da0288c56c301857cb11aa70aae40ca501bde31ce32ef4362bfb25c21496aea0e9dc883d955ac979ea31d1d260c036625ba5ad635d1d58e190f20813f40906604b9ef8577f7af1a7305991edae376e7c5a33dd4fe9869375954e685c28bc90641a9c013c207ddc8662a094cf737870c8d8ab54ecd625424f5d66dea882a80ee11fc0022be86ab4ee8e4689487b45e212b9c40b0ca9df1c2d8413149f87697a5bacb3d9c7f10a9a208cc76354f63007efe5ab9e66201cb8327da28fe560198bee1d89f58f8c0d1613a1451b94bcb6962fbb5b7cfe7dd81ae73569031"}, 0x110) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) fstat(r0, &(0x7f0000000080)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) ftruncate(r4, 0x401) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:13 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff6) 06:17:13 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1095.064865][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 1095.064890][ T27] audit: type=1804 audit(1681798633.929:4050): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/588/bus" dev="sda1" ino=1175 res=1 errno=0 [ 1095.113249][ T27] audit: type=1804 audit(1681798633.969:4051): pid=18147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/453/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1095.149176][ T27] audit: type=1800 audit(1681798633.969:4052): pid=18147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1095.180307][ T27] audit: type=1800 audit(1681798633.969:4053): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1175 res=0 errno=0 [ 1095.211349][ T27] audit: type=1804 audit(1681798633.969:4054): pid=18145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/726/bus" dev="sda1" ino=1166 res=1 errno=0 [ 1095.238143][ T5166] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1095.246164][ T27] audit: type=1804 audit(1681798633.969:4055): pid=18145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/726/bus" dev="sda1" ino=1166 res=1 errno=0 [ 1095.272159][ T27] audit: type=1804 audit(1681798633.989:4056): pid=18148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir363157862/syzkaller.Mb5z7L/852/bus" dev="sda1" ino=1184 res=1 errno=0 [ 1095.302192][ T27] audit: type=1800 audit(1681798633.989:4057): pid=18148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1184 res=0 errno=0 [ 1095.433475][ T5166] usb 3-1: device descriptor read/8, error -61 [ 1095.443119][T10141] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1095.450650][ T5212] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1095.554051][ T5166] usb usb3-port1: unable to enumerate USB device [ 1095.683130][T10141] usb 4-1: Using ep0 maxpacket: 8 [ 1095.693209][ T5212] usb 2-1: Using ep0 maxpacket: 8 [ 1095.803113][T10141] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.813454][ T5212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.823647][T10141] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1095.833286][ T5212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1095.842248][T10141] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.853233][ T5212] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.945881][T10141] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1095.963149][ T5212] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1095.972207][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1095.980722][T10141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1095.989030][T10141] usb 4-1: SerialNumber: syz [ 1095.994442][ T5212] usb 2-1: SerialNumber: syz [ 1096.034524][T10141] hub 4-1:1.0: bad descriptor, ignoring hub [ 1096.040762][T10141] hub: probe of 4-1:1.0 failed with error -5 [ 1096.048367][ T5212] hub 2-1:1.0: bad descriptor, ignoring hub [ 1096.055193][ T5212] hub: probe of 2-1:1.0 failed with error -5 [ 1096.062281][T10141] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1096.069028][T10141] cdc_wdm 4-1:1.0: Unknown control protocol [ 1096.075329][ T5212] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device 06:17:14 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) 06:17:14 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:14 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:14 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000140)="1c53d22de68b34d25fade6f2f8fb350b96aa6a55ad697ee833555dd35434d8da5cf921f6af8d75aff2c90da90fb7298c48f4e3e9ba12a4a818392fec968b3e3372a530d8a14f3b234cfe547adbe30445d2de25472954d685c913fdb9fd2c19787056129b9ef929f3c3b01d73f8416081c329b2e9dd5c7ce0a401cfc3ef5e1176ce537e007d2f13f4ca99be222e96a9d9785c76995929f31e6bd989e65a5f7053e10c63dc8ad6d790e8cbe3385011cc38119fbf74fd9e0f3f622136b6fcf93cb6c06c6e276af3902f6e9f6b70a485d7c78b2e2217e9f33f570d5e604a8dad5a7341991a662de86d332939b900e13d611b2d1b1e4747d751ebf007f6c160b5", 0xfe}, {&(0x7f0000000240)="93a8be6e89e4f67f4acca3f52f4b8df99670e64c45f918f89b08c42ed1fc6b033cc39a0eaecd400f79b425a109412b0a2cafa00928f98030ef14defb1ba5e898076cabdc26247a13", 0x48}, {&(0x7f00000002c0)="cdbaf207e6e70399bbfcae3e1625bcc70c5ae2bdc53c039b62fdab992aaa0f3fafa4316c35fd894501a97cbc6c90aab6a6f0e0b5f5518672cef20a7de6a7d000b1926b536fc882a2e68a20a9990c5ea6301fd22c77bfafd6b415c1af375fbc88ccbbf3ec9a5a08f6b956dc04bd6a461819a3046e3bde6d8784819ea0396688700b92b7e9fd702d3d4363815a0e98dc04367e64e539ab72d2ed99f15d752441c2f68d2545cdd9267b4751803da7fb1ebd9ded8e80ce38b83e34300888547cd0c16b8a", 0xc2}, {&(0x7f00000003c0)="5976cd07a3666afc806124953b17fc899f54e91b58d0c7cfe8254b9f158a0b2e667c35fc1436e7a20f4dbc00a11623c7194e0024b9adcee990c871c260be68b9ab22a648d5bc2cd0cedc9596eab80f5ab915ea25f0ce0eecfc18b4c3416679673092b104e1e6dfef877d6474877f8e6657f339d376586e85793ab96dcf7c29aad93a4085729a22b61593678bf0c5ddf89fa023f122ae6ca7ed87398a3564a50b9d07d82a8b9a8ac23418b9b5e5", 0xad}, {&(0x7f0000000480)="acf6a7f0e2499fb5dbde3f597925c897eec74be3006242a2082a78ce1c09863c7c70aa6d57584cf3ccbb0b9ae057dc42b044ccfce0b85c36ff0b9b2267e1065231b5", 0x42}, {&(0x7f0000000500)="e169098b346ece69259f1f8dadb6dd446f6ba98a33ccbaa74038801c80e0c1", 0x1f}, {&(0x7f0000000540)="0967f006aa6d03a22bacb73ddd5ab0dd262f32b2f8fa88cba448cda91d694860205c0f2efa61bd433fe66195d776a49ed5e05129276d4707fb6169912f2dcb3c779c72d2c4e277b1a5cb9f612f1f09c6aaf4c14786bfad6ab52acaa05fd121f558a3ad1f6eb5b389bb16f7fd62ccf6895e9a5735d412b8143117841667a9edae3359d861217ef7abc5fc395c1fa061c49264b594946df22ae20f3869d6d625c534d274c85ee7526861ccf2f7516c9eb6305f91842f3a2f1a191e61963ded7d48e97308db0a3970784ebf1e56348d00f1595273ec", 0xd4}, {&(0x7f0000000640)="cf9cf186f9e1bd90efbbf288d7", 0xd}], 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@rand_addr=0x64010100, 0x0, 0x0, 0x20, 0x0, [{@broadcast}, {@multicast1}]}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d24fb0000000000000000000006241a00000019058142d374cdf4c910ce73906a9aace980117a5a97351f146aae0ade6246a15078fe440928b85bb48ca78418e056074ea217ac51733026ca7571b4a2daaaa0609ef845fc1141690f26eca6858f0808e14ddaa8b308cc19b0e2802ae9dc4c9f047a29db87095ee211da7df40a77b5"], 0x0) [ 1096.081241][ T5212] cdc_wdm 2-1:1.0: Unknown control protocol 06:17:15 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) [ 1096.155809][ T27] audit: type=1804 audit(1681798635.019:4058): pid=18163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/727/bus" dev="sda1" ino=1182 res=1 errno=0 06:17:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, r0, 0x0, 0xffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:15 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1096.202657][ T27] audit: type=1804 audit(1681798635.049:4059): pid=18163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/727/bus" dev="sda1" ino=1182 res=1 errno=0 06:17:15 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:15 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1096.433201][T10141] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1096.453126][ T5212] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1096.563064][ T22] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1096.673169][T10141] usb 5-1: Using ep0 maxpacket: 8 [ 1096.693198][ T5212] usb 1-1: Using ep0 maxpacket: 8 [ 1096.793197][T10141] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.803497][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 1096.808721][T10141] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1096.817982][ T5212] usb 1-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 1096.828543][T10141] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.839885][ T5212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1096.849644][ T5212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29907, setting to 1024 [ 1096.863733][ T5212] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1096.923268][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.933574][T10141] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1096.943085][T10141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1096.951132][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1096.960879][ T5212] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1096.970214][T10141] usb 5-1: SerialNumber: syz [ 1096.974925][ T5212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1096.982931][ T5212] usb 1-1: SerialNumber: syz [ 1096.987646][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.023388][T18162] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1097.033838][T10141] hub 5-1:1.0: bad descriptor, ignoring hub [ 1097.039758][T10141] hub: probe of 5-1:1.0 failed with error -5 [ 1097.047035][ T5212] hub 1-1:1.0: bad descriptor, ignoring hub [ 1097.052959][ T5212] hub: probe of 1-1:1.0 failed with error -5 [ 1097.065229][ T5212] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1097.083185][ T22] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1097.093124][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1097.101263][ T22] usb 3-1: SerialNumber: syz [ 1097.145253][ T22] hub 3-1:1.0: bad descriptor, ignoring hub [ 1097.151323][ T22] hub: probe of 3-1:1.0 failed with error -5 [ 1097.157999][ T22] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1097.224167][T18144] cdc_wdm 4-1:1.0: Error autopm - -16 [ 1097.224408][ T5166] usb 4-1: USB disconnect, device number 9 [ 1097.231640][T10141] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 1097.245249][T10141] cdc_wdm 5-1:1.0: Unknown control protocol [ 1097.248195][T18159] cdc_wdm 4-1:1.0: Error autopm - -16 [ 1097.321678][T10141] usb 5-1: USB disconnect, device number 27 [ 1097.403276][ T9] usb 1-1: USB disconnect, device number 74 [ 1097.403286][ T22] usb 2-1: USB disconnect, device number 108 [ 1097.463188][ T5164] usb 3-1: USB disconnect, device number 32 06:17:16 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 32) lseek(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './bus', [{0x20, '&\''}, {0x20, '\\)'}, {0x20, ',$'}, {}, {0x20, '\'!-]'}, {0x20, '^/t/'}], 0xa, "33049a08503da161963dea087eb4d20a3a5c3ed996bed55da0288c56c301857cb11aa70aae40ca501bde31ce32ef4362bfb25c21496aea0e9dc883d955ac979ea31d1d260c036625ba5ad635d1d58e190f20813f40906604b9ef8577f7af1a7305991edae376e7c5a33dd4fe9869375954e685c28bc90641a9c013c207ddc8662a094cf737870c8d8ab54ecd625424f5d66dea882a80ee11fc0022be86ab4ee8e4689487b45e212b9c40b0ca9df1c2d8413149f87697a5bacb3d9c7f10a9a208cc76354f63007efe5ab9e66201cb8327da28fe560198bee1d89f58f8c0d1613a1451b94bcb6962fbb5b7cfe7dd81ae73569031"}, 0x110) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async, rerun: 64) ftruncate(r2, 0x800) (rerun: 64) lseek(r2, 0x0, 0x2) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) fstat(r0, &(0x7f0000000080)) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) ftruncate(r4, 0x401) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) connect$can_j1939(r0, &(0x7f00000004c0)={0x1d, r3, 0x2, {0x1, 0xff}, 0xff}, 0x18) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x100000000, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x610141, 0x0) r8 = userfaultfd(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r12, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r15, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmmsg$unix(r5, &(0x7f0000000480)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000180)="e96c37a4ad64a2b9a650238be843b0796a618b7cacdc06c5b77929bbc98de53da6256f633db301c26364735a2e9159887e21d2eca55c23af678fcec9a2a8118b8a56c41a45343fca7cc47a769c3b6466fc75ba47c135aba34cf7b1d3b96f412a602be2ef3f0b5da8ece7a3b92311b1382a8383cf240eeae89219bc31c9b4d5cb0b3a", 0x82}, {&(0x7f0000000080)="9358c28017188c896ddde52075a1fb6c16dcd89bab0026a01201d687660e7ea33ef09008fde963db1f", 0x29}], 0x2, &(0x7f0000000400)=[@rights={{0x34, 0x1, 0x1, [r6, 0xffffffffffffffff, r7, r8, r9, r10, r11, r0, r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r5, r15]}}], 0x70, 0x4000041}}], 0x1, 0x4048810) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:16 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) connect$can_j1939(r0, &(0x7f00000004c0)={0x1d, r3, 0x2, {0x1, 0xff}, 0xff}, 0x18) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x100000000, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x610141, 0x0) r8 = userfaultfd(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r12, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r15, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmmsg$unix(r5, &(0x7f0000000480)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000180)="e96c37a4ad64a2b9a650238be843b0796a618b7cacdc06c5b77929bbc98de53da6256f633db301c26364735a2e9159887e21d2eca55c23af678fcec9a2a8118b8a56c41a45343fca7cc47a769c3b6466fc75ba47c135aba34cf7b1d3b96f412a602be2ef3f0b5da8ece7a3b92311b1382a8383cf240eeae89219bc31c9b4d5cb0b3a", 0x82}, {&(0x7f0000000080)="9358c28017188c896ddde52075a1fb6c16dcd89bab0026a01201d687660e7ea33ef09008fde963db1f", 0x29}], 0x2, &(0x7f0000000400)=[@rights={{0x34, 0x1, 0x1, [r6, 0xffffffffffffffff, r7, r8, r9, r10, r11, r0, r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r5, r15]}}], 0x70, 0x4000041}}], 0x1, 0x4048810) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:16 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:16 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) sendfile(r1, r0, 0x0, 0xffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) sendfile(r1, r0, 0x0, 0xffffffff) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) [ 1097.811930][T18181] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 06:17:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1097.911666][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:16 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = open(0x0, 0x0, 0x0) (rerun: 32) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async, rerun: 64) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './bus', [{0x20, '&\''}, {0x20, '\\)'}, {0x20, ',$'}, {}, {0x20, '\'!-]'}, {0x20, '^/t/'}], 0xa, "33049a08503da161963dea087eb4d20a3a5c3ed996bed55da0288c56c301857cb11aa70aae40ca501bde31ce32ef4362bfb25c21496aea0e9dc883d955ac979ea31d1d260c036625ba5ad635d1d58e190f20813f40906604b9ef8577f7af1a7305991edae376e7c5a33dd4fe9869375954e685c28bc90641a9c013c207ddc8662a094cf737870c8d8ab54ecd625424f5d66dea882a80ee11fc0022be86ab4ee8e4689487b45e212b9c40b0ca9df1c2d8413149f87697a5bacb3d9c7f10a9a208cc76354f63007efe5ab9e66201cb8327da28fe560198bee1d89f58f8c0d1613a1451b94bcb6962fbb5b7cfe7dd81ae73569031"}, 0x110) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) (async, rerun: 64) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (rerun: 64) sendfile(r2, r3, 0x0, 0x1dd03) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) fstat(r0, &(0x7f0000000080)) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) ftruncate(r4, 0x401) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:16 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 06:17:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:17 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:17 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1098.163245][ T5164] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1098.213198][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1098.233477][ T5166] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1098.303060][ T5169] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1098.413055][ T5164] usb 4-1: Using ep0 maxpacket: 8 [ 1098.453316][T10141] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1098.483067][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1098.488299][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1098.533116][ T5164] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.543397][ T5164] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1098.552377][ T5164] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.573070][ T5169] usb 1-1: Using ep0 maxpacket: 8 [ 1098.623273][ T5166] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.633324][ T5164] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1098.642423][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.642451][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1098.660177][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1098.661871][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.669863][ T5164] usb 4-1: SerialNumber: syz [ 1098.680468][ T5166] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1098.680514][ T5166] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.704801][T10141] usb 2-1: Using ep0 maxpacket: 8 [ 1098.733362][ T5169] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.743908][ T5169] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1098.753372][ T5166] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1098.754514][ T5164] hub 4-1:1.0: bad descriptor, ignoring hub [ 1098.762539][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1098.777571][ T5164] hub: probe of 4-1:1.0 failed with error -5 [ 1098.778220][ T5169] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.789815][ T5164] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1098.793819][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1098.808412][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1098.816582][ T9] usb 5-1: SerialNumber: syz [ 1098.821933][ T5166] usb 3-1: SerialNumber: syz [ 1098.853326][T10141] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.868478][T10141] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1098.878180][T10141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.879387][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 1098.895229][ T5169] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1098.906341][ T5166] hub 3-1:1.0: bad descriptor, ignoring hub [ 1098.912265][ T5166] hub: probe of 3-1:1.0 failed with error -5 [ 1098.918438][ T5169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1098.926490][ T5169] usb 1-1: SerialNumber: syz [ 1098.931916][ T5166] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1098.938551][ T9] hub: probe of 5-1:1.0 failed with error -5 [ 1098.954705][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1098.960634][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 1098.973833][T10141] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1098.984170][ T5169] hub 1-1:1.0: bad descriptor, ignoring hub [ 1098.990106][ T5169] hub: probe of 1-1:1.0 failed with error -5 [ 1098.994661][T10141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1099.023903][T10141] usb 2-1: SerialNumber: syz [ 1099.026089][ T5169] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1099.084261][T10141] hub 2-1:1.0: bad descriptor, ignoring hub [ 1099.090199][T10141] hub: probe of 2-1:1.0 failed with error -5 [ 1099.154111][ T5164] usb 4-1: USB disconnect, device number 10 [ 1099.203980][T10141] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1099.211098][T10141] cdc_wdm 2-1:1.0: Unknown control protocol [ 1099.213151][ T9] usb 5-1: USB disconnect, device number 28 [ 1099.230729][ T5166] usb 3-1: USB disconnect, device number 33 [ 1099.313349][ T5164] usb 1-1: USB disconnect, device number 75 [ 1099.413808][ T5166] usb 2-1: USB disconnect, device number 109 06:17:18 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000) 06:17:18 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000) 06:17:18 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r1, 0x800) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@jqfmt_vfsold}, {@user_xattr}]}, 0x1, 0x4c0, &(0x7f0000000a00)="$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") lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) ftruncate(r4, 0x800) lseek(r4, 0x20400, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x12ec331b84f94302, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ftruncate(r4, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x68, 0x49, 0x10, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x3f, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x4040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r7, 0x2, {0x2, 0x1, 0x4}, 0x2}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) sendfile(r1, r0, 0x0, 0xffffffff) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:18 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:18 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) 06:17:18 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x0, 0x2) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) [ 1099.832177][T18232] loop4: detected capacity change from 0 to 512 06:17:18 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x50}}, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1099.873532][T18232] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1099.884591][T18232] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1099.907299][ T5164] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1100.043295][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1100.063077][ T5166] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1100.163136][ T5164] usb 4-1: Using ep0 maxpacket: 8 [ 1100.283244][ T5164] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.293062][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1100.304287][ T5164] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1100.313220][ T5166] usb 1-1: Using ep0 maxpacket: 8 [ 1100.323062][ T7] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1100.325874][ T5164] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.413220][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.423858][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1100.433291][ T5166] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.445603][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.450437][ T5164] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1100.461857][ T5166] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1100.473943][ T5166] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.479745][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1100.503291][ T5164] usb 4-1: SerialNumber: syz [ 1100.553160][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1100.562768][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1100.564100][ T5164] hub 4-1:1.0: bad descriptor, ignoring hub [ 1100.571262][ T5166] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1100.585951][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 1100.591305][ T9] usb 3-1: SerialNumber: syz [ 1100.596284][ T5164] hub: probe of 4-1:1.0 failed with error -5 06:17:19 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1100.596960][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1100.611061][ T5166] usb 1-1: SerialNumber: syz [ 1100.614237][ T5164] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1100.636826][ T5164] cdc_wdm 4-1:1.0: Unknown control protocol [ 1100.654247][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 1100.660187][ T9] hub: probe of 3-1:1.0 failed with error -5 [ 1100.668104][ T5166] hub 1-1:1.0: bad descriptor, ignoring hub [ 1100.682366][ T5166] hub: probe of 1-1:1.0 failed with error -5 [ 1100.691542][ T9] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1100.698249][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 1100.698263][ T27] audit: type=1804 audit(1681798639.559:4095): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/739/bus" dev="sda1" ino=1176 res=1 errno=0 [ 1100.730016][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.740377][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 06:17:19 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x810, r3, 0x1bf0000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x6, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x906, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0x4}, {0xf, 0xe}, {0x4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x20}}, @tclass_kind_options=@c_htb={{0x8}, {0x8, 0x2, [@TCA_HTB_OFFLOAD={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x4001) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1100.752249][ T5166] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1100.753479][ T27] audit: type=1804 audit(1681798639.619:4096): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/739/bus" dev="sda1" ino=1176 res=1 errno=0 [ 1100.785903][ T5166] cdc_wdm 1-1:1.0: Unknown control protocol [ 1100.792002][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.875289][ T27] audit: type=1804 audit(1681798639.729:4097): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir513037482/syzkaller.9C6tix/517/bus" dev="sda1" ino=1183 res=1 errno=0 [ 1100.893333][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1100.908330][ T27] audit: type=1800 audit(1681798639.729:4098): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 1100.951270][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1100.975467][ T7] usb 2-1: SerialNumber: syz [ 1101.004983][ T5166] usb 3-1: USB disconnect, device number 34 [ 1101.045002][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 1101.051363][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 1101.255994][ T5166] usb 4-1: USB disconnect, device number 11 [ 1101.262503][ T7] cdc_wdm 2-1:1.0: cdc-wdm2: USB WDM device [ 1101.276360][T18245] cdc_wdm 4-1:1.0: Error autopm - -16 [ 1101.282820][ T7] cdc_wdm 2-1:1.0: Unknown control protocol 06:17:20 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1101.334213][ T7] usb 2-1: USB disconnect, device number 110 [ 1101.373582][T14364] usb 1-1: USB disconnect, device number 76 06:17:20 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1101.570669][ T27] audit: type=1804 audit(1681798640.429:4099): pid=18257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/740/bus" dev="sda1" ino=1176 res=1 errno=0 [ 1101.649367][ T27] audit: type=1804 audit(1681798640.509:4100): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/740/bus" dev="sda1" ino=1176 res=1 errno=0 [ 1101.713165][T14364] usb 3-1: new high-speed USB device number 35 using dummy_hcd 06:17:20 executing program 4: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0ffff) 06:17:20 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:20 executing program 3: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0700000000000000000006241a000000414d81"], 0x0) 06:17:20 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x50}}, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1101.891562][ T27] audit: type=1804 audit(1681798640.749:4101): pid=18266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/595/bus" dev="sda1" ino=1182 res=1 errno=0 06:17:20 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x50}}, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) (async) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) (async) lseek(r5, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) (async) sendfile(r5, r6, 0x0, 0x1dd03) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1101.977121][T14364] usb 3-1: Using ep0 maxpacket: 8 [ 1102.005634][ T27] audit: type=1804 audit(1681798640.759:4102): pid=18267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir513037482/syzkaller.9C6tix/518/bus" dev="sda1" ino=1183 res=1 errno=0 [ 1102.070173][ T27] audit: type=1800 audit(1681798640.759:4103): pid=18267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 1102.093646][T14364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.109891][T14364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 06:17:20 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1102.115210][ T27] audit: type=1800 audit(1681798640.779:4104): pid=18266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1102.139727][T14364] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.153166][ T5166] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1102.160874][ T7] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1102.233217][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1102.263256][T14364] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1102.273929][T14364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1102.291267][T14364] usb 3-1: SerialNumber: syz [ 1102.335441][T14364] hub 3-1:1.0: bad descriptor, ignoring hub [ 1102.341640][T14364] hub: probe of 3-1:1.0 failed with error -5 [ 1102.348683][T14364] cdc_wdm: probe of 3-1:1.0 failed with error -22 06:17:21 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1102.413229][ T5166] usb 4-1: Using ep0 maxpacket: 8 [ 1102.418434][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 1102.473157][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1102.543162][ T5166] usb 4-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config [ 1102.553535][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.564138][ T5166] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1102.573302][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1102.582372][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.594516][ T5166] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1102.613137][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.616208][ T5164] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1102.623750][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1102.640237][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.658449][T10141] usb 3-1: USB disconnect, device number 35 [ 1102.683224][ T7] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1102.692698][ T5166] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1102.702422][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1102.710908][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1102.719368][ T5166] usb 4-1: SerialNumber: syz [ 1102.724361][ T7] usb 1-1: SerialNumber: syz [ 1102.733229][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1102.742921][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1102.751360][ T9] usb 5-1: SerialNumber: syz [ 1102.774381][ T5166] hub 4-1:1.0: bad descriptor, ignoring hub [ 1102.780317][ T5166] hub: probe of 4-1:1.0 failed with error -5 [ 1102.787536][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 1102.797809][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 1102.805146][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 1102.811113][ T9] hub: probe of 5-1:1.0 failed with error -5 [ 1102.817876][ T5166] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1102.827439][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1102.835992][ T9] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1102.842025][ T7] cdc_wdm 1-1:1.0: Unknown control protocol [ 1102.849080][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 1102.893221][ T5164] usb 2-1: Using ep0 maxpacket: 8 06:17:21 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) [ 1103.023225][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.039241][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1103.075114][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.103457][ T22] usb 4-1: USB disconnect, device number 12 [ 1103.139488][T10141] usb 1-1: USB disconnect, device number 77 [ 1103.183272][ T9] usb 5-1: USB disconnect, device number 29 [ 1103.193216][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1103.210270][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1103.226301][ T5164] usb 2-1: SerialNumber: syz 06:17:22 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1103.274078][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 1103.280023][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 1103.295754][ T5164] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1103.309122][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol [ 1103.403103][ T22] usb 3-1: new high-speed USB device number 36 using dummy_hcd 06:17:22 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x50}}, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:22 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1800000000000000) 06:17:22 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x200000000000000) [ 1103.623715][ T5166] usb 2-1: USB disconnect, device number 111 [ 1103.663820][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 1103.793384][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.813439][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1103.840155][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.883107][ T5164] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1103.943265][ T22] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1103.952633][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1103.961378][ T22] usb 3-1: SerialNumber: syz [ 1104.014368][ T22] hub 3-1:1.0: bad descriptor, ignoring hub [ 1104.021542][ T22] hub: probe of 3-1:1.0 failed with error -5 [ 1104.038660][ T22] cdc_wdm: probe of 3-1:1.0 failed with error -22 06:17:23 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1104.133132][ T5164] usb 4-1: Using ep0 maxpacket: 8 06:17:23 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:23 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:23 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 64) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x8}) (async, rerun: 64) openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = open(0x0, 0x0, 0x0) (rerun: 32) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 32) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (rerun: 32) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r2, 0x800) (async, rerun: 64) lseek(r2, 0x0, 0x2) (async, rerun: 64) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1104.266116][ T5164] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.292488][ T5164] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 06:17:23 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x7ff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xcd4, 0x800}) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) [ 1104.312088][ T5164] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.353666][ T22] usb 3-1: USB disconnect, device number 36 06:17:23 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) ftruncate(r4, 0x800) lseek(r4, 0x20400, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ftruncate(r4, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000180)=0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0904000001020900000545060001052408000068240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:23 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0ffffffffffff) [ 1104.416682][ T5164] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1104.430786][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1104.452043][ T5164] usb 4-1: SerialNumber: syz 06:17:23 executing program 4: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8a01) [ 1104.525566][ T5164] hub 4-1:1.0: bad descriptor, ignoring hub [ 1104.531524][ T5164] hub: probe of 4-1:1.0 failed with error -5 [ 1104.577626][ T5164] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1104.584643][ T5164] cdc_wdm 4-1:1.0: Unknown control protocol [ 1104.813073][ T22] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1104.903106][T10141] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1104.955649][ T5212] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1104.983677][ T5164] usb 4-1: USB disconnect, device number 13 [ 1105.003122][ T5166] usb 4-1: Failed to suspend device, error -71 06:17:23 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1105.103097][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 1105.183169][T10141] usb 5-1: Using ep0 maxpacket: 8 [ 1105.223419][ T5212] usb 2-1: Using ep0 maxpacket: 8 [ 1105.243285][ T22] usb 3-1: config 1 has an invalid descriptor of length 183, skipping remainder of the config [ 1105.254771][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1105.264094][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16112, setting to 64 [ 1105.303336][T10141] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.321238][T10141] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1105.344955][T10141] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.357062][ T5212] usb 2-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 1105.367805][ T22] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1105.377205][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1105.385319][ T5212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1105.397724][ T22] usb 3-1: SerialNumber: syz [ 1105.402820][ T5212] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1105.454427][ T22] hub 3-1:1.0: bad descriptor, ignoring hub [ 1105.460369][ T22] hub: probe of 3-1:1.0 failed with error -5 [ 1105.467642][ T22] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1105.474512][T10141] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1105.486024][T10141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1105.494184][T10141] usb 5-1: SerialNumber: syz 06:17:24 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1f5) 06:17:24 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:24 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1105.533288][ T5212] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1105.547452][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1105.558673][T10141] hub 5-1:1.0: bad descriptor, ignoring hub [ 1105.575943][T10141] hub: probe of 5-1:1.0 failed with error -5 06:17:24 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(0xffffffffffffffff, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1105.584790][ T5212] usb 2-1: SerialNumber: syz [ 1105.610573][T10141] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1105.626391][T10141] cdc_wdm 5-1:1.0: Unknown control protocol [ 1105.641128][ T5212] hub 2-1:1.0: bad descriptor, ignoring hub 06:17:24 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x0) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1105.657243][ T5212] hub: probe of 2-1:1.0 failed with error -5 06:17:24 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x0) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1105.681356][ T5212] cdc_wdm 2-1:1.0: skipping garbage [ 1105.697653][ T5212] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1105.708633][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 1105.708649][ T27] audit: type=1804 audit(1681798644.569:4141): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/747/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1105.773229][ T7] usb 3-1: USB disconnect, device number 37 06:17:24 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x0) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1105.825325][ T27] audit: type=1804 audit(1681798644.569:4142): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/747/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1105.833385][ T5166] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1105.919018][ T27] audit: type=1804 audit(1681798644.679:4143): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/748/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1105.923235][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1105.951988][ T27] audit: type=1804 audit(1681798644.689:4144): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/748/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1105.983542][ T27] audit: type=1804 audit(1681798644.779:4145): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/749/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1106.009466][ T27] audit: type=1804 audit(1681798644.779:4146): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/749/bus" dev="sda1" ino=1181 res=1 errno=0 06:17:25 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x7ff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xcd4, 0x800}) (async) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) [ 1106.143120][ T5166] usb 1-1: Using ep0 maxpacket: 8 [ 1106.203121][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1106.263311][ T5166] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.274370][ T5166] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1106.283528][ T5166] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.323119][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.333992][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1106.343214][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.373283][ T5166] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1106.382704][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1106.390770][ T5166] usb 1-1: SerialNumber: syz [ 1106.433519][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1106.449253][ T5166] hub 1-1:1.0: bad descriptor, ignoring hub [ 1106.457556][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1106.467269][ T5166] hub: probe of 1-1:1.0 failed with error -5 [ 1106.473441][ T9] usb 4-1: SerialNumber: syz [ 1106.514045][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 1106.519967][ T9] hub: probe of 4-1:1.0 failed with error -5 06:17:28 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) lseek(0xffffffffffffffff, 0x7ff, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xcd4, 0x800}) open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) open(0x0, 0x0, 0x0) (rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) (rerun: 64) 06:17:28 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:28 executing program 4: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x18a) 06:17:28 executing program 3: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0) 06:17:28 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 32) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) (async) ftruncate(r4, 0x800) lseek(r4, 0x20400, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) (async, rerun: 64) ftruncate(r4, 0x0) (async, rerun: 64) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async, rerun: 32) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0904000001020900000545060001052408000068240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1110.044954][T18323] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1110.045158][ T22] usb 5-1: USB disconnect, device number 30 [ 1110.056743][ T5166] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1110.064688][ T9] cdc_wdm 4-1:1.0: cdc-wdm2: USB WDM device [ 1110.064921][T18337] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1110.070598][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 1110.083168][ T5166] cdc_wdm 1-1:1.0: Unknown control protocol 06:17:29 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3f00) [ 1110.123850][ T5166] usb 1-1: USB disconnect, device number 78 [ 1110.152231][ T9] usb 4-1: USB disconnect, device number 14 06:17:29 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = open(0x0, 0x0, 0x0) (rerun: 32) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x0) (rerun: 32) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x0, 0x2) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async, rerun: 32) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (rerun: 32) fcntl$setstatus(r4, 0x4, 0x46900) (async) ftruncate(r4, 0x800) (async) lseek(r4, 0x20400, 0x0) (async, rerun: 64) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (rerun: 64) sendfile(r4, r5, 0x0, 0x80001d00c0d0) (async) ftruncate(r4, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a0904000001020900000545060001052408000068240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1110.169242][ T27] audit: type=1804 audit(1681798649.029:4147): pid=18362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir363157862/syzkaller.Mb5z7L/858/bus" dev="sda1" ino=1174 res=1 errno=0 06:17:29 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1110.234016][T14364] usb 2-1: USB disconnect, device number 112 06:17:29 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2e000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x0, 0x80, 0x7, 0x3, {{0x2b, 0x4, 0x3, 0x3d, 0xac, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @remote, {[@rr={0x7, 0x13, 0xe3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1]}, @rr={0x7, 0x13, 0x36, [@empty, @loopback, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x5, [{@loopback, 0x7ff}, {@private=0xa010102}, {@local, 0x401}, {@loopback, 0x9}]}, @timestamp_addr={0x44, 0x24, 0xd8, 0x1, 0x1, [{@multicast1, 0x40}, {@rand_addr=0x64010101, 0xffffffff}, {@multicast1, 0x3ff}, {@loopback, 0x4}]}, @lsrr={0x83, 0xf, 0x82, [@empty, @loopback, @multicast2]}, @timestamp={0x44, 0x18, 0x12, 0x0, 0x4, [0x4407, 0x8, 0x1, 0x5, 0x1]}]}}}}}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x1, 0x1}, 0xfd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="120100a9ff2c096fe9bca9000000000001010d025c00020100f92a0904000001022406000105240800010d240fe7ff0014080000000000000006241a00000019058100000000f16b488942cf6683a6214b78c45d3190474814f531e1492ee67c233d07ca55b10969bc764d64be3fb336d39017b98c99dffec9a0dba77c11e18effe12660a6eaadfb0f018950cfc2232107251ec037d9399f0f76dc60e08e8b1b1757ea9c41af6d6807785249541acb8375be669832417dd77aa80cc8a8504506831df360fc5a8b1d4422cfca418dc4bd62b821032b9381e39d907a33baf69c8a65565112433bbfec251a392a1b749dbb47eb0b"], 0x0) [ 1110.299378][ T27] audit: type=1804 audit(1681798649.029:4148): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir513037482/syzkaller.9C6tix/521/bus" dev="sda1" ino=1175 res=1 errno=0 06:17:29 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a00000019058100"/68], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:29 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1110.401352][ T27] audit: type=1800 audit(1681798649.029:4149): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1175 res=0 errno=0 [ 1110.471570][ T27] audit: type=1804 audit(1681798649.059:4150): pid=18360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/750/bus" dev="sda1" ino=1172 res=1 errno=0 06:17:29 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:29 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1110.613220][ T22] usb 5-1: new high-speed USB device number 31 using dummy_hcd 06:17:29 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1110.673175][T14364] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1110.703239][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1110.737784][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1110.737800][ T27] audit: type=1804 audit(1681798649.599:4165): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/755/bus" dev="sda1" ino=1176 res=1 errno=0 [ 1110.771331][ T27] audit: type=1804 audit(1681798649.599:4166): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/755/bus" dev="sda1" ino=1176 res=1 errno=0 [ 1110.793203][T10141] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1110.873096][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 1110.893164][T14364] usb 3-1: device descriptor read/64, error 18 [ 1110.963096][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1110.993233][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.003610][T10141] usb 2-1: device descriptor read/64, error 18 [ 1111.009946][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1111.019044][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.093123][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.103643][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1111.112509][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.113123][ T22] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1111.137322][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1111.145687][ T22] usb 5-1: SerialNumber: syz [ 1111.173157][T14364] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1111.184208][ T22] hub 5-1:1.0: bad descriptor, ignoring hub [ 1111.196637][ T22] hub: probe of 5-1:1.0 failed with error -5 [ 1111.203588][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1111.206130][ T22] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1111.212631][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1111.212661][ T9] usb 4-1: SerialNumber: syz [ 1111.231650][ T22] cdc_wdm 5-1:1.0: Unknown control protocol [ 1111.265484][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 1111.271629][ T9] hub: probe of 4-1:1.0 failed with error -5 [ 1111.279070][ T9] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1111.285315][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 1111.293535][T10141] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1111.363083][T14364] usb 3-1: device descriptor read/64, error 18 [ 1111.484519][T14364] usb usb3-port1: attempt power cycle [ 1111.493084][T10141] usb 2-1: device descriptor read/64, error 18 [ 1111.533375][ T5166] usb 5-1: USB disconnect, device number 31 [ 1111.613218][T10141] usb usb2-port1: attempt power cycle [ 1111.623229][ T5169] usb 4-1: USB disconnect, device number 15 06:17:30 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1111.893132][T14364] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1111.958094][ T27] audit: type=1804 audit(1681798650.819:4167): pid=18401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/756/bus" dev="sda1" ino=1160 res=1 errno=0 [ 1111.984091][ T27] audit: type=1800 audit(1681798650.819:4168): pid=18401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1160 res=0 errno=0 06:17:30 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:30 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:30 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x600) 06:17:30 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x18) [ 1112.005648][T14364] usb 3-1: Invalid ep0 maxpacket: 111 [ 1112.047948][ T27] audit: type=1804 audit(1681798650.909:4169): pid=18405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir513037482/syzkaller.9C6tix/522/bus" dev="sda1" ino=1171 res=1 errno=0 [ 1112.074768][T10141] usb 2-1: new high-speed USB device number 115 using dummy_hcd 06:17:31 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1112.098708][ T27] audit: type=1800 audit(1681798650.909:4170): pid=18405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1171 res=0 errno=0 [ 1112.163070][T14364] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1112.184491][ T27] audit: type=1804 audit(1681798650.959:4171): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/462/bus" dev="sda1" ino=1169 res=1 errno=0 [ 1112.222255][ T27] audit: type=1804 audit(1681798650.959:4172): pid=18409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/757/bus" dev="sda1" ino=1183 res=1 errno=0 [ 1112.250264][ T27] audit: type=1800 audit(1681798650.959:4173): pid=18409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 1112.272148][ T27] audit: type=1804 audit(1681798650.969:4174): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3257150734/syzkaller.jnXrYr/462/bus" dev="sda1" ino=1169 res=1 errno=0 [ 1112.298603][T14364] usb 3-1: Invalid ep0 maxpacket: 111 [ 1112.309525][T14364] usb usb3-port1: unable to enumerate USB device [ 1112.323135][T10141] usb 2-1: device descriptor read/8, error -61 [ 1112.613107][T10141] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1112.793229][T10141] usb 2-1: device descriptor read/8, error -61 [ 1112.913473][T10141] usb usb2-port1: unable to enumerate USB device 06:17:32 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) r2 = open(0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2e000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x0, 0x80, 0x7, 0x3, {{0x2b, 0x4, 0x3, 0x3d, 0xac, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @remote, {[@rr={0x7, 0x13, 0xe3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1]}, @rr={0x7, 0x13, 0x36, [@empty, @loopback, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x5, [{@loopback, 0x7ff}, {@private=0xa010102}, {@local, 0x401}, {@loopback, 0x9}]}, @timestamp_addr={0x44, 0x24, 0xd8, 0x1, 0x1, [{@multicast1, 0x40}, {@rand_addr=0x64010101, 0xffffffff}, {@multicast1, 0x3ff}, {@loopback, 0x4}]}, @lsrr={0x83, 0xf, 0x82, [@empty, @loopback, @multicast2]}, @timestamp={0x44, 0x18, 0x12, 0x0, 0x4, [0x4407, 0x8, 0x1, 0x5, 0x1]}]}}}}}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x1, 0x1}, 0xfd}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) open(0x0, 0x0, 0x0) (rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="120100a9ff2c096fe9bca9000000000001010d025c00020100f92a0904000001022406000105240800010d240fe7ff0014080000000000000006241a00000019058100000000f16b488942cf6683a6214b78c45d3190474814f531e1492ee67c233d07ca55b10969bc764d64be3fb336d39017b98c99dffec9a0dba77c11e18effe12660a6eaadfb0f018950cfc2232107251ec037d9399f0f76dc60e08e8b1b1757ea9c41af6d6807785249541acb8375be669832417dd77aa80cc8a8504506831df360fc5a8b1d4422cfca418dc4bd62b821032b9381e39d907a33baf69c8a65565112433bbfec251a392a1b749dbb47eb0b"], 0x0) 06:17:32 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = open(0x0, 0x0, 0x0) (rerun: 64) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a00000019058100"/68], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:32 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f666b6c6530fd"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:32 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) 06:17:32 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 06:17:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r2, 0x0, 0x1dd03) 06:17:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r2, 0x0, 0x1dd03) 06:17:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r2, 0x0, 0x1dd03) [ 1113.773299][T10141] usb 1-1: new high-speed USB device number 79 using dummy_hcd 06:17:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1113.853667][ T5169] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1113.863135][T14364] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1114.023083][T10141] usb 1-1: Using ep0 maxpacket: 8 [ 1114.063085][ T5169] usb 3-1: device descriptor read/64, error 18 [ 1114.069358][T14364] usb 2-1: device descriptor read/64, error 18 [ 1114.163239][T10141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.173471][T10141] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1114.182439][T10141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.293492][T10141] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1114.306397][T10141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1114.320218][T10141] usb 1-1: SerialNumber: syz [ 1114.343410][ T5169] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1114.351036][T14364] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1114.366558][T10141] hub 1-1:1.0: bad descriptor, ignoring hub [ 1114.372597][T10141] hub: probe of 1-1:1.0 failed with error -5 [ 1114.381241][T10141] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1114.387220][T10141] cdc_wdm 1-1:1.0: Unknown control protocol [ 1114.533077][ T5169] usb 3-1: device descriptor read/64, error 18 [ 1114.543197][T14364] usb 2-1: device descriptor read/64, error 18 [ 1114.653208][ T5169] usb usb3-port1: attempt power cycle [ 1114.663307][T14364] usb usb2-port1: attempt power cycle [ 1114.698567][ T9] usb 1-1: USB disconnect, device number 79 [ 1115.073883][T14364] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1115.082515][ T5169] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1115.173238][ T5169] usb 3-1: Invalid ep0 maxpacket: 111 [ 1115.243222][T14364] usb 2-1: device descriptor read/8, error -61 [ 1115.323033][ T5169] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1115.413259][ T5169] usb 3-1: Invalid ep0 maxpacket: 111 [ 1115.422098][ T5169] usb usb3-port1: unable to enumerate USB device [ 1115.513080][T14364] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1115.683168][T14364] usb 2-1: device descriptor read/8, error -61 [ 1115.714809][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.721107][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.803746][T14364] usb usb2-port1: unable to enumerate USB device 06:17:35 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2e000, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2e000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x0, 0x80, 0x7, 0x3, {{0x2b, 0x4, 0x3, 0x3d, 0xac, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @remote, {[@rr={0x7, 0x13, 0xe3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1]}, @rr={0x7, 0x13, 0x36, [@empty, @loopback, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x5, [{@loopback, 0x7ff}, {@private=0xa010102}, {@local, 0x401}, {@loopback, 0x9}]}, @timestamp_addr={0x44, 0x24, 0xd8, 0x1, 0x1, [{@multicast1, 0x40}, {@rand_addr=0x64010101, 0xffffffff}, {@multicast1, 0x3ff}, {@loopback, 0x4}]}, @lsrr={0x83, 0xf, 0x82, [@empty, @loopback, @multicast2]}, @timestamp={0x44, 0x18, 0x12, 0x0, 0x4, [0x4407, 0x8, 0x1, 0x5, 0x1]}]}}}}}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x1, 0x1}, 0xfd}, 0x18) (async) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x1, 0x1}, 0xfd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="120100a9ff2c096fe9bca9000000000001010d025c00020100f92a0904000001022406000105240800010d240fe7ff0014080000000000000006241a00000019058100000000f16b488942cf6683a6214b78c45d3190474814f531e1492ee67c233d07ca55b10969bc764d64be3fb336d39017b98c99dffec9a0dba77c11e18effe12660a6eaadfb0f018950cfc2232107251ec037d9399f0f76dc60e08e8b1b1757ea9c41af6d6807785249541acb8375be669832417dd77aa80cc8a8504506831df360fc5a8b1d4422cfca418dc4bd62b821032b9381e39d907a33baf69c8a65565112433bbfec251a392a1b749dbb47eb0b"], 0x0) 06:17:35 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a00000019058100"/68], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:35 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:35 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2e000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x0, 0x80, 0x7, 0x3, {{0x2b, 0x4, 0x3, 0x3d, 0xac, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @remote, {[@rr={0x7, 0x13, 0xe3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1]}, @rr={0x7, 0x13, 0x36, [@empty, @loopback, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x5, [{@loopback, 0x7ff}, {@private=0xa010102}, {@local, 0x401}, {@loopback, 0x9}]}, @timestamp_addr={0x44, 0x24, 0xd8, 0x1, 0x1, [{@multicast1, 0x40}, {@rand_addr=0x64010101, 0xffffffff}, {@multicast1, 0x3ff}, {@loopback, 0x4}]}, @lsrr={0x83, 0xf, 0x82, [@empty, @loopback, @multicast2]}, @timestamp={0x44, 0x18, 0x12, 0x0, 0x4, [0x4407, 0x8, 0x1, 0x5, 0x1]}]}}}}}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x1, 0x1}, 0xfd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="120100a9ff2c096fe9bca9000000000001010d025c00020100f92a0904000001022406000105240800010d240fe7ff0014080000000000000006241a00000019058100000000f16b488942cf6683a6214b78c45d3190474814f531e1492ee67c233d07ca55b10969bc764d64be3fb336d39017b98c99dffec9a0dba77c11e18effe12660a6eaadfb0f018950cfc2232107251ec037d9399f0f76dc60e08e8b1b1757ea9c41af6d6807785249541acb8375be669832417dd77aa80cc8a8504506831df360fc5a8b1d4422cfca418dc4bd62b821032b9381e39d907a33baf69c8a65565112433bbfec251a392a1b749dbb47eb0b"], 0x0) 06:17:35 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 1) 06:17:35 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) [ 1116.552568][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 1116.552584][ T27] audit: type=1804 audit(1681798655.409:4199): pid=18454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/766/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1116.568834][T18451] FAULT_INJECTION: forcing a failure. [ 1116.568834][T18451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.600341][T18451] CPU: 1 PID: 18451 Comm: syz-executor.3 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1116.610271][T18451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1116.620346][T18451] Call Trace: [ 1116.623642][T18451] [ 1116.626586][T18451] dump_stack_lvl+0x136/0x150 [ 1116.631302][T18451] should_fail_ex+0x4a3/0x5b0 [ 1116.636012][T18451] _copy_from_user+0x30/0x190 [ 1116.639186][ T27] audit: type=1804 audit(1681798655.469:4200): pid=18454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/766/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1116.640705][T18451] copy_msghdr_from_user+0x89/0x150 [ 1116.671109][T18451] ? __copy_msghdr+0x4b0/0x4b0 [ 1116.675910][T18451] ? __lock_acquire+0xbe1/0x5df0 [ 1116.680888][T18451] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1116.685456][ T27] audit: type=1804 audit(1681798655.539:4201): pid=18457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/605/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1116.686898][T18451] ___sys_sendmsg+0xdd/0x1b0 [ 1116.713564][ T27] audit: type=1800 audit(1681798655.539:4202): pid=18457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1116.716662][T18451] ? do_recvmmsg+0x6e0/0x6e0 [ 1116.716700][T18451] ? __fget_files+0x248/0x480 [ 1116.746809][T18451] ? lock_downgrade+0x690/0x690 [ 1116.751678][T18451] ? trace_lock_acquire+0x12d/0x180 [ 1116.756896][T18451] ? receive_fd+0x110/0x110 [ 1116.761418][T18451] ? lock_acquire+0x32/0xc0 [ 1116.765934][T18451] ? receive_fd+0x110/0x110 [ 1116.770460][T18451] ? __fget_files+0x26a/0x480 [ 1116.775165][T18451] ? __fget_light+0xe5/0x270 [ 1116.779815][T18451] __sys_sendmmsg+0x18f/0x460 [ 1116.784524][T18451] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1116.789569][T18451] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1116.795227][T18451] ? wait_for_completion_io_timeout+0x20/0x20 [ 1116.801327][T18451] ? fput+0x2f/0x1a0 [ 1116.805237][T18451] ? ksys_write+0x1a3/0x250 [ 1116.809756][T18451] __x64_sys_sendmmsg+0x9d/0x100 [ 1116.814714][T18451] ? syscall_enter_from_user_mode+0x26/0x80 [ 1116.820619][T18451] do_syscall_64+0x39/0xb0 [ 1116.825055][T18451] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1116.830966][T18451] RIP: 0033:0x7f4aff08c169 [ 1116.835388][T18451] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1116.855011][T18451] RSP: 002b:00007f4affdc3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1116.863437][T18451] RAX: ffffffffffffffda RBX: 00007f4aff1abf80 RCX: 00007f4aff08c169 [ 1116.871437][T18451] RDX: 0000000000000001 RSI: 00000000200028c0 RDI: 0000000000000003 [ 1116.879423][T18451] RBP: 00007f4affdc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.887414][T18451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.895407][T18451] R13: 00007ffeea08306f R14: 00007f4affdc3300 R15: 0000000000022000 [ 1116.903400][T18451] 06:17:35 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 2) 06:17:35 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1116.929002][ T27] audit: type=1804 audit(1681798655.789:4203): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/605/bus" dev="sda1" ino=1182 res=1 errno=0 06:17:35 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(0x0, 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1116.964152][ T27] audit: type=1800 audit(1681798655.789:4204): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1116.997265][ T27] audit: type=1804 audit(1681798655.849:4205): pid=18460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/767/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1117.055757][ T27] audit: type=1804 audit(1681798655.859:4206): pid=18460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/767/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1117.063151][T10141] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1117.088743][ T22] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1117.099316][T18462] FAULT_INJECTION: forcing a failure. [ 1117.099316][T18462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.121494][ T27] audit: type=1804 audit(1681798655.979:4207): pid=18464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/768/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1117.141373][T18462] CPU: 1 PID: 18462 Comm: syz-executor.3 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1117.156579][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1117.166651][T18462] Call Trace: [ 1117.169940][T18462] [ 1117.172886][T18462] dump_stack_lvl+0x136/0x150 [ 1117.177594][T18462] should_fail_ex+0x4a3/0x5b0 [ 1117.182293][T18462] _copy_to_user+0x30/0x160 [ 1117.186806][T18462] simple_read_from_buffer+0xd0/0x160 [ 1117.192205][T18462] proc_fail_nth_read+0x18b/0x220 [ 1117.197249][T18462] ? proc_fault_inject_read+0x220/0x220 [ 1117.202808][T18462] ? security_file_permission+0xaf/0xd0 [ 1117.208379][T18462] vfs_read+0x28d/0x960 [ 1117.212542][T18462] ? proc_fault_inject_read+0x220/0x220 [ 1117.218111][T18462] ? kernel_read+0x1c0/0x1c0 [ 1117.222711][T18462] ? receive_fd+0x110/0x110 [ 1117.227236][T18462] ? __fget_files+0x26a/0x480 [ 1117.231948][T18462] ksys_read+0x12b/0x250 [ 1117.236199][T18462] ? vfs_write+0xe40/0xe40 [ 1117.240625][T18462] ? syscall_enter_from_user_mode+0x26/0x80 [ 1117.246555][T18462] do_syscall_64+0x39/0xb0 [ 1117.250989][T18462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1117.256916][T18462] RIP: 0033:0x7f4aff03df8c [ 1117.261338][T18462] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1117.280951][T18462] RSP: 002b:00007f4affdc3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1117.289394][T18462] RAX: ffffffffffffffda RBX: 00007f4aff1abf80 RCX: 00007f4aff03df8c [ 1117.297374][T18462] RDX: 000000000000000f RSI: 00007f4affdc31e0 RDI: 0000000000000006 06:17:36 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(0x0, 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) [ 1117.305352][T18462] RBP: 00007f4affdc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1117.313332][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.321313][T18462] R13: 00007ffeea08306f R14: 00007f4affdc3300 R15: 0000000000022000 [ 1117.329321][T18462] [ 1117.343044][ T5212] usb 3-1: new high-speed USB device number 46 using dummy_hcd 06:17:36 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(0x0, 0x125000, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:36 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1117.384477][ T27] audit: type=1804 audit(1681798656.239:4208): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/769/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1117.413976][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1117.473615][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 1117.493399][T10141] usb 5-1: device descriptor read/64, error 18 [ 1117.533167][ T5212] usb 3-1: device descriptor read/64, error 18 [ 1117.593202][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.603327][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1117.612198][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.633318][ T9] usb 2-1: device descriptor read/64, error 18 [ 1117.703154][ T22] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1117.718032][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1117.726180][ T22] usb 1-1: SerialNumber: syz [ 1117.774120][ T22] hub 1-1:1.0: bad descriptor, ignoring hub [ 1117.780056][ T22] hub: probe of 1-1:1.0 failed with error -5 [ 1117.790526][T10141] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1117.801471][ T22] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1117.811566][ T5212] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1117.819218][ T22] cdc_wdm 1-1:1.0: Unknown control protocol [ 1117.923067][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1117.975760][T18452] FAULT_INJECTION: forcing a failure. [ 1117.975760][T18452] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.988454][T10141] usb 5-1: device descriptor read/64, error 18 [ 1117.994767][T18452] CPU: 1 PID: 18452 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1118.004675][T18452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1118.014724][T18452] Call Trace: [ 1118.018001][T18452] [ 1118.020922][T18452] dump_stack_lvl+0x136/0x150 [ 1118.025619][T18452] should_fail_ex+0x4a3/0x5b0 [ 1118.030294][T18452] should_failslab+0x9/0x20 [ 1118.034791][T18452] kmem_cache_alloc+0x63/0x3b0 [ 1118.039554][T18452] ? lock_downgrade+0x690/0x690 [ 1118.044426][T18452] getname_flags.part.0+0x50/0x4f0 [ 1118.049562][T18452] getname+0x92/0xd0 [ 1118.053473][T18452] do_sys_openat2+0xf5/0x4c0 [ 1118.058111][T18452] ? build_open_flags+0x720/0x720 [ 1118.063201][T18452] __x64_sys_openat+0x143/0x1f0 [ 1118.068094][T18452] ? __ia32_sys_open+0x1c0/0x1c0 [ 1118.073040][T18452] ? ksys_write+0x1a3/0x250 [ 1118.077545][T18452] ? syscall_enter_from_user_mode+0x26/0x80 [ 1118.083477][T18452] do_syscall_64+0x39/0xb0 [ 1118.087898][T18452] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1118.093789][T18452] RIP: 0033:0x7f11ea03e2f4 [ 1118.098219][T18452] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1118.117855][T18452] RSP: 002b:00007f11eae63ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1118.126267][T18452] RAX: ffffffffffffffda RBX: 00007f11ea1abf80 RCX: 00007f11ea03e2f4 [ 1118.134231][T18452] RDX: 0000000000000002 RSI: 00007f11eae63d40 RDI: 00000000ffffff9c [ 1118.142196][T18452] RBP: 00007f11eae63d40 R08: 0000000000000000 R09: 000000000000000f [ 1118.150173][T18452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1118.153502][ T9] usb 2-1: device descriptor read/64, error 18 [ 1118.158129][T18452] R13: 00007ffc08f5a13f R14: 00007f11eae64300 R15: 0000000000022000 [ 1118.172264][T18452] [ 1118.176465][ T5212] usb 3-1: device descriptor read/64, error 18 [ 1118.184535][T10141] usb usb5-port1: attempt power cycle [ 1118.283853][ T9] usb usb2-port1: attempt power cycle [ 1118.294558][ T5212] usb usb3-port1: attempt power cycle [ 1118.303485][ T22] usb 1-1: USB disconnect, device number 80 [ 1118.603075][T10141] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1118.703376][T10141] usb 5-1: Invalid ep0 maxpacket: 111 [ 1118.704475][ T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1118.717352][ T5212] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1118.813177][ T5212] usb 3-1: Invalid ep0 maxpacket: 111 [ 1118.873052][T10141] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1118.883229][ T9] usb 2-1: device descriptor read/8, error -61 [ 1118.963158][T10141] usb 5-1: Invalid ep0 maxpacket: 111 [ 1118.969139][ T5212] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1118.977749][T10141] usb usb5-port1: unable to enumerate USB device [ 1119.074086][ T5212] usb 3-1: Invalid ep0 maxpacket: 111 [ 1119.079572][ T5212] usb usb3-port1: unable to enumerate USB device [ 1119.163277][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1119.353105][ T9] usb 2-1: device descriptor read/8, error -61 06:17:38 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="6f73be605c00"], &(0x7f0000000080)='&\x00', 0x2, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x4, 0x4, 0x0, 'queue0\x00', 0x800}) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010009025c00020100f92a090400000102090000052486420105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1119.474551][ T9] usb usb2-port1: unable to enumerate USB device 06:17:38 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) sendfile(r2, r5, &(0x7f0000000180)=0x68, 0xa9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x0) fcntl$setstatus(r6, 0x4, 0x4000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:38 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) 06:17:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:17:38 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 2) 06:17:38 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) 06:17:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x4, 0x0}}], 0x1, 0x0) 06:17:38 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x1dd03) 06:17:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x40000, 0x0}}], 0x1, 0x0) 06:17:38 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x1dd03) 06:17:38 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x1dd03) 06:17:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x1000000, 0x0}}], 0x1, 0x0) [ 1119.883095][ T5169] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1119.913998][ T2618] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1119.943303][ T5212] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1120.033124][T10141] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1120.143112][ T5169] usb 3-1: Using ep0 maxpacket: 8 [ 1120.173092][ T2618] usb 1-1: Using ep0 maxpacket: 8 [ 1120.183478][ T5169] usb 3-1: no configurations [ 1120.188297][ T5169] usb 3-1: can't read configurations, error -22 [ 1120.203260][ T5212] usb 5-1: Using ep0 maxpacket: 8 [ 1120.303168][T10141] usb 2-1: Using ep0 maxpacket: 8 [ 1120.323226][ T2618] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.333459][ T2618] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1120.342443][ T2618] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.343152][ T5169] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1120.353836][ T5212] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.371201][ T5212] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1120.380196][ T5212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.453178][T10141] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.463379][ T2618] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1120.472420][ T2618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1120.480672][ T5212] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1120.489778][T10141] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1120.500851][ T5212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1120.509797][ T2618] usb 1-1: SerialNumber: syz [ 1120.514720][T10141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.526442][ T5212] usb 5-1: SerialNumber: syz [ 1120.584308][ T5212] hub 5-1:1.0: bad descriptor, ignoring hub [ 1120.590232][ T5212] hub: probe of 5-1:1.0 failed with error -5 [ 1120.597272][ T2618] hub 1-1:1.0: bad descriptor, ignoring hub [ 1120.603102][ T5169] usb 3-1: Using ep0 maxpacket: 8 [ 1120.603563][ T2618] hub: probe of 1-1:1.0 failed with error -5 [ 1120.618049][ T5212] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1120.628665][ T2618] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1120.634690][ T5212] cdc_wdm 5-1:1.0: Unknown control protocol [ 1120.640635][ T2618] cdc_wdm 1-1:1.0: Unknown control protocol [ 1120.643765][ T5169] usb 3-1: no configurations [ 1120.651858][ T5169] usb 3-1: can't read configurations, error -22 [ 1120.652931][T10141] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1120.658733][ T5169] usb usb3-port1: attempt power cycle [ 1120.671274][T10141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1120.697758][T10141] usb 2-1: SerialNumber: syz [ 1120.744258][T10141] hub 2-1:1.0: bad descriptor, ignoring hub [ 1120.750196][T10141] hub: probe of 2-1:1.0 failed with error -5 [ 1120.757587][T10141] cdc_wdm 2-1:1.0: cdc-wdm2: USB WDM device [ 1120.763582][T10141] cdc_wdm 2-1:1.0: Unknown control protocol [ 1120.790368][T18484] FAULT_INJECTION: forcing a failure. [ 1120.790368][T18484] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.793232][T18483] FAULT_INJECTION: forcing a failure. [ 1120.793232][T18483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.803678][T18484] CPU: 0 PID: 18484 Comm: syz-executor.4 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1120.825932][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1120.836001][T18484] Call Trace: [ 1120.839287][T18484] [ 1120.842228][T18484] dump_stack_lvl+0x136/0x150 [ 1120.846934][T18484] should_fail_ex+0x4a3/0x5b0 [ 1120.851636][T18484] should_failslab+0x9/0x20 [ 1120.856162][T18484] kmem_cache_alloc+0x63/0x3b0 [ 1120.860945][T18484] ? lock_downgrade+0x690/0x690 [ 1120.865840][T18484] getname_flags.part.0+0x50/0x4f0 [ 1120.871021][T18484] getname+0x92/0xd0 [ 1120.874990][T18484] do_sys_openat2+0xf5/0x4c0 [ 1120.879636][T18484] ? build_open_flags+0x720/0x720 [ 1120.884708][T18484] __x64_sys_openat+0x143/0x1f0 [ 1120.889584][T18484] ? __ia32_sys_open+0x1c0/0x1c0 [ 1120.894543][T18484] ? ksys_write+0x1a3/0x250 [ 1120.899092][T18484] ? syscall_enter_from_user_mode+0x26/0x80 [ 1120.905017][T18484] do_syscall_64+0x39/0xb0 [ 1120.909468][T18484] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1120.915396][T18484] RIP: 0033:0x7fe7d683e2f4 [ 1120.919837][T18484] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1120.939502][T18484] RSP: 002b:00007fe7d7679ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1120.947936][T18484] RAX: ffffffffffffffda RBX: 00007fe7d69abf80 RCX: 00007fe7d683e2f4 [ 1120.955937][T18484] RDX: 0000000000000002 RSI: 00007fe7d7679d40 RDI: 00000000ffffff9c [ 1120.963935][T18484] RBP: 00007fe7d7679d40 R08: 0000000000000000 R09: 000000000000000f [ 1120.971925][T18484] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1120.979908][T18484] R13: 00007ffd33e3417f R14: 00007fe7d767a300 R15: 0000000000022000 [ 1120.987911][T18484] [ 1120.990954][T18483] CPU: 1 PID: 18483 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1121.000871][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1121.010952][T18483] Call Trace: [ 1121.014246][T18483] [ 1121.017185][T18483] dump_stack_lvl+0x136/0x150 [ 1121.021896][T18483] should_fail_ex+0x4a3/0x5b0 [ 1121.026589][T18483] strncpy_from_user+0x38/0x400 [ 1121.031467][T18483] getname_flags.part.0+0x95/0x4f0 [ 1121.036599][T18483] getname+0x92/0xd0 [ 1121.040506][T18483] do_sys_openat2+0xf5/0x4c0 [ 1121.045116][T18483] ? build_open_flags+0x720/0x720 [ 1121.050189][T18483] __x64_sys_openat+0x143/0x1f0 [ 1121.055060][T18483] ? __ia32_sys_open+0x1c0/0x1c0 [ 1121.060035][T18483] ? ksys_write+0x1a3/0x250 [ 1121.064559][T18483] ? syscall_enter_from_user_mode+0x26/0x80 [ 1121.070481][T18483] do_syscall_64+0x39/0xb0 [ 1121.074922][T18483] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1121.080841][T18483] RIP: 0033:0x7f11ea03e2f4 [ 1121.085265][T18483] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1121.104878][T18483] RSP: 002b:00007f11eae63ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1121.113305][T18483] RAX: ffffffffffffffda RBX: 00007f11ea1abf80 RCX: 00007f11ea03e2f4 [ 1121.121289][T18483] RDX: 0000000000000002 RSI: 00007f11eae63d40 RDI: 00000000ffffff9c [ 1121.129270][T18483] RBP: 00007f11eae63d40 R08: 0000000000000000 R09: 000000000000000f [ 1121.137255][T18483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1121.145230][T18483] R13: 00007ffc08f5a13f R14: 00007f11eae64300 R15: 0000000000022000 [ 1121.153224][T18483] [ 1121.223280][ T5169] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1121.293362][T10141] usb 5-1: USB disconnect, device number 36 [ 1121.299485][T18487] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1121.313293][ T5169] usb 3-1: Using ep0 maxpacket: 8 [ 1121.334944][T10141] usb 1-1: USB disconnect, device number 81 [ 1121.353249][ T5169] usb 3-1: no configurations [ 1121.360802][ T5169] usb 3-1: can't read configurations, error -22 [ 1121.444015][ T5166] usb 2-1: USB disconnect, device number 125 [ 1121.513062][ T5169] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1121.603114][ T5169] usb 3-1: Using ep0 maxpacket: 8 [ 1121.643124][ T5169] usb 3-1: no configurations [ 1121.647806][ T5169] usb 3-1: can't read configurations, error -22 [ 1121.658503][ T5169] usb usb3-port1: unable to enumerate USB device 06:17:41 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="6f73be605c00"], &(0x7f0000000080)='&\x00', 0x2, 0x2) (async, rerun: 32) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x4, 0x4, 0x0, 'queue0\x00', 0x800}) (async) open(0x0, 0x0, 0x0) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010009025c00020100f92a090400000102090000052486420105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:41 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1dd03) 06:17:41 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0xffffff7f, 0x0}}], 0x1, 0x0) 06:17:41 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 2) 06:17:41 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 3) 06:17:41 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) (async) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) sendfile(r2, r5, &(0x7f0000000180)=0x68, 0xa9) (async) sendfile(r2, r5, &(0x7f0000000180)=0x68, 0xa9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x0) fcntl$setstatus(r6, 0x4, 0x4000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:41 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1dd03) 06:17:41 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="6f73be605c00"], &(0x7f0000000080)='&\x00', 0x2, 0x2) (async) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x4, 0x4, 0x0, 'queue0\x00', 0x800}) (async) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010009025c00020100f92a090400000102090000052486420105240800000d240f0100000000000000000006241a000000190581"], 0x0) [ 1122.478197][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1122.478213][ T27] audit: type=1804 audit(1681798661.339:4220): pid=18508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/775/bus" dev="sda1" ino=1177 res=1 errno=0 06:17:41 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 06:17:41 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1dd03) [ 1122.600071][ T27] audit: type=1804 audit(1681798661.389:4221): pid=18508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/775/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1122.638220][T18523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.663394][T18523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:17:41 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) 06:17:41 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) r2 = open(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) sendfile(r2, r5, &(0x7f0000000180)=0x68, 0xa9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x0) fcntl$setstatus(r6, 0x4, 0x4000) (async) fcntl$setstatus(r6, 0x4, 0x4000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:41 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) [ 1122.692061][ T27] audit: type=1804 audit(1681798661.399:4222): pid=18509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/607/bus" dev="sda1" ino=1182 res=1 errno=0 [ 1122.720747][ T27] audit: type=1800 audit(1681798661.399:4223): pid=18509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1182 res=0 errno=0 [ 1122.802159][ T27] audit: type=1804 audit(1681798661.499:4224): pid=18522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/776/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1122.828514][ T5169] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1122.836377][ T5166] usb 5-1: new high-speed USB device number 37 using dummy_hcd 06:17:41 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) [ 1122.847157][ T27] audit: type=1804 audit(1681798661.499:4225): pid=18522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/776/bus" dev="sda1" ino=1172 res=1 errno=0 06:17:41 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) [ 1122.885671][ T27] audit: type=1804 audit(1681798661.549:4226): pid=18530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/777/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1122.919041][ T27] audit: type=1804 audit(1681798661.579:4227): pid=18530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/777/bus" dev="sda1" ino=1181 res=1 errno=0 [ 1122.951261][T14364] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1122.962479][ T27] audit: type=1804 audit(1681798661.659:4228): pid=18534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/608/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1122.990375][ T27] audit: type=1800 audit(1681798661.659:4229): pid=18534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1172 res=0 errno=0 [ 1123.103095][ T5166] usb 5-1: Using ep0 maxpacket: 8 [ 1123.108212][ T5169] usb 1-1: Using ep0 maxpacket: 8 [ 1123.203116][T14364] usb 3-1: Using ep0 maxpacket: 8 [ 1123.233152][ T5166] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.243444][ T5169] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.253694][T14364] usb 3-1: no configurations [ 1123.258387][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1123.266181][T14364] usb 3-1: can't read configurations, error -22 [ 1123.272922][ T5169] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1123.281881][ T5166] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1123.291135][ T5169] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.302081][ T5166] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.393961][ T5169] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1123.403138][ T5166] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1123.412192][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1123.420533][ T5169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1123.428704][ T5166] usb 5-1: SerialNumber: syz [ 1123.433440][T14364] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1123.441106][ T5169] usb 1-1: SerialNumber: syz [ 1123.484701][ T5166] hub 5-1:1.0: bad descriptor, ignoring hub [ 1123.491711][ T5169] hub 1-1:1.0: bad descriptor, ignoring hub [ 1123.497867][ T5166] hub: probe of 5-1:1.0 failed with error -5 [ 1123.504213][ T5169] hub: probe of 1-1:1.0 failed with error -5 [ 1123.513607][ T5166] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1123.519862][ T5166] cdc_wdm 5-1:1.0: Unknown control protocol [ 1123.526121][ T5169] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1123.532055][ T5169] cdc_wdm 1-1:1.0: Unknown control protocol [ 1123.538324][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1123.663289][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.673467][T14364] usb 3-1: Using ep0 maxpacket: 8 [ 1123.687554][T18510] FAULT_INJECTION: forcing a failure. [ 1123.687554][T18510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.687565][T18507] FAULT_INJECTION: forcing a failure. [ 1123.687565][T18507] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.687594][T18507] CPU: 1 PID: 18507 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1123.706321][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1123.713162][T18507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1123.713179][T18507] Call Trace: [ 1123.713187][T18507] [ 1123.713196][T18507] dump_stack_lvl+0x136/0x150 [ 1123.713240][T18507] should_fail_ex+0x4a3/0x5b0 [ 1123.713272][T18507] should_failslab+0x9/0x20 [ 1123.713299][T18507] kmem_cache_alloc+0x63/0x3b0 [ 1123.713339][T18507] __alloc_file+0x21/0x270 [ 1123.713368][T18507] alloc_empty_file+0x71/0x190 [ 1123.713399][T18507] path_openat+0xe6/0x2750 [ 1123.749187][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.753029][T18507] ? trace_lock_acquire+0x12d/0x180 [ 1123.753067][T18507] ? path_lookupat+0x840/0x840 [ 1123.794271][T14364] usb 3-1: no configurations [ 1123.796542][T18507] do_filp_open+0x1ba/0x410 [ 1123.801291][T14364] usb 3-1: can't read configurations, error -22 [ 1123.805864][T18507] ? may_open_dev+0xf0/0xf0 [ 1123.805897][T18507] ? find_held_lock+0x2d/0x110 [ 1123.805930][T18507] ? alloc_fd+0x2e4/0x750 [ 1123.805970][T18507] ? do_raw_spin_lock+0x124/0x2b0 [ 1123.806008][T18507] ? spin_bug+0x1c0/0x1c0 [ 1123.822442][T14364] usb usb3-port1: attempt power cycle [ 1123.825979][T18507] ? _raw_spin_unlock+0x28/0x40 [ 1123.826014][T18507] ? alloc_fd+0x2e4/0x750 [ 1123.826060][T18507] do_sys_openat2+0x16d/0x4c0 [ 1123.826101][T18507] ? build_open_flags+0x720/0x720 [ 1123.845300][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1123.849948][T18507] __x64_sys_openat+0x143/0x1f0 [ 1123.861923][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1123.863914][T18507] ? __ia32_sys_open+0x1c0/0x1c0 [ 1123.863952][T18507] ? ksys_write+0x1a3/0x250 [ 1123.863979][T18507] ? syscall_enter_from_user_mode+0x26/0x80 [ 1123.864017][T18507] do_syscall_64+0x39/0xb0 [ 1123.864053][T18507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1123.864088][T18507] RIP: 0033:0x7f11ea03e2f4 [ 1123.864109][T18507] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1123.892027][ T9] usb 2-1: SerialNumber: syz [ 1123.895356][T18507] RSP: 002b:00007f11eae63ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1123.895385][T18507] RAX: ffffffffffffffda RBX: 00007f11ea1abf80 RCX: 00007f11ea03e2f4 [ 1123.895405][T18507] RDX: 0000000000000002 RSI: 00007f11eae63d40 RDI: 00000000ffffff9c [ 1123.895422][T18507] RBP: 00007f11eae63d40 R08: 0000000000000000 R09: 000000000000000f [ 1123.895439][T18507] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1123.895456][T18507] R13: 00007ffc08f5a13f R14: 00007f11eae64300 R15: 0000000000022000 [ 1123.895492][T18507] [ 1123.897663][T18510] CPU: 1 PID: 18510 Comm: syz-executor.4 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1124.001496][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1124.011568][T18510] Call Trace: [ 1124.014858][T18510] [ 1124.017793][T18510] dump_stack_lvl+0x136/0x150 [ 1124.022504][T18510] should_fail_ex+0x4a3/0x5b0 [ 1124.027194][T18510] strncpy_from_user+0x38/0x400 [ 1124.032073][T18510] getname_flags.part.0+0x95/0x4f0 [ 1124.037202][T18510] getname+0x92/0xd0 [ 1124.041111][T18510] do_sys_openat2+0xf5/0x4c0 [ 1124.045724][T18510] ? build_open_flags+0x720/0x720 [ 1124.050777][T18510] __x64_sys_openat+0x143/0x1f0 [ 1124.055644][T18510] ? __ia32_sys_open+0x1c0/0x1c0 [ 1124.060595][T18510] ? ksys_write+0x1a3/0x250 [ 1124.065108][T18510] ? syscall_enter_from_user_mode+0x26/0x80 [ 1124.071019][T18510] do_syscall_64+0x39/0xb0 [ 1124.075452][T18510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1124.081361][T18510] RIP: 0033:0x7fe7d683e2f4 [ 1124.085782][T18510] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1124.105403][T18510] RSP: 002b:00007fe7d7679ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1124.113826][T18510] RAX: ffffffffffffffda RBX: 00007fe7d69abf80 RCX: 00007fe7d683e2f4 [ 1124.121828][T18510] RDX: 0000000000000002 RSI: 00007fe7d7679d40 RDI: 00000000ffffff9c [ 1124.129808][T18510] RBP: 00007fe7d7679d40 R08: 0000000000000000 R09: 000000000000000f [ 1124.137785][T18510] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1124.145763][T18510] R13: 00007ffd33e3417f R14: 00007fe7d767a300 R15: 0000000000022000 [ 1124.153759][T18510] [ 1124.214279][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1124.220207][ T9] hub: probe of 2-1:1.0 failed with error -5 [ 1124.227358][ T9] cdc_wdm 2-1:1.0: cdc-wdm2: USB WDM device [ 1124.233640][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1124.284097][ T2618] usb 1-1: USB disconnect, device number 82 [ 1124.293737][ T5169] usb 5-1: USB disconnect, device number 37 [ 1124.443141][T14364] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1124.533447][ T5169] usb 2-1: USB disconnect, device number 126 [ 1124.540189][T14364] usb 3-1: Using ep0 maxpacket: 8 [ 1124.607475][T14364] usb 3-1: no configurations [ 1124.612177][T14364] usb 3-1: can't read configurations, error -22 06:17:43 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 3) 06:17:43 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) 06:17:43 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 06:17:43 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 4) [ 1124.763206][T14364] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1124.863283][T14364] usb 3-1: Using ep0 maxpacket: 8 [ 1124.903267][T14364] usb 3-1: no configurations [ 1124.907955][T14364] usb 3-1: can't read configurations, error -22 [ 1124.914822][T14364] usb usb3-port1: unable to enumerate USB device [ 1125.023109][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1125.043179][ T5212] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1125.263129][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1125.283124][ T5212] usb 1-1: Using ep0 maxpacket: 8 [ 1125.403209][ T5212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.405870][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.419471][ T5212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1125.424116][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1125.440508][ T5212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.441975][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.533229][ T5212] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1125.542284][ T5212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1125.550332][ T5212] usb 1-1: SerialNumber: syz [ 1125.563258][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1125.572310][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1125.580350][ T9] usb 5-1: SerialNumber: syz [ 1125.593729][ T5212] hub 1-1:1.0: bad descriptor, ignoring hub [ 1125.599657][ T5212] hub: probe of 1-1:1.0 failed with error -5 [ 1125.608668][ T5212] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1125.614862][ T5212] cdc_wdm 1-1:1.0: Unknown control protocol 06:17:44 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x1dd03) 06:17:44 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0) 06:17:44 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000002c0)={0x0, r3, 0x6, 0x1, 0x81, 0x2c8f0ddf}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4c21632", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf25010000000900010073797a32000000000900030073797a320000000005000400010000000900010073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x480) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1125.628536][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 1125.642908][ T9] hub: probe of 5-1:1.0 failed with error -5 [ 1125.651359][ T9] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device 06:17:44 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x113800, 0x151) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r6]) r7 = getpgid(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r9 = accept4$unix(r4, 0x0, &(0x7f00000003c0), 0x0) r10 = openat$cgroup_freezer_state(r5, &(0x7f0000000400), 0x2, 0x0) r11 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x81) r12 = syz_open_dev$vcsn(&(0x7f0000000440), 0x3ff, 0x1) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x101001, 0x0) r14 = getpid() sched_setscheduler(r14, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r15, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r15, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r15, @ANYRESDEC=r15, @ANYRES16=r14, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r16]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000180)="f66b81a69e569f40e77479b629ca456adac72ccf896244d4c524c79a80244ca73e3a65f8d69ba8164243a99a77f4370ff2092f98e28f73228e201be10fc06c5b1886d05d599d93f62ea0b9c251204c4f54aa115273ce79d983d4c9", 0x5b}, {&(0x7f0000000200)="599cacf7b46f37781390a101a5587fd2a26e90d442a51e9f0c50f048553371afcee26e6ce9685e8642072ada0727bef17033ddae4c760b862409fc5c3e8716c55fb6cda6e46ede3998532946ac72d405fc8a7675e6df5b0bb7d3241c38e23d796d5acdc16182e8ffd3b4e6d824bc0984d87a5116348628e30ba6a4d34d8638f9901417a04110eadb31ffc49f77b8029bccc86ed441f855c0938e7f45f2a2ca6eafadfc756399c8f64d1fe7037e3f037f0939c5555e33fc0eb355d99c151ec1e6a91a3e4de37f54be9c07366ffd6a2b09bc541a77", 0xd4}, {&(0x7f0000000300)="51493c4a0625ed462ac82f9ca7ec97ec69e4100d615f808d91401aecba342492e894a0362af3dd50e9513fadd7689e19f56ccdf2d6ddfe317e985bea0453a0e10a58c909614be640f563d85f67305420dfa3c4e4a3b0bc4846dbd3b316f4e21ecaf4686b7465a55c516d6d8a7e95e7b39ae8f5de54453b08ad8a577deab03f6d66b1dcf0304d", 0x86}], 0x3, &(0x7f0000000500)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r4, r8, r9, r10, r3, r11, r5, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, 0xffffffffffffffff}}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="0bafc4620f0811178db96a1a4e71ab5965af718e3e45718919bebb16fdd067d00273c335f3cae933eecd12490196a291a08ac8903de558500c02627f1b5e2d42ca0b78da24160ff38936f4d90f4043d5c9201998b84f436c9a3ba47d51d46f5cd7dab8f8e3609e5311d5701a6ae34de459d6e7a2879be05f1b59ab733bcb5986b1b2bc53d3d29a449ac7d028b85feb28362a6ffac9b63a6ea8e91c8df6b08a829f4970dc93547f8bfbe2fa3615f0ff7c6cabefb35aed17b47038cbf091fd68c05023998caba1ee652b372d5ffc", 0xcd}], 0x1, 0x0, 0x0, 0x4041040}}], 0x2, 0x64000001) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:44 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x4, 0x0}}], 0x1, 0x0) [ 1125.685425][ T9] cdc_wdm 5-1:1.0: Unknown control protocol 06:17:44 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0) [ 1125.797135][T18551] FAULT_INJECTION: forcing a failure. [ 1125.797135][T18551] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.818485][T18551] CPU: 0 PID: 18551 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1125.828426][T18551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1125.838539][T18551] Call Trace: [ 1125.841849][T18551] [ 1125.844802][T18551] dump_stack_lvl+0x136/0x150 [ 1125.849531][T18551] should_fail_ex+0x4a3/0x5b0 [ 1125.854249][T18551] should_failslab+0x9/0x20 [ 1125.858783][T18551] kmem_cache_alloc+0x63/0x3b0 [ 1125.863573][T18551] security_file_alloc+0x38/0x170 [ 1125.868624][T18551] __alloc_file+0xd9/0x270 [ 1125.873055][T18551] alloc_empty_file+0x71/0x190 [ 1125.877834][T18551] path_openat+0xe6/0x2750 [ 1125.882274][T18551] ? path_lookupat+0x840/0x840 [ 1125.887060][T18551] do_filp_open+0x1ba/0x410 [ 1125.891580][T18551] ? may_open_dev+0xf0/0xf0 [ 1125.896097][T18551] ? find_held_lock+0x2d/0x110 [ 1125.900885][T18551] ? alloc_fd+0x2e4/0x750 [ 1125.905232][T18551] ? do_raw_spin_lock+0x124/0x2b0 [ 1125.910274][T18551] ? spin_bug+0x1c0/0x1c0 [ 1125.914630][T18551] ? _raw_spin_unlock+0x28/0x40 [ 1125.919497][T18551] ? alloc_fd+0x2e4/0x750 [ 1125.923857][T18551] do_sys_openat2+0x16d/0x4c0 [ 1125.928555][T18551] ? build_open_flags+0x720/0x720 [ 1125.933609][T18551] __x64_sys_openat+0x143/0x1f0 [ 1125.938480][T18551] ? __ia32_sys_open+0x1c0/0x1c0 [ 1125.943440][T18551] ? ksys_write+0x1a3/0x250 [ 1125.947964][T18551] ? syscall_enter_from_user_mode+0x26/0x80 [ 1125.953876][T18551] do_syscall_64+0x39/0xb0 [ 1125.958310][T18551] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1125.964222][T18551] RIP: 0033:0x7f11ea03e2f4 [ 1125.968646][T18551] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1125.988273][T18551] RSP: 002b:00007f11eae63ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1125.996704][T18551] RAX: ffffffffffffffda RBX: 00007f11ea1abf80 RCX: 00007f11ea03e2f4 [ 1126.004694][T18551] RDX: 0000000000000002 RSI: 00007f11eae63d40 RDI: 00000000ffffff9c [ 1126.012675][T18551] RBP: 00007f11eae63d40 R08: 0000000000000000 R09: 000000000000000f [ 1126.020654][T18551] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1126.028630][T18551] R13: 00007ffc08f5a13f R14: 00007f11eae64300 R15: 0000000000022000 [ 1126.036624][T18551] 06:17:44 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 1) [ 1126.082268][T18552] FAULT_INJECTION: forcing a failure. [ 1126.082268][T18552] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.105862][T18552] CPU: 0 PID: 18552 Comm: syz-executor.4 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1126.115797][T18552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1126.125875][T18552] Call Trace: [ 1126.129177][T18552] [ 1126.132128][T18552] dump_stack_lvl+0x136/0x150 [ 1126.136861][T18552] should_fail_ex+0x4a3/0x5b0 [ 1126.141574][T18552] should_failslab+0x9/0x20 [ 1126.146110][T18552] kmem_cache_alloc+0x63/0x3b0 [ 1126.150924][T18552] __alloc_file+0x21/0x270 [ 1126.151738][T18571] FAULT_INJECTION: forcing a failure. [ 1126.151738][T18571] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.155357][T18552] alloc_empty_file+0x71/0x190 [ 1126.155399][T18552] path_openat+0xe6/0x2750 [ 1126.155440][T18552] ? trace_lock_acquire+0x12d/0x180 [ 1126.155473][T18552] ? path_lookupat+0x840/0x840 [ 1126.155514][T18552] do_filp_open+0x1ba/0x410 [ 1126.155545][T18552] ? may_open_dev+0xf0/0xf0 [ 1126.155576][T18552] ? find_held_lock+0x2d/0x110 [ 1126.155609][T18552] ? alloc_fd+0x2e4/0x750 [ 1126.155646][T18552] ? do_raw_spin_lock+0x124/0x2b0 [ 1126.210554][T18552] ? spin_bug+0x1c0/0x1c0 [ 1126.214913][T18552] ? _raw_spin_unlock+0x28/0x40 [ 1126.219787][T18552] ? alloc_fd+0x2e4/0x750 [ 1126.224142][T18552] do_sys_openat2+0x16d/0x4c0 [ 1126.228842][T18552] ? build_open_flags+0x720/0x720 [ 1126.233897][T18552] __x64_sys_openat+0x143/0x1f0 [ 1126.238767][T18552] ? __ia32_sys_open+0x1c0/0x1c0 [ 1126.243724][T18552] ? ksys_write+0x1a3/0x250 [ 1126.248241][T18552] ? syscall_enter_from_user_mode+0x26/0x80 [ 1126.254154][T18552] do_syscall_64+0x39/0xb0 [ 1126.258590][T18552] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1126.264498][T18552] RIP: 0033:0x7fe7d683e2f4 [ 1126.268916][T18552] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1126.288532][T18552] RSP: 002b:00007fe7d7679ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1126.296975][T18552] RAX: ffffffffffffffda RBX: 00007fe7d69abf80 RCX: 00007fe7d683e2f4 [ 1126.304950][T18552] RDX: 0000000000000002 RSI: 00007fe7d7679d40 RDI: 00000000ffffff9c [ 1126.312928][T18552] RBP: 00007fe7d7679d40 R08: 0000000000000000 R09: 000000000000000f [ 1126.320906][T18552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1126.328883][T18552] R13: 00007ffd33e3417f R14: 00007fe7d767a300 R15: 0000000000022000 [ 1126.336874][T18552] [ 1126.348482][T18571] CPU: 0 PID: 18571 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1126.358412][T18571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1126.368490][T18571] Call Trace: [ 1126.371784][T18571] [ 1126.374740][T18571] dump_stack_lvl+0x136/0x150 [ 1126.379466][T18571] should_fail_ex+0x4a3/0x5b0 [ 1126.384181][T18571] should_failslab+0x9/0x20 [ 1126.385671][ T2618] usb 1-1: USB disconnect, device number 83 [ 1126.388702][T18571] __kmem_cache_alloc_node+0x5b/0x320 [ 1126.388744][T18571] ? iter_file_splice_write+0x16c/0xc80 [ 1126.405559][T18571] ? iter_file_splice_write+0x16c/0xc80 [ 1126.411154][T18571] __kmalloc+0x4e/0x190 [ 1126.415342][T18571] iter_file_splice_write+0x16c/0xc80 [ 1126.420768][T18571] ? trace_lock_acquire+0x12d/0x180 [ 1126.426007][T18571] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1126.432229][T18571] ? generic_file_splice_read+0x139/0x1b0 [ 1126.437993][T18571] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1126.444205][T18571] direct_splice_actor+0x114/0x180 [ 1126.449365][T18571] splice_direct_to_actor+0x335/0x8a0 [ 1126.454786][T18571] ? do_splice_direct+0x280/0x280 [ 1126.459880][T18571] ? folio_flags.constprop.0+0x150/0x150 [ 1126.465553][T18571] ? bpf_lsm_file_permission+0x9/0x10 [ 1126.470969][T18571] ? security_file_permission+0xaf/0xd0 [ 1126.476536][T18571] do_splice_direct+0x1ab/0x280 [ 1126.481421][T18571] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1126.487002][T18571] do_sendfile+0xb19/0x12c0 [ 1126.491544][T18571] ? vfs_iocb_iter_write+0x480/0x480 [ 1126.496862][T18571] __x64_sys_sendfile64+0x1d0/0x210 [ 1126.502071][T18571] ? ksys_write+0x1a3/0x250 [ 1126.506583][T18571] ? __ia32_sys_sendfile+0x220/0x220 [ 1126.511879][T18571] ? syscall_enter_from_user_mode+0x26/0x80 [ 1126.517789][T18571] do_syscall_64+0x39/0xb0 [ 1126.522222][T18571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1126.528133][T18571] RIP: 0033:0x7f963c08c169 [ 1126.532576][T18571] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1126.552196][T18571] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1126.560628][T18571] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1126.568609][T18571] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1126.576588][T18571] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 06:17:45 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) [ 1126.584564][T18571] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000001 [ 1126.592551][T18571] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1126.600559][T18571] [ 1126.613587][T10141] usb 5-1: USB disconnect, device number 38 [ 1126.683037][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1126.690806][T14364] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1126.953065][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1126.973161][T14364] usb 3-1: Using ep0 maxpacket: 8 06:17:45 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 4) 06:17:45 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 2) 06:17:45 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 06:17:45 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 5) [ 1127.073383][T18580] FAULT_INJECTION: forcing a failure. [ 1127.073383][T18580] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.086441][T18580] CPU: 1 PID: 18580 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1127.093534][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.096345][T18580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1127.096365][T18580] Call Trace: [ 1127.096373][T18580] [ 1127.096384][T18580] dump_stack_lvl+0x136/0x150 [ 1127.113309][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1127.116494][T18580] should_fail_ex+0x4a3/0x5b0 [ 1127.116540][T18580] should_failslab+0x9/0x20 [ 1127.119962][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.122743][T18580] __kmem_cache_alloc_node+0x5b/0x320 [ 1127.122784][T18580] ? iter_file_splice_write+0x16c/0xc80 [ 1127.143262][T14364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.145485][T18580] ? iter_file_splice_write+0x16c/0xc80 [ 1127.145537][T18580] __kmalloc+0x4e/0x190 [ 1127.163480][T14364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1127.167285][T18580] iter_file_splice_write+0x16c/0xc80 [ 1127.167336][T18580] ? trace_lock_acquire+0x12d/0x180 [ 1127.178346][T14364] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.182912][T18580] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1127.182975][T18580] ? generic_file_splice_read+0x139/0x1b0 [ 1127.183016][T18580] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1127.234338][T18580] direct_splice_actor+0x114/0x180 [ 1127.239475][T18580] splice_direct_to_actor+0x335/0x8a0 [ 1127.244877][T18580] ? do_splice_direct+0x280/0x280 [ 1127.249931][T18580] ? folio_flags.constprop.0+0x150/0x150 [ 1127.255584][T18580] ? bpf_lsm_file_permission+0x9/0x10 [ 1127.260977][T18580] ? security_file_permission+0xaf/0xd0 [ 1127.266549][T18580] do_splice_direct+0x1ab/0x280 [ 1127.271425][T18580] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1127.277004][T18580] do_sendfile+0xb19/0x12c0 [ 1127.281542][T18580] ? vfs_iocb_iter_write+0x480/0x480 [ 1127.286861][T18580] __x64_sys_sendfile64+0x1d0/0x210 [ 1127.292070][T18580] ? ksys_write+0x1a3/0x250 [ 1127.296581][T18580] ? __ia32_sys_sendfile+0x220/0x220 [ 1127.301886][T18580] ? syscall_enter_from_user_mode+0x26/0x80 [ 1127.307804][T18580] do_syscall_64+0x39/0xb0 [ 1127.312260][T18580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1127.318169][T18580] RIP: 0033:0x7f963c08c169 [ 1127.322593][T18580] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1127.342219][T18580] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1127.350640][T18580] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1127.358636][T18580] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1127.366615][T18580] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 06:17:46 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) [ 1127.374594][T18580] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000001 [ 1127.382568][T18580] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1127.390561][T18580] [ 1127.413234][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 06:17:46 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 3) [ 1127.422300][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1127.469856][ T9] usb 2-1: SerialNumber: syz [ 1127.483377][T14364] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1127.493560][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 1127.493575][ T27] audit: type=1804 audit(1681798666.359:4246): pid=18587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/785/bus" dev="sda1" ino=1157 res=1 errno=0 [ 1127.496640][T14364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1127.505664][ T27] audit: type=1804 audit(1681798666.369:4247): pid=18587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/785/bus" dev="sda1" ino=1157 res=1 errno=0 [ 1127.538218][T14364] usb 3-1: SerialNumber: syz [ 1127.558401][T10141] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1127.573923][T18587] FAULT_INJECTION: forcing a failure. [ 1127.573923][T18587] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.586988][ T5176] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1127.593065][T18587] CPU: 1 PID: 18587 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1127.595528][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1127.604394][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1127.604412][T18587] Call Trace: [ 1127.604420][T18587] [ 1127.604430][T18587] dump_stack_lvl+0x136/0x150 [ 1127.604476][T18587] should_fail_ex+0x4a3/0x5b0 [ 1127.604511][T18587] should_failslab+0x9/0x20 [ 1127.604537][T18587] kmem_cache_alloc+0x63/0x3b0 [ 1127.604579][T18587] jbd2__journal_start+0x18a/0x6b0 [ 1127.619883][ T9] hub: probe of 2-1:1.0 failed with error -5 [ 1127.620506][T18587] __ext4_journal_start_sb+0x411/0x5d0 [ 1127.661864][T18587] ? ext4_dirty_inode+0xa5/0x130 [ 1127.666832][T18587] ? ext4_setattr+0x26c0/0x26c0 [ 1127.671701][T18587] ext4_dirty_inode+0xa5/0x130 [ 1127.676487][T18587] ? rcu_is_watching+0x12/0xb0 [ 1127.681281][T18587] __mark_inode_dirty+0x1e0/0xd60 [ 1127.686328][T18587] generic_update_time+0x21b/0x2b0 [ 1127.691490][T18587] file_modified_flags+0x2ce/0x320 [ 1127.696622][T18587] ? iunique+0x370/0x370 [ 1127.700889][T18587] ext4_buffered_write_iter+0xf9/0x460 [ 1127.706362][T18587] ext4_file_write_iter+0xbe0/0x1740 [ 1127.711656][T18587] ? aa_file_perm+0x592/0x1250 [ 1127.716436][T18587] ? iter_file_splice_write+0x16c/0xc80 [ 1127.722007][T18587] ? kasan_save_stack+0x32/0x40 [ 1127.726903][T18587] ? kasan_set_track+0x25/0x30 [ 1127.731686][T18587] ? ext4_file_mmap+0x6c0/0x6c0 [ 1127.736554][T18587] ? do_sendfile+0xb19/0x12c0 [ 1127.741249][T18587] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1127.746646][T18587] ? do_syscall_64+0x39/0xb0 [ 1127.751258][T18587] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1127.757387][T18587] do_iter_readv_writev+0x20b/0x3b0 [ 1127.762609][T18587] ? generic_copy_file_range+0x1d0/0x1d0 [ 1127.768268][T18587] ? bpf_lsm_file_permission+0x9/0x10 [ 1127.773656][T18587] ? security_file_permission+0xaf/0xd0 [ 1127.779227][T18587] do_iter_write+0x185/0x7e0 [ 1127.783856][T18587] vfs_iter_write+0x74/0xa0 [ 1127.788383][T18587] iter_file_splice_write+0x745/0xc80 [ 1127.793790][T18587] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1127.799987][T18587] ? generic_file_splice_read+0x139/0x1b0 [ 1127.805753][T18587] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1127.811932][T18587] direct_splice_actor+0x114/0x180 [ 1127.817079][T18587] splice_direct_to_actor+0x335/0x8a0 [ 1127.822563][T18587] ? do_splice_direct+0x280/0x280 [ 1127.827619][T18587] ? folio_flags.constprop.0+0x150/0x150 [ 1127.833273][T18587] ? bpf_lsm_file_permission+0x9/0x10 [ 1127.838663][T18587] ? security_file_permission+0xaf/0xd0 [ 1127.844232][T18587] do_splice_direct+0x1ab/0x280 [ 1127.849104][T18587] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1127.854687][T18587] do_sendfile+0xb19/0x12c0 [ 1127.859223][T18587] ? vfs_iocb_iter_write+0x480/0x480 [ 1127.864542][T18587] __x64_sys_sendfile64+0x1d0/0x210 [ 1127.869752][T18587] ? ksys_write+0x1a3/0x250 [ 1127.874264][T18587] ? __ia32_sys_sendfile+0x220/0x220 [ 1127.879573][T18587] ? syscall_enter_from_user_mode+0x26/0x80 [ 1127.885486][T18587] do_syscall_64+0x39/0xb0 [ 1127.889921][T18587] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1127.895833][T18587] RIP: 0033:0x7f963c08c169 [ 1127.900256][T18587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1127.919872][T18587] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1127.928293][T18587] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1127.936271][T18587] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1127.944249][T18587] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1127.952225][T18587] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000001 [ 1127.960203][T18587] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1127.968205][T18587] [ 1127.975599][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1127.981952][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1127.994147][T14364] hub 3-1:1.0: bad descriptor, ignoring hub [ 1128.000090][T14364] hub: probe of 3-1:1.0 failed with error -5 [ 1128.016815][T14364] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1128.063963][ T9] usb 2-1: USB disconnect, device number 127 [ 1128.193224][T10141] usb 1-1: Using ep0 maxpacket: 8 [ 1128.203064][ T5176] usb 5-1: Using ep0 maxpacket: 8 [ 1128.323474][ T5176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.337627][ T5176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1128.343123][T10141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.346948][ T5176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.369868][T10141] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1128.378936][T10141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.443158][ T5176] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1128.452316][ T5176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1128.460909][ T5176] usb 5-1: SerialNumber: syz [ 1128.473342][T10141] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1128.482504][T10141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 06:17:47 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (rerun: 64) open(0x0, 0x0, 0x0) (async) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000002c0)={0x0, r3, 0x6, 0x1, 0x81, 0x2c8f0ddf}) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4c21632", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf25010000000900010073797a32000000000900030073797a320000000005000400010000000900010073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x480) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1128.491270][T10141] usb 1-1: SerialNumber: syz [ 1128.503896][ T5176] hub 5-1:1.0: bad descriptor, ignoring hub [ 1128.509796][ T5176] hub: probe of 5-1:1.0 failed with error -5 [ 1128.550724][ T5176] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1128.554101][T10141] hub 1-1:1.0: bad descriptor, ignoring hub [ 1128.557244][ T5176] cdc_wdm 5-1:1.0: Unknown control protocol [ 1128.564246][T10141] hub: probe of 1-1:1.0 failed with error -5 [ 1128.585022][T10141] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1128.591131][T10141] cdc_wdm 1-1:1.0: Unknown control protocol [ 1128.706396][T18582] FAULT_INJECTION: forcing a failure. [ 1128.706396][T18582] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.719126][T18582] CPU: 1 PID: 18582 Comm: syz-executor.4 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1128.729041][T18582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1128.739100][T18582] Call Trace: [ 1128.742372][T18582] [ 1128.745307][T18582] dump_stack_lvl+0x136/0x150 [ 1128.750019][T18582] should_fail_ex+0x4a3/0x5b0 [ 1128.754712][T18582] should_failslab+0x9/0x20 [ 1128.759234][T18582] kmem_cache_alloc+0x63/0x3b0 [ 1128.764018][T18582] security_file_alloc+0x38/0x170 [ 1128.769080][T18582] __alloc_file+0xd9/0x270 [ 1128.773514][T18582] alloc_empty_file+0x71/0x190 [ 1128.778301][T18582] path_openat+0xe6/0x2750 [ 1128.782740][T18582] ? trace_lock_acquire+0x12d/0x180 [ 1128.787955][T18582] ? path_lookupat+0x840/0x840 [ 1128.792742][T18582] do_filp_open+0x1ba/0x410 [ 1128.797261][T18582] ? may_open_dev+0xf0/0xf0 [ 1128.801780][T18582] ? find_held_lock+0x2d/0x110 [ 1128.806566][T18582] ? alloc_fd+0x2e4/0x750 [ 1128.810921][T18582] ? do_raw_spin_lock+0x124/0x2b0 [ 1128.815963][T18582] ? spin_bug+0x1c0/0x1c0 [ 1128.820318][T18582] ? _raw_spin_unlock+0x28/0x40 [ 1128.825184][T18582] ? alloc_fd+0x2e4/0x750 [ 1128.829543][T18582] do_sys_openat2+0x16d/0x4c0 [ 1128.834243][T18582] ? build_open_flags+0x720/0x720 [ 1128.839297][T18582] __x64_sys_openat+0x143/0x1f0 [ 1128.844167][T18582] ? __ia32_sys_open+0x1c0/0x1c0 [ 1128.849120][T18582] ? ksys_write+0x1a3/0x250 [ 1128.853643][T18582] ? syscall_enter_from_user_mode+0x26/0x80 [ 1128.859553][T18582] do_syscall_64+0x39/0xb0 [ 1128.863990][T18582] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1128.869911][T18582] RIP: 0033:0x7fe7d683e2f4 [ 1128.874336][T18582] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1128.893954][T18582] RSP: 002b:00007fe7d7679ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1128.902383][T18582] RAX: ffffffffffffffda RBX: 00007fe7d69abf80 RCX: 00007fe7d683e2f4 [ 1128.910374][T18582] RDX: 0000000000000002 RSI: 00007fe7d7679d40 RDI: 00000000ffffff9c [ 1128.918390][T18582] RBP: 00007fe7d7679d40 R08: 0000000000000000 R09: 000000000000000f [ 1128.926369][T18582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1128.934343][T18582] R13: 00007ffd33e3417f R14: 00007fe7d767a300 R15: 0000000000022000 [ 1128.942339][T18582] [ 1128.953574][T18579] FAULT_INJECTION: forcing a failure. [ 1128.953574][T18579] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.966371][T18579] CPU: 1 PID: 18579 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1128.976296][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1128.986370][T18579] Call Trace: [ 1128.989638][T18579] [ 1128.992574][T18579] dump_stack_lvl+0x136/0x150 [ 1128.997302][T18579] should_fail_ex+0x4a3/0x5b0 [ 1129.002001][T18579] should_failslab+0x9/0x20 [ 1129.006528][T18579] __kmem_cache_alloc_node+0x5b/0x320 [ 1129.011899][T18579] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1129.017635][T18579] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1129.023424][T18579] __kmalloc+0x4e/0x190 [ 1129.027572][T18579] ? rcu_is_watching+0x12/0xb0 [ 1129.032349][T18579] tomoyo_realpath_from_path+0xc3/0x600 [ 1129.037920][T18579] tomoyo_check_open_permission+0x29a/0x3a0 [ 1129.043844][T18579] ? tomoyo_path_number_perm+0x570/0x570 [ 1129.049505][T18579] ? hook_path_unlink+0x520/0x520 [ 1129.054545][T18579] ? lock_downgrade+0x690/0x690 [ 1129.059439][T18579] ? spin_bug+0x1c0/0x1c0 [ 1129.063811][T18579] tomoyo_file_open+0xa1/0xc0 [ 1129.068524][T18579] security_file_open+0x49/0xb0 [ 1129.073404][T18579] do_dentry_open+0x575/0x13f0 [ 1129.078194][T18579] ? may_open+0x1f6/0x420 [ 1129.082542][T18579] path_openat+0x1baa/0x2750 [ 1129.087155][T18579] ? path_lookupat+0x840/0x840 [ 1129.091941][T18579] do_filp_open+0x1ba/0x410 [ 1129.096465][T18579] ? may_open_dev+0xf0/0xf0 [ 1129.100984][T18579] ? find_held_lock+0x2d/0x110 [ 1129.105783][T18579] ? _raw_spin_unlock+0x28/0x40 [ 1129.110651][T18579] ? alloc_fd+0x2e4/0x750 [ 1129.115012][T18579] do_sys_openat2+0x16d/0x4c0 [ 1129.119709][T18579] ? build_open_flags+0x720/0x720 [ 1129.124762][T18579] __x64_sys_openat+0x143/0x1f0 [ 1129.129630][T18579] ? __ia32_sys_open+0x1c0/0x1c0 [ 1129.134586][T18579] ? ksys_write+0x1a3/0x250 [ 1129.139105][T18579] ? syscall_enter_from_user_mode+0x26/0x80 [ 1129.145017][T18579] do_syscall_64+0x39/0xb0 [ 1129.149456][T18579] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1129.155379][T18579] RIP: 0033:0x7f11ea03e2f4 [ 1129.159799][T18579] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1129.179418][T18579] RSP: 002b:00007f11eae63ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1129.187847][T18579] RAX: ffffffffffffffda RBX: 00007f11ea1abf80 RCX: 00007f11ea03e2f4 [ 1129.195834][T18579] RDX: 0000000000000002 RSI: 00007f11eae63d40 RDI: 00000000ffffff9c [ 1129.203824][T18579] RBP: 00007f11eae63d40 R08: 0000000000000000 R09: 000000000000000f [ 1129.211807][T18579] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1129.219786][T18579] R13: 00007ffc08f5a13f R14: 00007f11eae64300 R15: 0000000000022000 [ 1129.227781][T18579] [ 1129.243909][ T5176] usb 5-1: USB disconnect, device number 39 [ 1129.248452][T18579] ERROR: Out of memory at tomoyo_realpath_from_path. 06:17:48 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x113800, 0x151) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r6]) r7 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) r9 = accept4$unix(r4, 0x0, &(0x7f00000003c0), 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000400), 0x2, 0x0) (async) r10 = openat$cgroup_freezer_state(r5, &(0x7f0000000400), 0x2, 0x0) r11 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x81) r12 = syz_open_dev$vcsn(&(0x7f0000000440), 0x3ff, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x101001, 0x0) (async) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x101001, 0x0) getpid() (async) r14 = getpid() sched_setscheduler(r14, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r14, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r15, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r15, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r15, @ANYRESDEC=r15, @ANYRES16=r14, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r16]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r15, @ANYRESDEC=r15, @ANYRES16=r14, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r16]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000180)="f66b81a69e569f40e77479b629ca456adac72ccf896244d4c524c79a80244ca73e3a65f8d69ba8164243a99a77f4370ff2092f98e28f73228e201be10fc06c5b1886d05d599d93f62ea0b9c251204c4f54aa115273ce79d983d4c9", 0x5b}, {&(0x7f0000000200)="599cacf7b46f37781390a101a5587fd2a26e90d442a51e9f0c50f048553371afcee26e6ce9685e8642072ada0727bef17033ddae4c760b862409fc5c3e8716c55fb6cda6e46ede3998532946ac72d405fc8a7675e6df5b0bb7d3241c38e23d796d5acdc16182e8ffd3b4e6d824bc0984d87a5116348628e30ba6a4d34d8638f9901417a04110eadb31ffc49f77b8029bccc86ed441f855c0938e7f45f2a2ca6eafadfc756399c8f64d1fe7037e3f037f0939c5555e33fc0eb355d99c151ec1e6a91a3e4de37f54be9c07366ffd6a2b09bc541a77", 0xd4}, {&(0x7f0000000300)="51493c4a0625ed462ac82f9ca7ec97ec69e4100d615f808d91401aecba342492e894a0362af3dd50e9513fadd7689e19f56ccdf2d6ddfe317e985bea0453a0e10a58c909614be640f563d85f67305420dfa3c4e4a3b0bc4846dbd3b316f4e21ecaf4686b7465a55c516d6d8a7e95e7b39ae8f5de54453b08ad8a577deab03f6d66b1dcf0304d", 0x86}], 0x3, &(0x7f0000000500)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r4, r8, r9, r10, r3, r11, r5, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, 0xffffffffffffffff}}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="0bafc4620f0811178db96a1a4e71ab5965af718e3e45718919bebb16fdd067d00273c335f3cae933eecd12490196a291a08ac8903de558500c02627f1b5e2d42ca0b78da24160ff38936f4d90f4043d5c9201998b84f436c9a3ba47d51d46f5cd7dab8f8e3609e5311d5701a6ae34de459d6e7a2879be05f1b59ab733bcb5986b1b2bc53d3d29a449ac7d028b85feb28362a6ffac9b63a6ea8e91c8df6b08a829f4970dc93547f8bfbe2fa3615f0ff7c6cabefb35aed17b47038cbf091fd68c05023998caba1ee652b372d5ffc", 0xcd}], 0x1, 0x0, 0x0, 0x4041040}}], 0x2, 0x64000001) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 06:17:48 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 06:17:48 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 4) 06:17:48 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r2, 0x800) (async) lseek(r2, 0x0, 0x2) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000002c0)={0x0, r3, 0x6, 0x1, 0x81, 0x2c8f0ddf}) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4c21632", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf25010000000900010073797a32000000000900030073797a320000000005000400010000000900010073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x480) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1129.257063][T18579] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1129.316367][ T27] audit: type=1804 audit(1681798668.179:4248): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/786/bus" dev="sda1" ino=1177 res=1 errno=0 06:17:48 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="65d2d91a9ffae7fb223d72b40c7c1e6ba760d886f2d58bb78d415024f19c2640158ebf6f96ead8d3fecce65829e5622b6068076f660e820c7b", 0x39) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x1, 'pimreg1\x00', {}, 0xdf8}) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1129.358209][ T27] audit: type=1804 audit(1681798668.179:4249): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/786/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1129.383119][ T9] usb 3-1: USB disconnect, device number 58 [ 1129.389150][T18606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.398717][T18606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.412038][ T5164] usb 1-1: USB disconnect, device number 84 [ 1129.479356][ T27] audit: type=1804 audit(1681798668.339:4250): pid=18609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/612/bus" dev="sda1" ino=1157 res=1 errno=0 [ 1129.506576][ T27] audit: type=1800 audit(1681798668.339:4251): pid=18609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1157 res=0 errno=0 06:17:48 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 5) 06:17:48 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 5) 06:17:48 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) [ 1129.680821][ T27] audit: type=1804 audit(1681798668.539:4252): pid=18614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/787/bus" dev="sda1" ino=1178 res=1 errno=0 [ 1129.683676][T18614] FAULT_INJECTION: forcing a failure. [ 1129.683676][T18614] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.721175][T18614] CPU: 1 PID: 18614 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1129.729474][ T27] audit: type=1804 audit(1681798668.539:4253): pid=18614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/787/bus" dev="sda1" ino=1178 res=1 errno=0 [ 1129.731083][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1129.731100][T18614] Call Trace: [ 1129.731108][T18614] [ 1129.731119][T18614] dump_stack_lvl+0x136/0x150 [ 1129.773724][ T5176] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1129.777219][T18614] should_fail_ex+0x4a3/0x5b0 [ 1129.789475][T18614] should_failslab+0x9/0x20 [ 1129.794007][T18614] __kmem_cache_alloc_node+0x5b/0x320 [ 1129.799409][T18614] ? ext4_find_extent+0xa3c/0xd20 [ 1129.804453][T18614] ? ext4_find_extent+0xa3c/0xd20 [ 1129.809516][T18614] __kmalloc+0x4e/0x190 [ 1129.813695][T18614] ? __kernel_text_address+0xd/0x30 [ 1129.818928][T18614] ext4_find_extent+0xa3c/0xd20 [ 1129.823833][T18614] ext4_ext_map_blocks+0x1e1/0x5be0 [ 1129.829081][T18614] ? __lock_acquire+0x1916/0x5df0 [ 1129.834150][T18614] ? ext4_ext_release+0x10/0x10 [ 1129.839056][T18614] ? find_held_lock+0x2d/0x110 [ 1129.843836][T18614] ? __down_read_common+0x884/0xf30 [ 1129.849073][T18614] ? down_write_nested+0x200/0x200 [ 1129.854208][T18614] ? lock_sync+0x190/0x190 [ 1129.858625][T18614] ? rcu_is_watching+0x12/0xb0 [ 1129.863402][T18614] ? trace_lock_acquire+0x12d/0x180 [ 1129.868637][T18614] ? ext4_da_get_block_prep+0x5d7/0x11e0 [ 1129.874293][T18614] ? lock_acquire+0x32/0xc0 [ 1129.878791][T18614] ? ext4_da_get_block_prep+0x5d7/0x11e0 [ 1129.884446][T18614] ext4_da_get_block_prep+0xd06/0x11e0 [ 1129.889945][T18614] ? ext4_da_release_space+0x530/0x530 [ 1129.895428][T18614] ? ext4_block_write_begin+0xb9c/0xde0 [ 1129.900977][T18614] ? lock_downgrade+0x690/0x690 [ 1129.905846][T18614] ? folio_flags.constprop.0+0x53/0x150 [ 1129.911432][T18614] ? create_empty_buffers+0x37d/0xf30 [ 1129.916827][T18614] ext4_block_write_begin+0x3c1/0xde0 [ 1129.922206][T18614] ? ext4_da_release_space+0x530/0x530 [ 1129.927683][T18614] ? mpage_map_and_submit_buffers+0xaf0/0xaf0 [ 1129.933787][T18614] ? __filemap_get_folio+0x1f8/0x990 [ 1129.939129][T18614] ext4_da_write_begin+0x495/0x8b0 [ 1129.944260][T18614] ? ext4_write_begin+0x1020/0x1020 [ 1129.949494][T18614] ? balance_dirty_pages_ratelimited_flags+0x8f/0x11d0 [ 1129.956382][T18614] generic_perform_write+0x256/0x570 [ 1129.961694][T18614] ? generic_file_readonly_mmap+0x180/0x180 [ 1129.967602][T18614] ? iunique+0x370/0x370 [ 1129.971874][T18614] ext4_buffered_write_iter+0x15b/0x460 [ 1129.977417][T18614] ext4_file_write_iter+0xbe0/0x1740 [ 1129.982697][T18614] ? aa_file_perm+0x592/0x1250 [ 1129.987469][T18614] ? iter_file_splice_write+0x16c/0xc80 [ 1129.993053][T18614] ? kasan_save_stack+0x32/0x40 [ 1129.997933][T18614] ? kasan_set_track+0x25/0x30 [ 1130.002704][T18614] ? ext4_file_mmap+0x6c0/0x6c0 [ 1130.007559][T18614] ? do_sendfile+0xb19/0x12c0 [ 1130.012283][T18614] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1130.017674][T18614] ? do_syscall_64+0x39/0xb0 [ 1130.022269][T18614] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1130.023143][ T5176] usb 3-1: Using ep0 maxpacket: 8 [ 1130.028345][T18614] ? mode_strip_sgid+0x1c0/0x1c0 [ 1130.028390][T18614] do_iter_readv_writev+0x20b/0x3b0 [ 1130.033909][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1130.038355][T18614] ? generic_copy_file_range+0x1d0/0x1d0 [ 1130.038405][T18614] ? bpf_lsm_file_permission+0x9/0x10 [ 1130.038440][T18614] ? security_file_permission+0xaf/0xd0 [ 1130.038487][T18614] do_iter_write+0x185/0x7e0 [ 1130.072361][T18614] vfs_iter_write+0x74/0xa0 [ 1130.076916][T18614] iter_file_splice_write+0x745/0xc80 [ 1130.082334][T18614] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1130.088526][T18614] ? generic_file_splice_read+0x139/0x1b0 [ 1130.094295][T18614] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1130.100494][T18614] direct_splice_actor+0x114/0x180 [ 1130.105634][T18614] splice_direct_to_actor+0x335/0x8a0 [ 1130.111038][T18614] ? do_splice_direct+0x280/0x280 [ 1130.116075][T18614] ? folio_flags.constprop.0+0x150/0x150 [ 1130.121708][T18614] ? bpf_lsm_file_permission+0x9/0x10 [ 1130.127092][T18614] ? security_file_permission+0xaf/0xd0 [ 1130.132671][T18614] do_splice_direct+0x1ab/0x280 [ 1130.137564][T18614] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1130.143146][T18614] do_sendfile+0xb19/0x12c0 [ 1130.147698][T18614] ? vfs_iocb_iter_write+0x480/0x480 [ 1130.153038][T18614] __x64_sys_sendfile64+0x1d0/0x210 [ 1130.158297][T18614] ? ksys_write+0x1a3/0x250 [ 1130.162795][T18614] ? __ia32_sys_sendfile+0x220/0x220 [ 1130.163166][ T5176] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.168081][T18614] ? syscall_enter_from_user_mode+0x26/0x80 [ 1130.168123][T18614] do_syscall_64+0x39/0xb0 [ 1130.187348][ T5176] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1130.188486][T18614] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1130.188525][T18614] RIP: 0033:0x7f963c08c169 [ 1130.188547][T18614] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1130.202914][ T5176] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.203241][T18614] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1130.203275][T18614] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1130.203293][T18614] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1130.203310][T18614] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1130.203327][T18614] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000001 06:17:49 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 6) 06:17:49 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0) [ 1130.203345][T18614] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1130.283326][ T5176] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1130.285297][T18614] [ 1130.297809][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1130.317246][ T5176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 06:17:49 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 6) [ 1130.350522][ T5176] usb 3-1: SerialNumber: syz [ 1130.363229][T10141] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1130.413559][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.422910][T18623] FAULT_INJECTION: forcing a failure. [ 1130.422910][T18623] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.423794][ T27] audit: type=1804 audit(1681798669.279:4254): pid=18623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/788/bus" dev="sda1" ino=1178 res=1 errno=0 [ 1130.436581][T18623] CPU: 1 PID: 18623 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1130.436612][T18623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1130.436628][T18623] Call Trace: [ 1130.436636][T18623] [ 1130.436647][T18623] dump_stack_lvl+0x136/0x150 [ 1130.492610][T18623] should_fail_ex+0x4a3/0x5b0 [ 1130.497312][T18623] should_failslab+0x9/0x20 [ 1130.501827][T18623] kmem_cache_alloc+0x63/0x3b0 [ 1130.506612][T18623] __es_insert_extent+0x39b/0x13e0 [ 1130.511758][T18623] ext4_es_insert_extent+0x302/0xbb0 [ 1130.517068][T18623] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1130.522114][T18623] ? lock_downgrade+0x690/0x690 [ 1130.526987][T18623] ? __ext4_handle_dirty_metadata+0x8e0/0x8e0 [ 1130.533071][T18623] ? __es_find_extent_range+0x197/0x4b0 [ 1130.538636][T18623] ? ext4_es_find_extent_range+0x138/0x480 [ 1130.544467][T18623] ? __ext4_handle_dirty_metadata+0x8e0/0x8e0 [ 1130.550551][T18623] ? rcu_is_watching+0x12/0xb0 [ 1130.555342][T18623] ext4_ext_map_blocks+0x1a91/0x5be0 [ 1130.560674][T18623] ? __lock_acquire+0x1916/0x5df0 [ 1130.565729][T18623] ? ext4_ext_release+0x10/0x10 [ 1130.570611][T18623] ? find_held_lock+0x2d/0x110 [ 1130.575405][T18623] ? __down_read_common+0x884/0xf30 [ 1130.580621][T18623] ? down_write_nested+0x200/0x200 [ 1130.585746][T18623] ? lock_sync+0x190/0x190 [ 1130.590178][T18623] ? rcu_is_watching+0x12/0xb0 [ 1130.594963][T18623] ? trace_lock_acquire+0x12d/0x180 [ 1130.600176][T18623] ? ext4_da_get_block_prep+0x5d7/0x11e0 [ 1130.605823][T18623] ? lock_acquire+0x32/0xc0 [ 1130.610343][T18623] ? ext4_da_get_block_prep+0x5d7/0x11e0 [ 1130.615997][T18623] ext4_da_get_block_prep+0xd06/0x11e0 [ 1130.621476][T18623] ? ext4_da_release_space+0x530/0x530 [ 1130.626991][T18623] ? ext4_block_write_begin+0xb9c/0xde0 [ 1130.632551][T18623] ? lock_downgrade+0x690/0x690 [ 1130.637421][T18623] ? folio_flags.constprop.0+0x53/0x150 [ 1130.642992][T18623] ? create_empty_buffers+0x37d/0xf30 [ 1130.648392][T18623] ext4_block_write_begin+0x3c1/0xde0 [ 1130.653793][T18623] ? ext4_da_release_space+0x530/0x530 [ 1130.659292][T18623] ? mpage_map_and_submit_buffers+0xaf0/0xaf0 [ 1130.665378][T18623] ? __filemap_get_folio+0x1f8/0x990 [ 1130.670695][T18623] ext4_da_write_begin+0x495/0x8b0 [ 1130.675831][T18623] ? ext4_write_begin+0x1020/0x1020 [ 1130.681052][T18623] ? balance_dirty_pages_ratelimited_flags+0x8f/0x11d0 [ 1130.687919][T18623] generic_perform_write+0x256/0x570 [ 1130.693228][T18623] ? generic_file_readonly_mmap+0x180/0x180 [ 1130.699141][T18623] ? iunique+0x370/0x370 [ 1130.703410][T18623] ext4_buffered_write_iter+0x15b/0x460 [ 1130.708994][T18623] ext4_file_write_iter+0xbe0/0x1740 [ 1130.714299][T18623] ? aa_file_perm+0x592/0x1250 [ 1130.719077][T18623] ? iter_file_splice_write+0x16c/0xc80 [ 1130.724646][T18623] ? kasan_save_stack+0x32/0x40 [ 1130.729516][T18623] ? kasan_set_track+0x25/0x30 [ 1130.734301][T18623] ? ext4_file_mmap+0x6c0/0x6c0 [ 1130.739160][T18623] ? do_sendfile+0xb19/0x12c0 [ 1130.743871][T18623] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1130.749255][T18623] ? do_syscall_64+0x39/0xb0 [ 1130.753863][T18623] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1130.759950][T18623] ? mode_strip_sgid+0x1c0/0x1c0 [ 1130.764907][T18623] do_iter_readv_writev+0x20b/0x3b0 [ 1130.770133][T18623] ? generic_copy_file_range+0x1d0/0x1d0 [ 1130.775793][T18623] ? bpf_lsm_file_permission+0x9/0x10 [ 1130.781181][T18623] ? security_file_permission+0xaf/0xd0 [ 1130.786756][T18623] do_iter_write+0x185/0x7e0 [ 1130.791380][T18623] vfs_iter_write+0x74/0xa0 [ 1130.795907][T18623] iter_file_splice_write+0x745/0xc80 [ 1130.801312][T18623] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1130.807505][T18623] ? generic_file_splice_read+0x139/0x1b0 [ 1130.813250][T18623] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1130.819428][T18623] direct_splice_actor+0x114/0x180 [ 1130.824564][T18623] splice_direct_to_actor+0x335/0x8a0 [ 1130.829960][T18623] ? do_splice_direct+0x280/0x280 [ 1130.835010][T18623] ? folio_flags.constprop.0+0x150/0x150 [ 1130.840665][T18623] ? bpf_lsm_file_permission+0x9/0x10 [ 1130.846059][T18623] ? security_file_permission+0xaf/0xd0 [ 1130.851634][T18623] do_splice_direct+0x1ab/0x280 [ 1130.856505][T18623] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1130.862085][T18623] do_sendfile+0xb19/0x12c0 [ 1130.866626][T18623] ? vfs_iocb_iter_write+0x480/0x480 [ 1130.871944][T18623] __x64_sys_sendfile64+0x1d0/0x210 [ 1130.877152][T18623] ? ksys_write+0x1a3/0x250 [ 1130.881664][T18623] ? __ia32_sys_sendfile+0x220/0x220 [ 1130.886964][T18623] ? syscall_enter_from_user_mode+0x26/0x80 [ 1130.892877][T18623] do_syscall_64+0x39/0xb0 [ 1130.897330][T18623] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1130.903242][T18623] RIP: 0033:0x7f963c08c169 [ 1130.907667][T18623] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1130.927286][T18623] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1130.935712][T18623] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1130.943690][T18623] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1130.951685][T18623] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1130.959663][T18623] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000001 [ 1130.967641][T18623] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1130.975636][T18623] [ 1130.980349][ T5176] hub 3-1:1.0: bad descriptor, ignoring hub [ 1131.000844][ T5176] hub: probe of 3-1:1.0 failed with error -5 06:17:49 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0) [ 1131.007891][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1131.023210][ T5176] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1131.034067][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.102343][ T27] audit: type=1804 audit(1681798669.279:4255): pid=18623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/788/bus" dev="sda1" ino=1178 res=1 errno=0 [ 1131.153177][ T5212] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1131.183154][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1131.192377][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1131.200787][ T9] usb 5-1: SerialNumber: syz [ 1131.213147][T10141] usb 2-1: Using ep0 maxpacket: 8 [ 1131.245132][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 1131.251164][ T9] hub: probe of 5-1:1.0 failed with error -5 [ 1131.262456][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1131.268550][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 1131.353118][T10141] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.364985][T10141] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1131.374308][T10141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.423192][ T5212] usb 1-1: Using ep0 maxpacket: 8 [ 1131.446268][T18616] FAULT_INJECTION: forcing a failure. [ 1131.446268][T18616] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.459105][T18616] CPU: 0 PID: 18616 Comm: syz-executor.4 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1131.469017][T18616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1131.479062][T18616] Call Trace: [ 1131.482332][T18616] [ 1131.485258][T18616] dump_stack_lvl+0x136/0x150 [ 1131.489942][T18616] should_fail_ex+0x4a3/0x5b0 [ 1131.494618][T18616] should_failslab+0x9/0x20 [ 1131.499118][T18616] __kmem_cache_alloc_node+0x5b/0x320 [ 1131.504525][T18616] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1131.510249][T18616] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1131.513497][T10141] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1131.515962][T18616] __kmalloc+0x4e/0x190 [ 1131.515991][T18616] ? rcu_is_watching+0x12/0xb0 [ 1131.531560][T10141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1131.533910][T18616] tomoyo_realpath_from_path+0xc3/0x600 [ 1131.533965][T18616] tomoyo_check_open_permission+0x29a/0x3a0 [ 1131.534001][T18616] ? tomoyo_path_number_perm+0x570/0x570 [ 1131.543932][T10141] usb 2-1: SerialNumber: syz [ 1131.547526][T18616] ? hook_path_unlink+0x520/0x520 [ 1131.568710][T18616] ? lock_downgrade+0x690/0x690 [ 1131.573585][T18616] ? spin_bug+0x1c0/0x1c0 [ 1131.577936][T18616] tomoyo_file_open+0xa1/0xc0 [ 1131.582640][T18616] security_file_open+0x49/0xb0 [ 1131.587512][T18616] do_dentry_open+0x575/0x13f0 [ 1131.592306][T18616] ? may_open+0x1f6/0x420 [ 1131.596648][T18616] path_openat+0x1baa/0x2750 [ 1131.601263][T18616] ? path_lookupat+0x840/0x840 [ 1131.606051][T18616] do_filp_open+0x1ba/0x410 [ 1131.610573][T18616] ? may_open_dev+0xf0/0xf0 [ 1131.615089][T18616] ? find_held_lock+0x2d/0x110 [ 1131.619888][T18616] ? _raw_spin_unlock+0x28/0x40 [ 1131.624754][T18616] ? alloc_fd+0x2e4/0x750 [ 1131.629111][T18616] do_sys_openat2+0x16d/0x4c0 [ 1131.633807][T18616] ? build_open_flags+0x720/0x720 [ 1131.638862][T18616] __x64_sys_openat+0x143/0x1f0 [ 1131.643730][T18616] ? __ia32_sys_open+0x1c0/0x1c0 [ 1131.648685][T18616] ? ksys_write+0x1a3/0x250 [ 1131.653222][T18616] ? syscall_enter_from_user_mode+0x26/0x80 [ 1131.659160][T18616] do_syscall_64+0x39/0xb0 [ 1131.663618][T18616] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1131.669529][T18616] RIP: 0033:0x7fe7d683e2f4 [ 1131.673952][T18616] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1131.693570][T18616] RSP: 002b:00007fe7d7679ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1131.701996][T18616] RAX: ffffffffffffffda RBX: 00007fe7d69abf80 RCX: 00007fe7d683e2f4 [ 1131.709975][T18616] RDX: 0000000000000002 RSI: 00007fe7d7679d40 RDI: 00000000ffffff9c [ 1131.717952][T18616] RBP: 00007fe7d7679d40 R08: 0000000000000000 R09: 000000000000000f [ 1131.725931][T18616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1131.733906][T18616] R13: 00007ffd33e3417f R14: 00007fe7d767a300 R15: 0000000000022000 [ 1131.741899][T18616] [ 1131.753769][T18616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1131.774382][T10141] hub 2-1:1.0: bad descriptor, ignoring hub [ 1131.780309][T10141] hub: probe of 2-1:1.0 failed with error -5 [ 1131.793244][ T5212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.803693][ T5212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1131.812574][ T5212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.876329][T10141] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1131.884982][T10141] cdc_wdm 2-1:1.0: Unknown control protocol [ 1131.888343][ T9] usb 5-1: USB disconnect, device number 40 [ 1131.923340][ T5212] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1131.933342][ T5212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1131.941461][ T5212] usb 1-1: SerialNumber: syz [ 1131.984692][ T5212] hub 1-1:1.0: bad descriptor, ignoring hub [ 1131.991178][ T5212] hub: probe of 1-1:1.0 failed with error -5 [ 1131.998908][ T5212] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1132.005092][ T5212] cdc_wdm 1-1:1.0: Unknown control protocol [ 1132.105368][T10141] usb 2-1: USB disconnect, device number 2 [ 1132.190160][T18621] FAULT_INJECTION: forcing a failure. [ 1132.190160][T18621] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.203131][T18621] CPU: 0 PID: 18621 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1132.213067][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1132.223162][T18621] Call Trace: [ 1132.226429][T18621] [ 1132.229352][T18621] dump_stack_lvl+0x136/0x150 [ 1132.234034][T18621] should_fail_ex+0x4a3/0x5b0 [ 1132.238705][T18621] should_failslab+0x9/0x20 [ 1132.243197][T18621] __kmem_cache_alloc_node+0x5b/0x320 [ 1132.248562][T18621] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1132.253932][T18621] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1132.259299][T18621] __kmalloc+0x4e/0x190 [ 1132.263459][T18621] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 1132.269131][T18621] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1132.274364][T18621] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1132.280105][T18621] ? rcu_is_watching+0x12/0xb0 [ 1132.284898][T18621] tomoyo_encode+0x2c/0x50 [ 1132.289338][T18621] tomoyo_realpath_from_path+0x185/0x600 [ 1132.294998][T18621] tomoyo_check_open_permission+0x29a/0x3a0 [ 1132.300913][T18621] ? tomoyo_path_number_perm+0x570/0x570 [ 1132.306593][T18621] ? hook_path_unlink+0x520/0x520 [ 1132.311636][T18621] ? lock_downgrade+0x690/0x690 [ 1132.316508][T18621] ? spin_bug+0x1c0/0x1c0 [ 1132.320862][T18621] tomoyo_file_open+0xa1/0xc0 [ 1132.325563][T18621] security_file_open+0x49/0xb0 [ 1132.330433][T18621] do_dentry_open+0x575/0x13f0 [ 1132.335219][T18621] ? may_open+0x1f6/0x420 [ 1132.339566][T18621] path_openat+0x1baa/0x2750 [ 1132.344181][T18621] ? path_lookupat+0x840/0x840 [ 1132.348993][T18621] do_filp_open+0x1ba/0x410 [ 1132.353518][T18621] ? may_open_dev+0xf0/0xf0 [ 1132.358037][T18621] ? find_held_lock+0x2d/0x110 [ 1132.362848][T18621] ? _raw_spin_unlock+0x28/0x40 [ 1132.367735][T18621] ? alloc_fd+0x2e4/0x750 [ 1132.372122][T18621] do_sys_openat2+0x16d/0x4c0 [ 1132.376839][T18621] ? build_open_flags+0x720/0x720 [ 1132.381890][T18621] __x64_sys_openat+0x143/0x1f0 [ 1132.386758][T18621] ? __ia32_sys_open+0x1c0/0x1c0 [ 1132.391711][T18621] ? ksys_write+0x1a3/0x250 [ 1132.396227][T18621] ? syscall_enter_from_user_mode+0x26/0x80 [ 1132.402140][T18621] do_syscall_64+0x39/0xb0 [ 1132.406574][T18621] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1132.412483][T18621] RIP: 0033:0x7f11ea03e2f4 [ 1132.416903][T18621] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1132.436520][T18621] RSP: 002b:00007f11eae63ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1132.444944][T18621] RAX: ffffffffffffffda RBX: 00007f11ea1abf80 RCX: 00007f11ea03e2f4 [ 1132.452942][T18621] RDX: 0000000000000002 RSI: 00007f11eae63d40 RDI: 00000000ffffff9c [ 1132.460930][T18621] RBP: 00007f11eae63d40 R08: 0000000000000000 R09: 000000000000000f [ 1132.468908][T18621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1132.476919][T18621] R13: 00007ffc08f5a13f R14: 00007f11eae64300 R15: 0000000000022000 [ 1132.484913][T18621] [ 1132.503506][T18621] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1132.618117][T10141] usb 1-1: USB disconnect, device number 85 [ 1132.623279][ T5176] usb 3-1: USB disconnect, device number 59 06:17:51 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = open(0x0, 0x1400, 0x0) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x113800, 0x151) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = open(0x0, 0x0, 0x0) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r6]) r7 = getpgid(0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCETHTOOL(r8, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) r9 = accept4$unix(r4, 0x0, &(0x7f00000003c0), 0x0) r10 = openat$cgroup_freezer_state(r5, &(0x7f0000000400), 0x2, 0x0) (async) r11 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x81) (async) r12 = syz_open_dev$vcsn(&(0x7f0000000440), 0x3ff, 0x1) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x101001, 0x0) (async) r14 = getpid() sched_setscheduler(r14, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r15, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) recvmmsg(r15, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r15, @ANYRESDEC=r15, @ANYRES16=r14, @ANYRESHEX, @ANYBLOB="8fe78208ab497a3ab76ff3ed2155bc8ab84b519150387fd3df6d10d82b001d2282a914e9363ed98d374781aea20f69cd4321cdce968abb7b172ce258b0d52ed95a2c4cfe4dd7aaafa8d90aad2d5374f9569dea8443d195deedf6d6966fd16e313b6f1e49da52a6f0894cf6ad36e3ecb14400dbb64388c75219e9273a932b7c30c22f6ccfa6172c6e8ed235973cbec218cd285ebefa244e9ea76d9ff0ff8f026397606359cae9aa095a66d3690c7839e390", @ANYRES64=r16]) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000180)="f66b81a69e569f40e77479b629ca456adac72ccf896244d4c524c79a80244ca73e3a65f8d69ba8164243a99a77f4370ff2092f98e28f73228e201be10fc06c5b1886d05d599d93f62ea0b9c251204c4f54aa115273ce79d983d4c9", 0x5b}, {&(0x7f0000000200)="599cacf7b46f37781390a101a5587fd2a26e90d442a51e9f0c50f048553371afcee26e6ce9685e8642072ada0727bef17033ddae4c760b862409fc5c3e8716c55fb6cda6e46ede3998532946ac72d405fc8a7675e6df5b0bb7d3241c38e23d796d5acdc16182e8ffd3b4e6d824bc0984d87a5116348628e30ba6a4d34d8638f9901417a04110eadb31ffc49f77b8029bccc86ed441f855c0938e7f45f2a2ca6eafadfc756399c8f64d1fe7037e3f037f0939c5555e33fc0eb355d99c151ec1e6a91a3e4de37f54be9c07366ffd6a2b09bc541a77", 0xd4}, {&(0x7f0000000300)="51493c4a0625ed462ac82f9ca7ec97ec69e4100d615f808d91401aecba342492e894a0362af3dd50e9513fadd7689e19f56ccdf2d6ddfe317e985bea0453a0e10a58c909614be640f563d85f67305420dfa3c4e4a3b0bc4846dbd3b316f4e21ecaf4686b7465a55c516d6d8a7e95e7b39ae8f5de54453b08ad8a577deab03f6d66b1dcf0304d", 0x86}], 0x3, &(0x7f0000000500)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r4, r8, r9, r10, r3, r11, r5, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, 0xffffffffffffffff}}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="0bafc4620f0811178db96a1a4e71ab5965af718e3e45718919bebb16fdd067d00273c335f3cae933eecd12490196a291a08ac8903de558500c02627f1b5e2d42ca0b78da24160ff38936f4d90f4043d5c9201998b84f436c9a3ba47d51d46f5cd7dab8f8e3609e5311d5701a6ae34de459d6e7a2879be05f1b59ab733bcb5986b1b2bc53d3d29a449ac7d028b85feb28362a6ffac9b63a6ea8e91c8df6b08a829f4970dc93547f8bfbe2fa3615f0ff7c6cabefb35aed17b47038cbf091fd68c05023998caba1ee652b372d5ffc", 0xcd}], 0x1, 0x0, 0x0, 0x4041040}}], 0x2, 0x64000001) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (rerun: 32) 06:17:51 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 7) 06:17:51 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) 06:17:51 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 6) 06:17:51 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="65d2d91a9ffae7fb223d72b40c7c1e6ba760d886f2d58bb78d415024f19c2640158ebf6f96ead8d3fecce65829e5622b6068076f660e820c7b", 0x39) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x1, 'pimreg1\x00', {}, 0xdf8}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x1, 'pimreg1\x00', {}, 0xdf8}) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) (async) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:51 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1133.055097][ T27] audit: type=1804 audit(1681798671.919:4256): pid=18635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/613/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1133.089463][T18634] FAULT_INJECTION: forcing a failure. [ 1133.089463][T18634] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.103306][T18634] CPU: 1 PID: 18634 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1133.111536][ T27] audit: type=1800 audit(1681798671.919:4257): pid=18635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1133.113212][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1133.113231][T18634] Call Trace: [ 1133.113239][T18634] [ 1133.113250][T18634] dump_stack_lvl+0x136/0x150 [ 1133.113297][T18634] should_fail_ex+0x4a3/0x5b0 [ 1133.113332][T18634] should_failslab+0x9/0x20 [ 1133.113358][T18634] kmem_cache_alloc+0x63/0x3b0 [ 1133.169015][T18634] __es_insert_extent+0x39b/0x13e0 [ 1133.174174][T18634] ext4_es_insert_delayed_block+0x2ae/0x4c0 [ 1133.180080][T18634] ? ext4_is_pending+0x230/0x230 [ 1133.185027][T18634] ? percpu_counter_add_batch+0x170/0x1e0 [ 1133.190769][T18634] ? do_raw_spin_unlock+0x175/0x230 [ 1133.195987][T18634] ? _raw_spin_unlock+0x28/0x40 [ 1133.200863][T18634] ext4_da_get_block_prep+0xc68/0x11e0 [ 1133.206344][T18634] ? ext4_da_release_space+0x530/0x530 [ 1133.211821][T18634] ? ext4_block_write_begin+0xb9c/0xde0 [ 1133.217383][T18634] ? lock_downgrade+0x690/0x690 [ 1133.222257][T18634] ? folio_flags.constprop.0+0x53/0x150 [ 1133.227826][T18634] ? create_empty_buffers+0x37d/0xf30 [ 1133.233221][T18634] ext4_block_write_begin+0x3c1/0xde0 [ 1133.238624][T18634] ? ext4_da_release_space+0x530/0x530 [ 1133.244101][T18634] ? mpage_map_and_submit_buffers+0xaf0/0xaf0 [ 1133.250185][T18634] ? __filemap_get_folio+0x1f8/0x990 [ 1133.255497][T18634] ext4_da_write_begin+0x495/0x8b0 [ 1133.260638][T18634] ? ext4_write_begin+0x1020/0x1020 [ 1133.265857][T18634] ? balance_dirty_pages_ratelimited_flags+0x8f/0x11d0 [ 1133.272725][T18634] generic_perform_write+0x256/0x570 [ 1133.278035][T18634] ? generic_file_readonly_mmap+0x180/0x180 [ 1133.283963][T18634] ? iunique+0x370/0x370 [ 1133.288242][T18634] ext4_buffered_write_iter+0x15b/0x460 [ 1133.293812][T18634] ext4_file_write_iter+0xbe0/0x1740 [ 1133.299107][T18634] ? aa_file_perm+0x592/0x1250 [ 1133.303883][T18634] ? iter_file_splice_write+0x16c/0xc80 [ 1133.309450][T18634] ? kasan_save_stack+0x32/0x40 [ 1133.314319][T18634] ? kasan_set_track+0x25/0x30 [ 1133.319107][T18634] ? ext4_file_mmap+0x6c0/0x6c0 [ 1133.323966][T18634] ? do_sendfile+0xb19/0x12c0 [ 1133.328662][T18634] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1133.334049][T18634] ? do_syscall_64+0x39/0xb0 [ 1133.338657][T18634] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1133.344740][T18634] ? mode_strip_sgid+0x1c0/0x1c0 [ 1133.349701][T18634] do_iter_readv_writev+0x20b/0x3b0 [ 1133.354923][T18634] ? generic_copy_file_range+0x1d0/0x1d0 [ 1133.360579][T18634] ? bpf_lsm_file_permission+0x9/0x10 [ 1133.365964][T18634] ? security_file_permission+0xaf/0xd0 [ 1133.371536][T18634] do_iter_write+0x185/0x7e0 [ 1133.376158][T18634] vfs_iter_write+0x74/0xa0 [ 1133.380684][T18634] iter_file_splice_write+0x745/0xc80 [ 1133.386090][T18634] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1133.392286][T18634] ? generic_file_splice_read+0x139/0x1b0 [ 1133.398032][T18634] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1133.404211][T18634] direct_splice_actor+0x114/0x180 [ 1133.409347][T18634] splice_direct_to_actor+0x335/0x8a0 [ 1133.414741][T18634] ? do_splice_direct+0x280/0x280 [ 1133.419792][T18634] ? folio_flags.constprop.0+0x150/0x150 [ 1133.425445][T18634] ? bpf_lsm_file_permission+0x9/0x10 [ 1133.430832][T18634] ? security_file_permission+0xaf/0xd0 [ 1133.436402][T18634] do_splice_direct+0x1ab/0x280 [ 1133.441274][T18634] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1133.446865][T18634] do_sendfile+0xb19/0x12c0 [ 1133.451396][T18634] ? vfs_iocb_iter_write+0x480/0x480 [ 1133.456714][T18634] __x64_sys_sendfile64+0x1d0/0x210 [ 1133.461920][T18634] ? ksys_write+0x1a3/0x250 [ 1133.466431][T18634] ? __ia32_sys_sendfile+0x220/0x220 [ 1133.471727][T18634] ? syscall_enter_from_user_mode+0x26/0x80 [ 1133.477638][T18634] do_syscall_64+0x39/0xb0 [ 1133.482074][T18634] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1133.487985][T18634] RIP: 0033:0x7f963c08c169 [ 1133.492413][T18634] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1133.512038][T18634] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1133.520457][T18634] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1133.528438][T18634] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1133.536414][T18634] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.544391][T18634] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000001 06:17:52 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000002c0)={0x0, r3, 0x6, 0x1, 0x81, 0x2c8f0ddf}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4c21632", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf25010000000900010073797a32000000000900030073797a320000000005000400010000000900010073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x480) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:52 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 7) [ 1133.552370][T18634] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1133.560363][T18634] 06:17:52 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="65d2d91a9ffae7fb223d72b40c7c1e6ba760d886f2d58bb78d415024f19c2640158ebf6f96ead8d3fecce65829e5622b6068076f660e820c7b", 0x39) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x1, 'pimreg1\x00', {}, 0xdf8}) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write(r1, &(0x7f0000000080)="65d2d91a9ffae7fb223d72b40c7c1e6ba760d886f2d58bb78d415024f19c2640158ebf6f96ead8d3fecce65829e5622b6068076f660e820c7b", 0x39) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) open(0x0, 0x0, 0x0) (async) ftruncate(r2, 0x800) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x1, 'pimreg1\x00', {}, 0xdf8}) (async) lseek(r2, 0x0, 0x2) (async) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) sendfile(r2, r3, 0x0, 0x1dd03) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) [ 1133.646592][ T27] audit: type=1804 audit(1681798671.949:4258): pid=18634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/789/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1133.686907][ T27] audit: type=1804 audit(1681798671.949:4259): pid=18634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/789/bus" dev="sda1" ino=1179 res=1 errno=0 06:17:52 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) [ 1133.729017][ T27] audit: type=1804 audit(1681798672.499:4260): pid=18647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1222968027/syzkaller.QIhnyI/751/bus" dev="sda1" ino=1178 res=1 errno=0 [ 1133.766370][ T27] audit: type=1800 audit(1681798672.499:4261): pid=18647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 1133.788257][ T27] audit: type=1804 audit(1681798672.539:4262): pid=18651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/614/bus" dev="sda1" ino=1177 res=1 errno=0 06:17:52 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 8) [ 1133.833364][ T27] audit: type=1800 audit(1681798672.539:4263): pid=18651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1133.833451][ T5212] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1133.920292][ T27] audit: type=1804 audit(1681798672.779:4264): pid=18658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/790/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1133.924910][T18658] FAULT_INJECTION: forcing a failure. [ 1133.924910][T18658] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.946155][ T5176] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1133.962717][T18658] CPU: 1 PID: 18658 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1133.975811][T18658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1133.985886][T18658] Call Trace: [ 1133.989184][T18658] [ 1133.992170][T18658] dump_stack_lvl+0x136/0x150 [ 1133.996888][T18658] should_fail_ex+0x4a3/0x5b0 [ 1134.001583][T18658] should_failslab+0x9/0x20 [ 1134.006098][T18658] kmem_cache_alloc+0x63/0x3b0 [ 1134.010884][T18658] jbd2__journal_start+0x18a/0x6b0 [ 1134.016021][T18658] __ext4_journal_start_sb+0x411/0x5d0 [ 1134.021499][T18658] ? ext4_dirty_inode+0xa5/0x130 [ 1134.026456][T18658] ? ext4_setattr+0x26c0/0x26c0 [ 1134.031323][T18658] ext4_dirty_inode+0xa5/0x130 [ 1134.036114][T18658] ? rcu_is_watching+0x12/0xb0 [ 1134.040910][T18658] __mark_inode_dirty+0x1e0/0xd60 [ 1134.045967][T18658] ? folio_flags.constprop.0+0x53/0x150 [ 1134.051545][T18658] generic_write_end+0x354/0x440 [ 1134.056505][T18658] ext4_da_write_end+0x172/0x8e0 [ 1134.061470][T18658] generic_perform_write+0x316/0x570 [ 1134.066780][T18658] ? generic_file_readonly_mmap+0x180/0x180 [ 1134.072696][T18658] ? iunique+0x370/0x370 [ 1134.076964][T18658] ext4_buffered_write_iter+0x15b/0x460 [ 1134.082529][T18658] ext4_file_write_iter+0xbe0/0x1740 [ 1134.087821][T18658] ? aa_file_perm+0x592/0x1250 [ 1134.092600][T18658] ? iter_file_splice_write+0x16c/0xc80 [ 1134.098166][T18658] ? kasan_save_stack+0x32/0x40 [ 1134.103037][T18658] ? kasan_set_track+0x25/0x30 [ 1134.107819][T18658] ? ext4_file_mmap+0x6c0/0x6c0 [ 1134.112675][T18658] ? do_sendfile+0xb19/0x12c0 [ 1134.117372][T18658] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1134.122756][T18658] ? do_syscall_64+0x39/0xb0 [ 1134.127363][T18658] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1134.133446][T18658] ? mode_strip_sgid+0x1c0/0x1c0 [ 1134.138404][T18658] do_iter_readv_writev+0x20b/0x3b0 [ 1134.143632][T18658] ? generic_copy_file_range+0x1d0/0x1d0 [ 1134.149290][T18658] ? bpf_lsm_file_permission+0x9/0x10 [ 1134.154676][T18658] ? security_file_permission+0xaf/0xd0 [ 1134.160245][T18658] do_iter_write+0x185/0x7e0 [ 1134.164872][T18658] vfs_iter_write+0x74/0xa0 [ 1134.169398][T18658] iter_file_splice_write+0x745/0xc80 [ 1134.174801][T18658] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1134.180999][T18658] ? generic_file_splice_read+0x139/0x1b0 [ 1134.186736][T18658] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1134.192911][T18658] direct_splice_actor+0x114/0x180 [ 1134.198048][T18658] splice_direct_to_actor+0x335/0x8a0 [ 1134.203442][T18658] ? do_splice_direct+0x280/0x280 [ 1134.208493][T18658] ? folio_flags.constprop.0+0x150/0x150 [ 1134.214148][T18658] ? bpf_lsm_file_permission+0x9/0x10 [ 1134.219539][T18658] ? security_file_permission+0xaf/0xd0 [ 1134.225111][T18658] do_splice_direct+0x1ab/0x280 [ 1134.229988][T18658] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1134.235566][T18658] do_sendfile+0xb19/0x12c0 [ 1134.240098][T18658] ? vfs_iocb_iter_write+0x480/0x480 [ 1134.245417][T18658] __x64_sys_sendfile64+0x1d0/0x210 [ 1134.250626][T18658] ? ksys_write+0x1a3/0x250 [ 1134.255136][T18658] ? __ia32_sys_sendfile+0x220/0x220 [ 1134.260433][T18658] ? syscall_enter_from_user_mode+0x26/0x80 [ 1134.266345][T18658] do_syscall_64+0x39/0xb0 [ 1134.270779][T18658] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1134.276687][T18658] RIP: 0033:0x7f963c08c169 [ 1134.281110][T18658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1134.300730][T18658] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1134.309156][T18658] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 06:17:53 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) [ 1134.317134][T18658] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1134.325108][T18658] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.333086][T18658] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000001 [ 1134.341068][T18658] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1134.349076][T18658] [ 1134.352769][ T5166] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1134.363038][ T5169] usb 3-1: new high-speed USB device number 60 using dummy_hcd 06:17:53 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 9) 06:17:53 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) [ 1134.404848][ T27] audit: type=1804 audit(1681798672.779:4265): pid=18658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/790/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1134.490615][T18663] FAULT_INJECTION: forcing a failure. [ 1134.490615][T18663] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.506645][T18663] CPU: 0 PID: 18663 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1134.516576][T18663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1134.526643][T18663] Call Trace: [ 1134.529916][T18663] [ 1134.532840][T18663] dump_stack_lvl+0x136/0x150 [ 1134.537525][T18663] should_fail_ex+0x4a3/0x5b0 [ 1134.542201][T18663] should_failslab+0x9/0x20 [ 1134.546697][T18663] __kmem_cache_alloc_node+0x5b/0x320 [ 1134.552071][T18663] ? iter_file_splice_write+0x16c/0xc80 [ 1134.557619][T18663] ? iter_file_splice_write+0x16c/0xc80 [ 1134.563182][T18663] __kmalloc+0x4e/0x190 [ 1134.567366][T18663] iter_file_splice_write+0x16c/0xc80 [ 1134.572782][T18663] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1134.578950][T18663] ? generic_file_splice_read+0x139/0x1b0 [ 1134.584669][T18663] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1134.590822][T18663] direct_splice_actor+0x114/0x180 [ 1134.595934][T18663] splice_direct_to_actor+0x335/0x8a0 [ 1134.601322][T18663] ? do_splice_direct+0x280/0x280 [ 1134.606354][T18663] ? folio_flags.constprop.0+0x150/0x150 [ 1134.611986][T18663] ? bpf_lsm_file_permission+0x9/0x10 [ 1134.617367][T18663] ? security_file_permission+0xaf/0xd0 [ 1134.622944][T18663] do_splice_direct+0x1ab/0x280 [ 1134.627821][T18663] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1134.633403][T18663] do_sendfile+0xb19/0x12c0 [ 1134.637942][T18663] ? vfs_iocb_iter_write+0x480/0x480 [ 1134.643271][T18663] __x64_sys_sendfile64+0x1d0/0x210 [ 1134.648486][T18663] ? ksys_write+0x1a3/0x250 [ 1134.653002][T18663] ? __ia32_sys_sendfile+0x220/0x220 [ 1134.658310][T18663] ? syscall_enter_from_user_mode+0x26/0x80 [ 1134.664223][T18663] do_syscall_64+0x39/0xb0 [ 1134.668660][T18663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1134.674570][T18663] RIP: 0033:0x7f963c08c169 [ 1134.678992][T18663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1134.698610][T18663] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1134.707033][T18663] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1134.715011][T18663] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1134.722992][T18663] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.730975][T18663] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000001 06:17:53 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) [ 1134.738958][T18663] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1134.746958][T18663] [ 1134.751325][ T5212] usb 5-1: Using ep0 maxpacket: 8 [ 1134.813120][ T5176] usb 1-1: Using ep0 maxpacket: 8 [ 1134.818279][ T5169] usb 3-1: Using ep0 maxpacket: 8 [ 1134.823471][ T5166] usb 2-1: Using ep0 maxpacket: 8 [ 1134.903334][ T5212] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.913804][ T5212] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1134.922851][ T5212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.943222][ T5166] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.953742][ T5176] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.964102][ T5169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.974230][ T5176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1134.983157][ T5169] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1134.992053][ T5169] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.003053][ T5166] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1135.011942][ T5166] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.022871][ T5176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.043931][ T5212] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1135.053983][ T5212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1135.061993][ T5212] usb 5-1: SerialNumber: syz [ 1135.113242][ T5176] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1135.114019][ T5212] hub 5-1:1.0: bad descriptor, ignoring hub [ 1135.122423][ T5166] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1135.137381][ T5169] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1135.139479][ T5212] hub: probe of 5-1:1.0 failed with error -5 [ 1135.147124][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1135.161214][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1135.169569][ T5166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1135.172219][ T5212] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1135.178576][ T5169] usb 3-1: SerialNumber: syz [ 1135.188718][ T5176] usb 1-1: SerialNumber: syz [ 1135.190532][ T5212] cdc_wdm 5-1:1.0: Unknown control protocol [ 1135.194321][ T5166] usb 2-1: SerialNumber: syz [ 1135.244177][ T5169] hub 3-1:1.0: bad descriptor, ignoring hub [ 1135.250118][ T5169] hub: probe of 3-1:1.0 failed with error -5 [ 1135.257563][ T5176] hub 1-1:1.0: bad descriptor, ignoring hub [ 1135.264577][ T5166] hub 2-1:1.0: bad descriptor, ignoring hub [ 1135.270498][ T5166] hub: probe of 2-1:1.0 failed with error -5 [ 1135.276844][ T5176] hub: probe of 1-1:1.0 failed with error -5 [ 1135.285298][ T5169] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1135.291227][ T5169] cdc_wdm 3-1:1.0: Unknown control protocol [ 1135.297917][ T5176] cdc_wdm 1-1:1.0: cdc-wdm2: USB WDM device [ 1135.304419][ T5166] cdc_wdm 2-1:1.0: cdc-wdm3: USB WDM device [ 1135.310332][ T5166] cdc_wdm 2-1:1.0: Unknown control protocol [ 1135.316310][ T5176] cdc_wdm 1-1:1.0: Unknown control protocol [ 1135.351505][T18631] FAULT_INJECTION: forcing a failure. [ 1135.351505][T18631] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.366889][T18631] CPU: 1 PID: 18631 Comm: syz-executor.4 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1135.376823][T18631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1135.386981][T18631] Call Trace: [ 1135.390288][T18631] [ 1135.393243][T18631] dump_stack_lvl+0x136/0x150 [ 1135.397960][T18631] should_fail_ex+0x4a3/0x5b0 [ 1135.402636][T18631] should_failslab+0x9/0x20 [ 1135.407140][T18631] __kmem_cache_alloc_node+0x5b/0x320 [ 1135.412509][T18631] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1135.417930][T18631] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1135.423311][T18631] __kmalloc+0x4e/0x190 [ 1135.427508][T18631] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 1135.433155][T18631] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1135.438394][T18631] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1135.444149][T18631] ? rcu_is_watching+0x12/0xb0 [ 1135.448945][T18631] tomoyo_encode+0x2c/0x50 [ 1135.453369][T18631] tomoyo_realpath_from_path+0x185/0x600 [ 1135.459037][T18631] tomoyo_check_open_permission+0x29a/0x3a0 [ 1135.464951][T18631] ? tomoyo_path_number_perm+0x570/0x570 [ 1135.470649][T18631] ? hook_path_unlink+0x520/0x520 [ 1135.475695][T18631] ? lock_downgrade+0x690/0x690 [ 1135.480575][T18631] ? spin_bug+0x1c0/0x1c0 [ 1135.484929][T18631] tomoyo_file_open+0xa1/0xc0 [ 1135.489638][T18631] security_file_open+0x49/0xb0 [ 1135.494500][T18631] do_dentry_open+0x575/0x13f0 [ 1135.499288][T18631] ? may_open+0x1f6/0x420 [ 1135.503638][T18631] path_openat+0x1baa/0x2750 [ 1135.508252][T18631] ? path_lookupat+0x840/0x840 [ 1135.513030][T18631] do_filp_open+0x1ba/0x410 [ 1135.517552][T18631] ? may_open_dev+0xf0/0xf0 [ 1135.522049][T18631] ? find_held_lock+0x2d/0x110 [ 1135.526820][T18631] ? _raw_spin_unlock+0x28/0x40 [ 1135.531665][T18631] ? alloc_fd+0x2e4/0x750 [ 1135.536018][T18631] do_sys_openat2+0x16d/0x4c0 [ 1135.540725][T18631] ? build_open_flags+0x720/0x720 [ 1135.545774][T18631] __x64_sys_openat+0x143/0x1f0 [ 1135.550648][T18631] ? __ia32_sys_open+0x1c0/0x1c0 [ 1135.555593][T18631] ? ksys_write+0x1a3/0x250 [ 1135.560126][T18631] ? syscall_enter_from_user_mode+0x26/0x80 [ 1135.566044][T18631] do_syscall_64+0x39/0xb0 [ 1135.570460][T18631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1135.576363][T18631] RIP: 0033:0x7fe7d683e2f4 [ 1135.580785][T18631] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1135.600384][T18631] RSP: 002b:00007fe7d7679ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1135.608818][T18631] RAX: ffffffffffffffda RBX: 00007fe7d69abf80 RCX: 00007fe7d683e2f4 [ 1135.616799][T18631] RDX: 0000000000000002 RSI: 00007fe7d7679d40 RDI: 00000000ffffff9c [ 1135.624792][T18631] RBP: 00007fe7d7679d40 R08: 0000000000000000 R09: 000000000000000f [ 1135.632775][T18631] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1135.640740][T18631] R13: 00007ffd33e3417f R14: 00007fe7d767a300 R15: 0000000000022000 [ 1135.648710][T18631] [ 1135.664060][T18631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1135.671427][T18649] FAULT_INJECTION: forcing a failure. [ 1135.671427][T18649] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.685119][T18649] CPU: 1 PID: 18649 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1135.695050][T18649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1135.705129][T18649] Call Trace: [ 1135.708431][T18649] [ 1135.711388][T18649] dump_stack_lvl+0x136/0x150 [ 1135.716161][T18649] should_fail_ex+0x4a3/0x5b0 [ 1135.720868][T18649] should_failslab+0x9/0x20 [ 1135.725378][T18649] __kmem_cache_alloc_node+0x5b/0x320 [ 1135.730791][T18649] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1135.736217][T18649] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1135.741647][T18649] __kmalloc+0x4e/0x190 [ 1135.745808][T18649] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 1135.751484][T18649] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1135.756684][T18649] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1135.762414][T18649] ? rcu_is_watching+0x12/0xb0 [ 1135.767224][T18649] tomoyo_encode+0x2c/0x50 [ 1135.771670][T18649] tomoyo_realpath_from_path+0x185/0x600 [ 1135.777311][T18649] tomoyo_check_open_permission+0x29a/0x3a0 [ 1135.783217][T18649] ? tomoyo_path_number_perm+0x570/0x570 [ 1135.788894][T18649] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1135.794935][T18649] ? hook_path_unlink+0x520/0x520 [ 1135.799983][T18649] ? lock_downgrade+0x690/0x690 [ 1135.804857][T18649] ? spin_bug+0x1c0/0x1c0 [ 1135.809220][T18649] tomoyo_file_open+0xa1/0xc0 [ 1135.813963][T18649] security_file_open+0x49/0xb0 [ 1135.818835][T18649] do_dentry_open+0x575/0x13f0 [ 1135.823624][T18649] ? may_open+0x1f6/0x420 [ 1135.827967][T18649] path_openat+0x1baa/0x2750 [ 1135.832584][T18649] ? path_lookupat+0x840/0x840 [ 1135.837374][T18649] do_filp_open+0x1ba/0x410 [ 1135.841891][T18649] ? may_open_dev+0xf0/0xf0 [ 1135.846407][T18649] ? find_held_lock+0x2d/0x110 [ 1135.851204][T18649] ? _raw_spin_unlock+0x28/0x40 [ 1135.856076][T18649] ? alloc_fd+0x2e4/0x750 [ 1135.860441][T18649] do_sys_openat2+0x16d/0x4c0 [ 1135.865139][T18649] ? build_open_flags+0x720/0x720 [ 1135.870196][T18649] __x64_sys_openat+0x143/0x1f0 [ 1135.875068][T18649] ? __ia32_sys_open+0x1c0/0x1c0 [ 1135.880033][T18649] ? ksys_write+0x1a3/0x250 [ 1135.884551][T18649] ? syscall_enter_from_user_mode+0x26/0x80 [ 1135.890464][T18649] do_syscall_64+0x39/0xb0 [ 1135.894899][T18649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1135.900808][T18649] RIP: 0033:0x7f11ea03e2f4 [ 1135.905237][T18649] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1135.924863][T18649] RSP: 002b:00007f11eae63ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1135.933288][T18649] RAX: ffffffffffffffda RBX: 00007f11ea1abf80 RCX: 00007f11ea03e2f4 [ 1135.941271][T18649] RDX: 0000000000000002 RSI: 00007f11eae63d40 RDI: 00000000ffffff9c [ 1135.949246][T18649] RBP: 00007f11eae63d40 R08: 0000000000000000 R09: 000000000000000f [ 1135.957225][T18649] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1135.965200][T18649] R13: 00007ffc08f5a13f R14: 00007f11eae64300 R15: 0000000000022000 [ 1135.973194][T18649] [ 1135.981644][T18649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1136.041581][ T5212] usb 5-1: USB disconnect, device number 41 [ 1136.163243][ T5164] usb 3-1: USB disconnect, device number 60 [ 1136.163381][ T5169] usb 2-1: USB disconnect, device number 3 [ 1136.175590][ T5176] usb 1-1: USB disconnect, device number 86 06:17:55 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 7) 06:17:55 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 10) 06:17:55 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:17:55 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r0, 0x800) lseek(r0, 0x20400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xe6, &(0x7f0000000700)="c1f7183802e7df07f30158a4e731808c45576e196424b19fd5da584cbd31a9e47db68400dee73b0e984ed28aff8434c4fabc7f2c62eea30408ce5a58ab4817e100eb1a02c111ea3820455fdca395e2783be294160b8212aa845b3fa9632959c4c73e3d76d414a3ada1f01ef3be48b43fb2e291cef24f1929dc1c8eb39fc837834d857eb213d45522325babb36af581025d23d2aa671cfcf1f03508f2023a00f4f2c638967cc352ec87e749472725721b0133c8cf7447b5ecb3979048465845e2382d873b91def81c068fae3e3da0b64ce5cc82de03765dfbbb6f9f36d401b318c03c1f1bef6d"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x4) r2 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) openat$cgroup_type(r2, &(0x7f0000000540), 0x2, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x6e) readv(r6, &(0x7f0000000680)=[{&(0x7f00000001c0)}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/120, 0x78}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/224, 0xe0}], 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ftruncate(r5, 0x36d) 06:17:55 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 8) 06:17:55 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) [ 1136.621603][T18680] FAULT_INJECTION: forcing a failure. [ 1136.621603][T18680] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.671965][T18680] CPU: 1 PID: 18680 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1136.683109][T18680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1136.683127][T18680] Call Trace: [ 1136.683135][T18680] [ 1136.683147][T18680] dump_stack_lvl+0x136/0x150 [ 1136.683193][T18680] should_fail_ex+0x4a3/0x5b0 [ 1136.708846][T18680] should_failslab+0x9/0x20 [ 1136.713382][T18680] kmem_cache_alloc+0x63/0x3b0 [ 1136.718180][T18680] jbd2__journal_start+0x18a/0x6b0 [ 1136.723307][T18680] __ext4_journal_start_sb+0x411/0x5d0 [ 1136.728815][T18680] ? ext4_dirty_inode+0xa5/0x130 [ 1136.733769][T18680] ? ext4_setattr+0x26c0/0x26c0 [ 1136.738647][T18680] ext4_dirty_inode+0xa5/0x130 [ 1136.743443][T18680] ? rcu_is_watching+0x12/0xb0 [ 1136.748251][T18680] __mark_inode_dirty+0x1e0/0xd60 [ 1136.753310][T18680] ? folio_flags.constprop.0+0x53/0x150 [ 1136.758890][T18680] generic_write_end+0x354/0x440 [ 1136.763840][T18680] ext4_da_write_end+0x172/0x8e0 [ 1136.768810][T18680] generic_perform_write+0x316/0x570 [ 1136.774110][T18680] ? generic_file_readonly_mmap+0x180/0x180 [ 1136.780027][T18680] ? iunique+0x370/0x370 [ 1136.784297][T18680] ext4_buffered_write_iter+0x15b/0x460 [ 1136.789860][T18680] ext4_file_write_iter+0xbe0/0x1740 [ 1136.795157][T18680] ? aa_file_perm+0x592/0x1250 [ 1136.799933][T18680] ? iter_file_splice_write+0x16c/0xc80 [ 1136.805505][T18680] ? kasan_save_stack+0x32/0x40 [ 1136.810381][T18680] ? kasan_set_track+0x25/0x30 [ 1136.815173][T18680] ? ext4_file_mmap+0x6c0/0x6c0 [ 1136.820030][T18680] ? do_sendfile+0xb19/0x12c0 [ 1136.824740][T18680] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1136.830139][T18680] ? do_syscall_64+0x39/0xb0 [ 1136.834748][T18680] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1136.840857][T18680] do_iter_readv_writev+0x20b/0x3b0 [ 1136.846092][T18680] ? generic_copy_file_range+0x1d0/0x1d0 [ 1136.851750][T18680] ? bpf_lsm_file_permission+0x9/0x10 [ 1136.857155][T18680] ? security_file_permission+0xaf/0xd0 [ 1136.862726][T18680] do_iter_write+0x185/0x7e0 [ 1136.867349][T18680] vfs_iter_write+0x74/0xa0 [ 1136.871897][T18680] iter_file_splice_write+0x745/0xc80 [ 1136.877303][T18680] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1136.883494][T18680] ? generic_file_splice_read+0x139/0x1b0 [ 1136.889235][T18680] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1136.895415][T18680] direct_splice_actor+0x114/0x180 [ 1136.900549][T18680] splice_direct_to_actor+0x335/0x8a0 [ 1136.905970][T18680] ? do_splice_direct+0x280/0x280 [ 1136.911021][T18680] ? folio_flags.constprop.0+0x150/0x150 [ 1136.916672][T18680] ? bpf_lsm_file_permission+0x9/0x10 [ 1136.922062][T18680] ? security_file_permission+0xaf/0xd0 [ 1136.927641][T18680] do_splice_direct+0x1ab/0x280 [ 1136.932513][T18680] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1136.938103][T18680] do_sendfile+0xb19/0x12c0 [ 1136.942634][T18680] ? vfs_iocb_iter_write+0x480/0x480 [ 1136.947968][T18680] __x64_sys_sendfile64+0x1d0/0x210 [ 1136.953177][T18680] ? ksys_write+0x1a3/0x250 [ 1136.957702][T18680] ? __ia32_sys_sendfile+0x220/0x220 [ 1136.963002][T18680] ? syscall_enter_from_user_mode+0x26/0x80 [ 1136.968939][T18680] do_syscall_64+0x39/0xb0 [ 1136.973388][T18680] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1136.979297][T18680] RIP: 0033:0x7f963c08c169 [ 1136.983720][T18680] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1137.003347][T18680] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1137.011782][T18680] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 06:17:55 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0) [ 1137.019775][T18680] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1137.027751][T18680] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.035745][T18680] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000002 [ 1137.043751][T18680] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1137.051759][T18680] 06:17:56 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 11) [ 1137.133281][ T5169] usb 5-1: new high-speed USB device number 42 using dummy_hcd 06:17:56 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x40000}], 0x1, 0x0) [ 1137.214051][ T5166] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1137.217228][T18694] FAULT_INJECTION: forcing a failure. [ 1137.217228][T18694] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.241397][ T5212] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1137.250204][T18694] CPU: 1 PID: 18694 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1137.260138][T18694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1137.270213][T18694] Call Trace: [ 1137.273516][T18694] [ 1137.276470][T18694] dump_stack_lvl+0x136/0x150 [ 1137.281197][T18694] should_fail_ex+0x4a3/0x5b0 [ 1137.285925][T18694] should_failslab+0x9/0x20 [ 1137.290460][T18694] __kmem_cache_alloc_node+0x5b/0x320 [ 1137.295876][T18694] ? iter_file_splice_write+0x16c/0xc80 [ 1137.301474][T18694] ? iter_file_splice_write+0x16c/0xc80 [ 1137.307075][T18694] __kmalloc+0x4e/0x190 [ 1137.311270][T18694] iter_file_splice_write+0x16c/0xc80 [ 1137.316702][T18694] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1137.322921][T18694] ? generic_file_splice_read+0x139/0x1b0 [ 1137.328683][T18694] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1137.334882][T18694] direct_splice_actor+0x114/0x180 [ 1137.340037][T18694] splice_direct_to_actor+0x335/0x8a0 [ 1137.345458][T18694] ? do_splice_direct+0x280/0x280 [ 1137.350574][T18694] ? folio_flags.constprop.0+0x150/0x150 [ 1137.356275][T18694] ? bpf_lsm_file_permission+0x9/0x10 06:17:56 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x1, 0x0) 06:17:56 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xffffff7f}], 0x1, 0x0) [ 1137.361687][T18694] ? security_file_permission+0xaf/0xd0 [ 1137.367286][T18694] do_splice_direct+0x1ab/0x280 [ 1137.372191][T18694] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1137.373110][ T5169] usb 5-1: Using ep0 maxpacket: 8 [ 1137.377782][T18694] do_sendfile+0xb19/0x12c0 [ 1137.377836][T18694] ? vfs_iocb_iter_write+0x480/0x480 [ 1137.382916][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1137.387335][T18694] __x64_sys_sendfile64+0x1d0/0x210 [ 1137.387366][T18694] ? ksys_write+0x1a3/0x250 06:17:56 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0) [ 1137.387390][T18694] ? __ia32_sys_sendfile+0x220/0x220 [ 1137.415495][T18694] ? syscall_enter_from_user_mode+0x26/0x80 [ 1137.421434][T18694] do_syscall_64+0x39/0xb0 [ 1137.425903][T18694] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1137.431838][T18694] RIP: 0033:0x7f963c08c169 [ 1137.436277][T18694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1137.455911][T18694] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1137.463038][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1137.464335][T18694] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1137.464356][T18694] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1137.464373][T18694] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.464391][T18694] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000002 [ 1137.464408][T18694] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1137.464441][T18694] [ 1137.514298][ T5169] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.527936][ T5169] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1137.561185][ T5169] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.583285][ T5166] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.593543][ T5166] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1137.602424][ T5166] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.643183][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1137.653338][ T5169] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1137.662409][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1137.672559][ T5169] usb 5-1: SerialNumber: syz [ 1137.703652][ T5166] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1137.717370][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1137.726691][ T5169] hub 5-1:1.0: bad descriptor, ignoring hub [ 1137.732624][ T5169] hub: probe of 5-1:1.0 failed with error -5 [ 1137.743919][ T5166] usb 3-1: SerialNumber: syz [ 1137.744599][ T5212] usb 1-1: Using ep0 maxpacket: 8 [ 1137.763284][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.774646][ T5169] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1137.780587][ T5169] cdc_wdm 5-1:1.0: Unknown control protocol [ 1137.786970][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1137.798209][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.815093][ T5166] hub 3-1:1.0: bad descriptor, ignoring hub [ 1137.821035][ T5166] hub: probe of 3-1:1.0 failed with error -5 [ 1137.844592][ T5166] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1137.850515][ T5166] cdc_wdm 3-1:1.0: Unknown control protocol [ 1137.898440][ T5212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.908629][ T5212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1137.919804][ T5212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.923129][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1137.941511][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1137.944583][T18685] FAULT_INJECTION: forcing a failure. [ 1137.944583][T18685] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.949920][ T9] usb 2-1: SerialNumber: syz [ 1137.967988][T18685] CPU: 0 PID: 18685 Comm: syz-executor.4 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1137.977919][T18685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1137.987998][T18685] Call Trace: [ 1137.991300][T18685] [ 1137.994603][T18685] dump_stack_lvl+0x136/0x150 [ 1137.999351][T18685] should_fail_ex+0x4a3/0x5b0 [ 1138.004073][T18685] should_failslab+0x9/0x20 [ 1138.008613][T18685] __kmem_cache_alloc_node+0x5b/0x320 [ 1138.014028][T18685] ? usb_control_msg+0xbd/0x4a0 [ 1138.018923][T18685] kmalloc_trace+0x26/0xe0 [ 1138.023383][T18685] usb_control_msg+0xbd/0x4a0 [ 1138.028092][T18685] ? usb_start_wait_urb+0x4b0/0x4b0 [ 1138.033318][T18685] hub_ext_port_status+0x112/0x4b0 [ 1138.038467][T18685] hub_activate+0x851/0x1c10 [ 1138.043089][T18685] ? hub_port_logical_disconnect+0xd0/0xd0 [ 1138.048917][T18685] ? lock_downgrade+0x690/0x690 [ 1138.053792][T18685] ? usbfs_notify_resume+0x25/0xf0 [ 1138.058921][T18685] hub_resume+0xaa/0x3e0 [ 1138.063185][T18685] ? wait_for_completion_io_timeout+0x20/0x20 [ 1138.069264][T18685] ? hub_reset_resume+0x80/0x80 [ 1138.074141][T18685] ? usb_hcd_get_frame_number+0xf0/0xf0 [ 1138.079707][T18685] ? unwind_get_return_address+0x55/0xa0 [ 1138.085359][T18685] usb_resume_interface.part.0.isra.0+0x271/0x390 [ 1138.091813][T18685] usb_resume_both+0x2a7/0x8d0 [ 1138.096609][T18685] ? usb_resume_interface.part.0.isra.0+0x390/0x390 [ 1138.103214][T18685] ? mark_held_locks+0x9f/0xe0 [ 1138.107994][T18685] ? _raw_spin_unlock_irq+0x23/0x50 [ 1138.113208][T18685] ? usb_runtime_suspend+0x120/0x120 [ 1138.118526][T18685] __rpm_callback+0xc9/0x330 [ 1138.123181][T18685] ? usb_runtime_suspend+0x120/0x120 [ 1138.128499][T18685] rpm_callback+0x1e3/0x230 [ 1138.133035][T18685] ? usb_runtime_suspend+0x120/0x120 [ 1138.138356][T18685] rpm_resume+0xf3f/0x1aa0 [ 1138.142804][T18685] ? rpm_callback+0x230/0x230 [ 1138.147501][T18685] ? rcu_is_watching+0x12/0xb0 [ 1138.152287][T18685] ? do_raw_spin_lock+0x124/0x2b0 [ 1138.157332][T18685] ? spin_bug+0x1c0/0x1c0 [ 1138.161679][T18685] ? lock_acquire+0x32/0xc0 [ 1138.166200][T18685] ? rpm_resume+0x6e5/0x1aa0 [ 1138.170815][T18685] rpm_resume+0x7c6/0x1aa0 [ 1138.175272][T18685] ? rpm_callback+0x230/0x230 [ 1138.179976][T18685] ? rcu_is_watching+0x12/0xb0 [ 1138.184771][T18685] ? do_raw_spin_lock+0x124/0x2b0 [ 1138.189814][T18685] ? spin_bug+0x1c0/0x1c0 [ 1138.194172][T18685] ? lock_acquire+0x32/0xc0 [ 1138.198694][T18685] ? rpm_resume+0x6e5/0x1aa0 [ 1138.203309][T18685] rpm_resume+0x7c6/0x1aa0 [ 1138.207777][T18685] ? rpm_callback+0x230/0x230 [ 1138.212469][T18685] ? do_raw_spin_lock+0x124/0x2b0 [ 1138.217511][T18685] ? spin_bug+0x1c0/0x1c0 [ 1138.221883][T18685] ? __pm_runtime_resume+0xad/0x180 [ 1138.227097][T18685] ? lock_acquire+0x32/0xc0 [ 1138.231626][T18685] ? __pm_runtime_resume+0xad/0x180 [ 1138.236884][T18685] __pm_runtime_resume+0xbb/0x180 [ 1138.241931][T18685] usb_autopm_get_interface+0x1f/0x60 [ 1138.247336][T18685] wdm_open+0x250/0x630 [ 1138.251510][T18685] ? wdm_suspend+0x4f0/0x4f0 [ 1138.256128][T18685] usb_open+0x208/0x2e0 [ 1138.260305][T18685] ? usb_devnode+0xa0/0xa0 [ 1138.264739][T18685] chrdev_open+0x26a/0x770 [ 1138.269175][T18685] ? __unregister_chrdev+0x110/0x110 [ 1138.274478][T18685] ? fsnotify_perm.part.0+0x221/0x610 [ 1138.279871][T18685] do_dentry_open+0x6cc/0x13f0 [ 1138.284658][T18685] ? __unregister_chrdev+0x110/0x110 [ 1138.289963][T18685] ? may_open+0x1f6/0x420 [ 1138.294310][T18685] path_openat+0x1baa/0x2750 [ 1138.298925][T18685] ? path_lookupat+0x840/0x840 [ 1138.303722][T18685] do_filp_open+0x1ba/0x410 [ 1138.308279][T18685] ? may_open_dev+0xf0/0xf0 [ 1138.312799][T18685] ? find_held_lock+0x2d/0x110 [ 1138.317607][T18685] ? _raw_spin_unlock+0x28/0x40 [ 1138.322487][T18685] ? alloc_fd+0x2e4/0x750 [ 1138.326854][T18685] do_sys_openat2+0x16d/0x4c0 [ 1138.331553][T18685] ? build_open_flags+0x720/0x720 [ 1138.336610][T18685] __x64_sys_openat+0x143/0x1f0 [ 1138.341485][T18685] ? __ia32_sys_open+0x1c0/0x1c0 [ 1138.346440][T18685] ? ksys_write+0x1a3/0x250 [ 1138.350955][T18685] ? syscall_enter_from_user_mode+0x26/0x80 [ 1138.356870][T18685] do_syscall_64+0x39/0xb0 [ 1138.361305][T18685] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1138.367212][T18685] RIP: 0033:0x7fe7d683e2f4 [ 1138.371635][T18685] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1138.391265][T18685] RSP: 002b:00007fe7d7679ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1138.399693][T18685] RAX: ffffffffffffffda RBX: 00007fe7d69abf80 RCX: 00007fe7d683e2f4 [ 1138.407686][T18685] RDX: 0000000000000002 RSI: 00007fe7d7679d40 RDI: 00000000ffffff9c [ 1138.415667][T18685] RBP: 00007fe7d7679d40 R08: 0000000000000000 R09: 000000000000000f [ 1138.423642][T18685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1138.431628][T18685] R13: 00007ffd33e3417f R14: 00007fe7d767a300 R15: 0000000000022000 [ 1138.439639][T18685] [ 1138.463278][T18685] hub 5-0:1.0: hub_ext_port_status failed (err = -12) [ 1138.464388][T18681] FAULT_INJECTION: forcing a failure. [ 1138.464388][T18681] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.483345][ T5212] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1138.492707][ T5212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1138.494973][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1138.501407][ T5212] usb 1-1: SerialNumber: syz [ 1138.521701][T18681] CPU: 0 PID: 18681 Comm: syz-executor.2 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1138.531664][T18681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1138.541746][T18681] Call Trace: [ 1138.545047][T18681] [ 1138.547989][T18681] dump_stack_lvl+0x136/0x150 [ 1138.552682][T18681] should_fail_ex+0x4a3/0x5b0 [ 1138.557378][T18681] should_failslab+0x9/0x20 [ 1138.561909][T18681] kmem_cache_alloc+0x63/0x3b0 [ 1138.566705][T18681] ? lock_downgrade+0x690/0x690 [ 1138.571563][T18681] getname_flags.part.0+0x50/0x4f0 [ 1138.576699][T18681] getname+0x92/0xd0 [ 1138.580635][T18681] do_sys_openat2+0xf5/0x4c0 [ 1138.585279][T18681] ? build_open_flags+0x720/0x720 [ 1138.590313][T18681] __x64_sys_openat+0x143/0x1f0 [ 1138.595182][T18681] ? __ia32_sys_open+0x1c0/0x1c0 [ 1138.600125][T18681] ? ksys_write+0x1a3/0x250 [ 1138.604637][T18681] ? syscall_enter_from_user_mode+0x26/0x80 [ 1138.610588][T18681] do_syscall_64+0x39/0xb0 [ 1138.615049][T18681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1138.620969][T18681] RIP: 0033:0x7f668a83e2f4 [ 1138.624334][ T5212] hub 1-1:1.0: bad descriptor, ignoring hub [ 1138.625372][T18681] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1138.632313][ T5212] hub: probe of 1-1:1.0 failed with error -5 [ 1138.650829][T18681] RSP: 002b:00007f668b555ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1138.650856][T18681] RAX: ffffffffffffffda RBX: 00007f668a9abf80 RCX: 00007f668a83e2f4 [ 1138.650874][T18681] RDX: 0000000000000002 RSI: 00007f668b555d40 RDI: 00000000ffffff9c [ 1138.650892][T18681] RBP: 00007f668b555d40 R08: 0000000000000000 R09: 000000000000000f [ 1138.689223][T18681] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1138.693410][ T5212] cdc_wdm 1-1:1.0: cdc-wdm2: USB WDM device [ 1138.697194][T18681] R13: 00007ffe75988eef R14: 00007f668b556300 R15: 0000000000022000 [ 1138.697233][T18681] [ 1138.703211][ T9] hub: probe of 2-1:1.0 failed with error -5 [ 1138.721242][ T9] cdc_wdm 2-1:1.0: cdc-wdm3: USB WDM device [ 1138.723043][ T5212] cdc_wdm 1-1:1.0: Unknown control protocol [ 1138.730771][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1138.763152][ T5164] usb 5-1: Failed to suspend device, error -71 [ 1138.793108][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1138.799732][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1138.813038][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1138.819654][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1138.833055][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1138.839686][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1138.853065][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1138.859702][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1138.862632][T18684] FAULT_INJECTION: forcing a failure. [ 1138.862632][T18684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.865819][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1138.879753][T18684] CPU: 1 PID: 18684 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1138.897293][T18684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1138.907352][T18684] Call Trace: [ 1138.910644][T18684] [ 1138.913605][T18684] dump_stack_lvl+0x136/0x150 [ 1138.918319][T18684] should_fail_ex+0x4a3/0x5b0 [ 1138.923011][T18684] _copy_from_user+0x30/0x190 [ 1138.927748][T18684] kstrtouint_from_user+0xac/0x190 [ 1138.932897][T18684] ? kstrtouint+0x120/0x120 [ 1138.937401][T18684] ? lock_sync+0x190/0x190 [ 1138.941825][T18684] proc_fail_nth_write+0x7d/0x220 [ 1138.946860][T18684] ? proc_task_getattr+0x1f0/0x1f0 [ 1138.952015][T18684] vfs_write+0x30d/0xe40 [ 1138.956276][T18684] ? proc_task_getattr+0x1f0/0x1f0 [ 1138.961388][T18684] ? kernel_write+0x670/0x670 [ 1138.966067][T18684] ? receive_fd+0x110/0x110 [ 1138.970599][T18684] ? __fget_files+0x26a/0x480 [ 1138.975288][T18684] ksys_write+0x12b/0x250 [ 1138.979643][T18684] ? __ia32_sys_read+0xb0/0xb0 [ 1138.984420][T18684] ? syscall_enter_from_user_mode+0x26/0x80 [ 1138.990338][T18684] do_syscall_64+0x39/0xb0 [ 1138.995190][T18684] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1139.001081][T18684] RIP: 0033:0x7f11ea03deef [ 1139.005496][T18684] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1139.025133][T18684] RSP: 002b:00007f11eae64160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1139.033594][T18684] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f11ea03deef [ 1139.041594][T18684] RDX: 0000000000000001 RSI: 00007f11eae641e0 RDI: 0000000000000008 [ 1139.049577][T18684] RBP: 00007f11eae641d0 R08: 0000000000000000 R09: 000000000000000f [ 1139.057561][T18684] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1139.065540][T18684] R13: 00007ffc08f5a13f R14: 00007f11eae64300 R15: 0000000000022000 [ 1139.073554][T18684] [ 1139.082285][ T2618] usb 3-1: USB disconnect, device number 61 [ 1139.113455][ T5164] usb 5-1: Failed to suspend device, error -71 [ 1139.223332][ T2618] usb 1-1: USB disconnect, device number 87 06:17:58 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 8) 06:17:58 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 06:17:58 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 12) [ 1139.526221][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1139.526238][ T27] audit: type=1804 audit(1681798678.389:4277): pid=18705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/794/bus" dev="sda1" ino=1169 res=1 errno=0 [ 1139.602414][ T27] audit: type=1804 audit(1681798678.429:4278): pid=18705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/794/bus" dev="sda1" ino=1169 res=1 errno=0 06:17:58 executing program 1: ftruncate(0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) (async) ftruncate(r0, 0x800) lseek(r0, 0x20400, 0x0) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xe6, &(0x7f0000000700)="c1f7183802e7df07f30158a4e731808c45576e196424b19fd5da584cbd31a9e47db68400dee73b0e984ed28aff8434c4fabc7f2c62eea30408ce5a58ab4817e100eb1a02c111ea3820455fdca395e2783be294160b8212aa845b3fa9632959c4c73e3d76d414a3ada1f01ef3be48b43fb2e291cef24f1929dc1c8eb39fc837834d857eb213d45522325babb36af581025d23d2aa671cfcf1f03508f2023a00f4f2c638967cc352ec87e749472725721b0133c8cf7447b5ecb3979048465845e2382d873b91def81c068fae3e3da0b64ce5cc82de03765dfbbb6f9f36d401b318c03c1f1bef6d"}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) (async) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x4) r2 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) (async) ftruncate(r3, 0x800) (async) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r4, 0x0, 0x1dd03) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000540), 0x2, 0x0) (async) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x6e) readv(r6, &(0x7f0000000680)=[{&(0x7f00000001c0)}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/120, 0x78}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/224, 0xe0}], 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ftruncate(r5, 0x36d) 06:17:58 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:17:58 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 2) 06:17:58 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 13) 06:17:58 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) [ 1139.810217][ T27] audit: type=1804 audit(1681798678.669:4279): pid=18714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/795/bus" dev="sda1" ino=1169 res=1 errno=0 [ 1139.815009][T18714] FAULT_INJECTION: forcing a failure. [ 1139.815009][T18714] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.886268][ T27] audit: type=1804 audit(1681798678.669:4280): pid=18714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/795/bus" dev="sda1" ino=1169 res=1 errno=0 [ 1139.896960][T18714] CPU: 1 PID: 18714 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1139.912580][ T5166] usb 2-1: USB disconnect, device number 4 [ 1139.921332][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1139.921349][T18714] Call Trace: [ 1139.921357][T18714] [ 1139.921367][T18714] dump_stack_lvl+0x136/0x150 [ 1139.921411][T18714] should_fail_ex+0x4a3/0x5b0 [ 1139.952854][T18714] should_failslab+0x9/0x20 [ 1139.957389][T18714] kmem_cache_alloc+0x63/0x3b0 [ 1139.962196][T18714] jbd2__journal_start+0x18a/0x6b0 [ 1139.967345][T18714] __ext4_journal_start_sb+0x411/0x5d0 [ 1139.972842][T18714] ? ext4_dirty_inode+0xa5/0x130 [ 1139.977813][T18714] ? ext4_setattr+0x26c0/0x26c0 [ 1139.982692][T18714] ext4_dirty_inode+0xa5/0x130 [ 1139.987476][T18714] ? rcu_is_watching+0x12/0xb0 [ 1139.992525][T18714] __mark_inode_dirty+0x1e0/0xd60 [ 1139.997568][T18714] ? folio_flags.constprop.0+0x53/0x150 [ 1140.003132][T18714] generic_write_end+0x354/0x440 [ 1140.008134][T18714] ext4_da_write_end+0x172/0x8e0 [ 1140.013100][T18714] generic_perform_write+0x316/0x570 [ 1140.018410][T18714] ? generic_file_readonly_mmap+0x180/0x180 [ 1140.024319][T18714] ? iunique+0x370/0x370 [ 1140.028590][T18714] ext4_buffered_write_iter+0x15b/0x460 [ 1140.034149][T18714] ext4_file_write_iter+0xbe0/0x1740 [ 1140.039442][T18714] ? aa_file_perm+0x592/0x1250 [ 1140.044220][T18714] ? iter_file_splice_write+0x16c/0xc80 [ 1140.049787][T18714] ? kasan_save_stack+0x32/0x40 [ 1140.054656][T18714] ? kasan_set_track+0x25/0x30 [ 1140.059440][T18714] ? ext4_file_mmap+0x6c0/0x6c0 [ 1140.064299][T18714] ? do_sendfile+0xb19/0x12c0 [ 1140.069006][T18714] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1140.074401][T18714] ? do_syscall_64+0x39/0xb0 [ 1140.079010][T18714] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1140.085100][T18714] ? mark_held_locks+0x9f/0xe0 [ 1140.089889][T18714] do_iter_readv_writev+0x20b/0x3b0 [ 1140.095545][T18714] ? generic_copy_file_range+0x1d0/0x1d0 [ 1140.101204][T18714] ? bpf_lsm_file_permission+0x9/0x10 [ 1140.106596][T18714] ? security_file_permission+0xaf/0xd0 [ 1140.112170][T18714] do_iter_write+0x185/0x7e0 [ 1140.116790][T18714] vfs_iter_write+0x74/0xa0 [ 1140.121322][T18714] iter_file_splice_write+0x745/0xc80 [ 1140.126731][T18714] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1140.132922][T18714] ? generic_file_splice_read+0x139/0x1b0 [ 1140.138665][T18714] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1140.144847][T18714] direct_splice_actor+0x114/0x180 [ 1140.149982][T18714] splice_direct_to_actor+0x335/0x8a0 [ 1140.155381][T18714] ? do_splice_direct+0x280/0x280 [ 1140.160449][T18714] ? folio_flags.constprop.0+0x150/0x150 [ 1140.166102][T18714] ? bpf_lsm_file_permission+0x9/0x10 [ 1140.171491][T18714] ? security_file_permission+0xaf/0xd0 [ 1140.177071][T18714] do_splice_direct+0x1ab/0x280 [ 1140.181944][T18714] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1140.187528][T18714] do_sendfile+0xb19/0x12c0 [ 1140.192410][T18714] ? vfs_iocb_iter_write+0x480/0x480 [ 1140.197730][T18714] __x64_sys_sendfile64+0x1d0/0x210 [ 1140.202938][T18714] ? ksys_write+0x1a3/0x250 [ 1140.207451][T18714] ? __ia32_sys_sendfile+0x220/0x220 [ 1140.212761][T18714] ? syscall_enter_from_user_mode+0x26/0x80 [ 1140.218684][T18714] do_syscall_64+0x39/0xb0 [ 1140.223121][T18714] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1140.229044][T18714] RIP: 0033:0x7f963c08c169 [ 1140.233470][T18714] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1140.253086][T18714] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1140.261509][T18714] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1140.269488][T18714] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1140.277464][T18714] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1140.285440][T18714] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000002 [ 1140.293418][T18714] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1140.301420][T18714] 06:17:59 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1000000) [ 1140.329699][ T27] audit: type=1804 audit(1681798678.669:4281): pid=18716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1222968027/syzkaller.QIhnyI/753/bus" dev="sda1" ino=1183 res=1 errno=0 06:17:59 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 14) [ 1140.431071][ T27] audit: type=1800 audit(1681798678.669:4282): pid=18716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 1140.463528][ T9] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 1140.478010][ T2618] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1140.494952][T18722] FAULT_INJECTION: forcing a failure. [ 1140.494952][T18722] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.503455][ T27] audit: type=1804 audit(1681798679.339:4283): pid=18722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/796/bus" dev="sda1" ino=1168 res=1 errno=0 [ 1140.515845][T18722] CPU: 0 PID: 18722 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1140.542649][T18722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1140.552728][T18722] Call Trace: [ 1140.554855][ T27] audit: type=1804 audit(1681798679.349:4284): pid=18722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3914328028/syzkaller.7iDsY1/796/bus" dev="sda1" ino=1168 res=1 errno=0 [ 1140.556007][T18722] [ 1140.556019][T18722] dump_stack_lvl+0x136/0x150 [ 1140.556064][T18722] should_fail_ex+0x4a3/0x5b0 [ 1140.593514][T18722] should_failslab+0x9/0x20 [ 1140.598031][T18722] kmem_cache_alloc+0x63/0x3b0 [ 1140.602819][T18722] jbd2__journal_start+0x18a/0x6b0 [ 1140.607951][T18722] __ext4_journal_start_sb+0x411/0x5d0 [ 1140.613428][T18722] ? ext4_dirty_inode+0xa5/0x130 [ 1140.618390][T18722] ? ext4_setattr+0x26c0/0x26c0 [ 1140.623256][T18722] ext4_dirty_inode+0xa5/0x130 [ 1140.628038][T18722] ? rcu_is_watching+0x12/0xb0 [ 1140.632825][T18722] __mark_inode_dirty+0x1e0/0xd60 [ 1140.637870][T18722] ? folio_flags.constprop.0+0x53/0x150 [ 1140.643433][T18722] generic_write_end+0x354/0x440 [ 1140.648389][T18722] ext4_da_write_end+0x172/0x8e0 [ 1140.653384][T18722] generic_perform_write+0x316/0x570 [ 1140.658695][T18722] ? generic_file_readonly_mmap+0x180/0x180 [ 1140.664605][T18722] ? iunique+0x370/0x370 [ 1140.668880][T18722] ext4_buffered_write_iter+0x15b/0x460 [ 1140.674457][T18722] ext4_file_write_iter+0xbe0/0x1740 [ 1140.679772][T18722] ? aa_file_perm+0x592/0x1250 [ 1140.684552][T18722] ? iter_file_splice_write+0x16c/0xc80 [ 1140.690128][T18722] ? kasan_save_stack+0x32/0x40 [ 1140.694997][T18722] ? kasan_set_track+0x25/0x30 [ 1140.699784][T18722] ? ext4_file_mmap+0x6c0/0x6c0 [ 1140.704644][T18722] ? do_sendfile+0xb19/0x12c0 [ 1140.709342][T18722] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1140.714754][T18722] ? do_syscall_64+0x39/0xb0 [ 1140.719360][T18722] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1140.725455][T18722] ? mode_strip_sgid+0x1c0/0x1c0 [ 1140.730416][T18722] do_iter_readv_writev+0x20b/0x3b0 [ 1140.735637][T18722] ? generic_copy_file_range+0x1d0/0x1d0 [ 1140.741296][T18722] ? bpf_lsm_file_permission+0x9/0x10 [ 1140.746684][T18722] ? security_file_permission+0xaf/0xd0 [ 1140.752256][T18722] do_iter_write+0x185/0x7e0 [ 1140.756878][T18722] vfs_iter_write+0x74/0xa0 [ 1140.761403][T18722] iter_file_splice_write+0x745/0xc80 [ 1140.766824][T18722] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1140.773021][T18722] ? generic_file_splice_read+0x139/0x1b0 [ 1140.778766][T18722] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1140.784954][T18722] direct_splice_actor+0x114/0x180 [ 1140.790102][T18722] splice_direct_to_actor+0x335/0x8a0 [ 1140.795852][T18722] ? do_splice_direct+0x280/0x280 [ 1140.800905][T18722] ? folio_flags.constprop.0+0x150/0x150 [ 1140.806571][T18722] ? bpf_lsm_file_permission+0x9/0x10 [ 1140.811970][T18722] ? security_file_permission+0xaf/0xd0 [ 1140.817542][T18722] do_splice_direct+0x1ab/0x280 [ 1140.822423][T18722] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1140.828002][T18722] do_sendfile+0xb19/0x12c0 [ 1140.832536][T18722] ? vfs_iocb_iter_write+0x480/0x480 [ 1140.837872][T18722] __x64_sys_sendfile64+0x1d0/0x210 [ 1140.843094][T18722] ? ksys_write+0x1a3/0x250 [ 1140.847624][T18722] ? __ia32_sys_sendfile+0x220/0x220 [ 1140.852923][T18722] ? syscall_enter_from_user_mode+0x26/0x80 [ 1140.858851][T18722] do_syscall_64+0x39/0xb0 [ 1140.863302][T18722] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1140.869221][T18722] RIP: 0033:0x7f963c08c169 [ 1140.873646][T18722] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1140.893266][T18722] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1140.901690][T18722] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1140.909670][T18722] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1140.917666][T18722] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 06:17:59 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xffffff7f) [ 1140.925641][T18722] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000002 [ 1140.933619][T18722] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1140.941612][T18722] 06:17:59 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r0, 0x800) lseek(r0, 0x20400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xe6, &(0x7f0000000700)="c1f7183802e7df07f30158a4e731808c45576e196424b19fd5da584cbd31a9e47db68400dee73b0e984ed28aff8434c4fabc7f2c62eea30408ce5a58ab4817e100eb1a02c111ea3820455fdca395e2783be294160b8212aa845b3fa9632959c4c73e3d76d414a3ada1f01ef3be48b43fb2e291cef24f1929dc1c8eb39fc837834d857eb213d45522325babb36af581025d23d2aa671cfcf1f03508f2023a00f4f2c638967cc352ec87e749472725721b0133c8cf7447b5ecb3979048465845e2382d873b91def81c068fae3e3da0b64ce5cc82de03765dfbbb6f9f36d401b318c03c1f1bef6d"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x4) (async) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x4) r2 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r4, 0x0, 0x1dd03) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) openat$cgroup_type(r2, &(0x7f0000000540), 0x2, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x6e) (async) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x6e) readv(r6, &(0x7f0000000680)=[{&(0x7f00000001c0)}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/120, 0x78}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/224, 0xe0}], 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ftruncate(r5, 0x36d) (async) ftruncate(r5, 0x36d) [ 1140.970987][ T27] audit: type=1804 audit(1681798679.829:4285): pid=18725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/616/bus" dev="sda1" ino=1157 res=1 errno=0 [ 1141.023102][ T5166] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1141.070229][ T27] audit: type=1804 audit(1681798679.909:4286): pid=18732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3527040244/syzkaller.6ZGxoR/617/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1141.123222][ T2618] usb 1-1: Using ep0 maxpacket: 8 [ 1141.163166][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1141.197043][T18733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.206605][T18733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.263243][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 1141.273316][ T2618] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.283566][ T2618] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1141.292484][ T2618] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.383160][ T5166] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.383769][ T2618] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1141.393462][ T5166] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1141.412504][ T2618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1141.412515][ T5166] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.426527][ T2618] usb 1-1: SerialNumber: syz [ 1141.463275][ T5164] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1141.494289][ T2618] hub 1-1:1.0: bad descriptor, ignoring hub [ 1141.501094][ T2618] hub: probe of 1-1:1.0 failed with error -5 [ 1141.503292][ T5166] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1141.508908][ T2618] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1141.522724][ T2618] cdc_wdm 1-1:1.0: Unknown control protocol [ 1141.522750][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1141.538579][T18708] FAULT_INJECTION: forcing a failure. [ 1141.538579][T18708] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.551454][T18708] CPU: 1 PID: 18708 Comm: syz-executor.4 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1141.561394][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1141.567079][ T5166] usb 3-1: SerialNumber: syz [ 1141.571467][T18708] Call Trace: [ 1141.571479][T18708] [ 1141.582313][T18708] dump_stack_lvl+0x136/0x150 [ 1141.587052][T18708] should_fail_ex+0x4a3/0x5b0 [ 1141.591776][T18708] should_failslab+0x9/0x20 [ 1141.596314][T18708] __kmem_cache_alloc_node+0x5b/0x320 [ 1141.601731][T18708] ? usb_alloc_urb+0xa4/0xb0 [ 1141.606348][T18708] ? usb_alloc_urb+0xa4/0xb0 [ 1141.610967][T18708] __kmalloc+0x4e/0x190 [ 1141.615156][T18708] usb_alloc_urb+0xa4/0xb0 [ 1141.619591][T18708] usb_control_msg+0x1cd/0x4a0 [ 1141.624367][T18708] ? usb_start_wait_urb+0x4b0/0x4b0 [ 1141.629591][T18708] hub_ext_port_status+0x112/0x4b0 [ 1141.634728][T18708] hub_activate+0x851/0x1c10 [ 1141.639352][T18708] ? hub_port_logical_disconnect+0xd0/0xd0 [ 1141.644107][ T5166] hub 3-1:1.0: bad descriptor, ignoring hub [ 1141.645155][T18708] ? lock_downgrade+0x690/0x690 [ 1141.651037][ T5166] hub: probe of 3-1:1.0 failed with error -5 [ 1141.655857][T18708] ? usbfs_notify_resume+0x25/0xf0 [ 1141.655897][T18708] hub_resume+0xaa/0x3e0 [ 1141.655935][T18708] ? wait_for_completion_io_timeout+0x20/0x20 [ 1141.655969][T18708] ? hub_reset_resume+0x80/0x80 [ 1141.682188][T18708] ? usb_hcd_get_frame_number+0xf0/0xf0 [ 1141.687736][T18708] ? unwind_get_return_address+0x55/0xa0 [ 1141.693562][T18708] usb_resume_interface.part.0.isra.0+0x271/0x390 [ 1141.700022][T18708] usb_resume_both+0x2a7/0x8d0 [ 1141.704833][T18708] ? usb_resume_interface.part.0.isra.0+0x390/0x390 [ 1141.711454][T18708] ? mark_held_locks+0x9f/0xe0 [ 1141.716219][T18708] ? _raw_spin_unlock_irq+0x23/0x50 [ 1141.721416][T18708] ? usb_runtime_suspend+0x120/0x120 [ 1141.726718][T18708] __rpm_callback+0xc9/0x330 [ 1141.731337][T18708] ? usb_runtime_suspend+0x120/0x120 [ 1141.736621][T18708] rpm_callback+0x1e3/0x230 [ 1141.741123][T18708] ? usb_runtime_suspend+0x120/0x120 [ 1141.746418][T18708] rpm_resume+0xf3f/0x1aa0 [ 1141.750884][T18708] ? rpm_callback+0x230/0x230 [ 1141.755565][T18708] ? rcu_is_watching+0x12/0xb0 [ 1141.760332][T18708] ? do_raw_spin_lock+0x124/0x2b0 [ 1141.765369][T18708] ? spin_bug+0x1c0/0x1c0 [ 1141.769735][T18708] ? lock_acquire+0x32/0xc0 [ 1141.774255][T18708] ? rpm_resume+0x6e5/0x1aa0 [ 1141.778894][T18708] rpm_resume+0x7c6/0x1aa0 [ 1141.783334][T18708] ? rpm_callback+0x230/0x230 [ 1141.788031][T18708] ? rcu_is_watching+0x12/0xb0 [ 1141.793067][T18708] ? do_raw_spin_lock+0x124/0x2b0 [ 1141.798119][T18708] ? spin_bug+0x1c0/0x1c0 [ 1141.802464][T18708] ? lock_acquire+0x32/0xc0 [ 1141.807011][T18708] ? rpm_resume+0x6e5/0x1aa0 [ 1141.811643][T18708] rpm_resume+0x7c6/0x1aa0 [ 1141.816084][T18708] ? rpm_callback+0x230/0x230 [ 1141.820763][T18708] ? do_raw_spin_lock+0x124/0x2b0 [ 1141.825807][T18708] ? spin_bug+0x1c0/0x1c0 [ 1141.830167][T18708] ? __pm_runtime_resume+0xad/0x180 [ 1141.835378][T18708] ? lock_acquire+0x32/0xc0 [ 1141.839912][T18708] ? __pm_runtime_resume+0xad/0x180 [ 1141.845133][T18708] __pm_runtime_resume+0xbb/0x180 [ 1141.849878][T18716] FAULT_INJECTION: forcing a failure. [ 1141.849878][T18716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1141.850177][T18708] usb_autopm_get_interface+0x1f/0x60 [ 1141.850218][T18708] wdm_open+0x250/0x630 [ 1141.872753][T18708] ? wdm_suspend+0x4f0/0x4f0 [ 1141.877373][T18708] usb_open+0x208/0x2e0 [ 1141.881572][T18708] ? usb_devnode+0xa0/0xa0 [ 1141.886025][T18708] chrdev_open+0x26a/0x770 [ 1141.890530][T18708] ? __unregister_chrdev+0x110/0x110 [ 1141.895842][T18708] ? fsnotify_perm.part.0+0x221/0x610 [ 1141.901247][T18708] do_dentry_open+0x6cc/0x13f0 [ 1141.906048][T18708] ? __unregister_chrdev+0x110/0x110 [ 1141.911376][T18708] ? may_open+0x1f6/0x420 [ 1141.915744][T18708] path_openat+0x1baa/0x2750 [ 1141.920370][T18708] ? path_lookupat+0x840/0x840 [ 1141.925173][T18708] do_filp_open+0x1ba/0x410 [ 1141.929706][T18708] ? may_open_dev+0xf0/0xf0 [ 1141.934230][T18708] ? find_held_lock+0x2d/0x110 [ 1141.939037][T18708] ? _raw_spin_unlock+0x28/0x40 [ 1141.943918][T18708] ? alloc_fd+0x2e4/0x750 [ 1141.948294][T18708] do_sys_openat2+0x16d/0x4c0 [ 1141.953008][T18708] ? build_open_flags+0x720/0x720 [ 1141.958075][T18708] __x64_sys_openat+0x143/0x1f0 [ 1141.962960][T18708] ? __ia32_sys_open+0x1c0/0x1c0 [ 1141.967934][T18708] ? ksys_write+0x1a3/0x250 [ 1141.972477][T18708] ? syscall_enter_from_user_mode+0x26/0x80 [ 1141.978401][T18708] do_syscall_64+0x39/0xb0 [ 1141.982844][T18708] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1141.988776][T18708] RIP: 0033:0x7fe7d683e2f4 [ 1141.993418][T18708] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1142.013049][T18708] RSP: 002b:00007fe7d7679ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1142.021485][T18708] RAX: ffffffffffffffda RBX: 00007fe7d69abf80 RCX: 00007fe7d683e2f4 [ 1142.029474][T18708] RDX: 0000000000000002 RSI: 00007fe7d7679d40 RDI: 00000000ffffff9c [ 1142.037461][T18708] RBP: 00007fe7d7679d40 R08: 0000000000000000 R09: 000000000000000f [ 1142.045452][T18708] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1142.053444][T18708] R13: 00007ffd33e3417f R14: 00007fe7d767a300 R15: 0000000000022000 [ 1142.061459][T18708] [ 1142.072537][T18716] CPU: 0 PID: 18716 Comm: syz-executor.2 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1142.082472][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1142.083755][T18708] hub 5-0:1.0: hub_ext_port_status failed (err = -12) [ 1142.092529][T18716] Call Trace: [ 1142.092538][T18716] [ 1142.092548][T18716] dump_stack_lvl+0x136/0x150 [ 1142.092593][T18716] should_fail_ex+0x4a3/0x5b0 [ 1142.114906][T18716] strncpy_from_user+0x38/0x400 [ 1142.119805][T18716] getname_flags.part.0+0x95/0x4f0 [ 1142.124957][T18716] getname+0x92/0xd0 [ 1142.128887][T18716] do_sys_openat2+0xf5/0x4c0 [ 1142.133506][T18716] ? build_open_flags+0x720/0x720 [ 1142.138552][T18716] __x64_sys_openat+0x143/0x1f0 [ 1142.143413][T18716] ? __ia32_sys_open+0x1c0/0x1c0 [ 1142.148350][T18716] ? ksys_write+0x1a3/0x250 [ 1142.152846][T18716] ? syscall_enter_from_user_mode+0x26/0x80 [ 1142.158766][T18716] do_syscall_64+0x39/0xb0 [ 1142.163256][T18716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1142.169172][T18716] RIP: 0033:0x7f668a83e2f4 [ 1142.173580][T18716] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1142.193187][T18716] RSP: 002b:00007f668b555ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1142.201595][T18716] RAX: ffffffffffffffda RBX: 00007f668a9abf80 RCX: 00007f668a83e2f4 [ 1142.209595][T18716] RDX: 0000000000000002 RSI: 00007f668b555d40 RDI: 00000000ffffff9c [ 1142.217571][T18716] RBP: 00007f668b555d40 R08: 0000000000000000 R09: 000000000000000f [ 1142.225556][T18716] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1142.233520][T18716] R13: 00007ffe75988eef R14: 00007f668b556300 R15: 0000000000022000 [ 1142.241510][T18716] [ 1142.254286][ T5164] usb 2-1: Using ep0 maxpacket: 8 [ 1142.263317][ T5166] cdc_wdm 3-1:1.0: cdc-wdm2: USB WDM device [ 1142.269251][ T5166] cdc_wdm 3-1:1.0: Unknown control protocol [ 1142.314086][ T5166] usb 3-1: USB disconnect, device number 62 [ 1142.333267][ T5212] usb 5-1: Failed to suspend device, error -71 [ 1142.393193][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.403338][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1142.412215][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.464090][ T5212] usb 1-1: USB disconnect, device number 88 [ 1142.503251][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1142.512290][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1142.520965][ T5164] usb 2-1: SerialNumber: syz [ 1142.527575][T10141] usb 5-1: USB disconnect, device number 42 [ 1142.574199][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 1142.580148][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 1142.590222][ T5164] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1142.596935][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol 06:18:01 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/128, &(0x7f0000000200)=0x80) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 9) 06:18:01 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x840) lseek(r0, 0x0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46900) ftruncate(r1, 0x800) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1dd03) (fail_nth: 15) 06:18:01 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000000000) 06:18:01 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd03) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 3) 06:18:01 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x20400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0xf00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000000002dc0a32e2f66"]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc1) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1dd03) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1142.923321][T18742] FAULT_INJECTION: forcing a failure. [ 1142.923321][T18742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1142.952614][T18742] CPU: 1 PID: 18742 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1142.962564][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1142.972645][T18742] Call Trace: [ 1142.975943][T18742] [ 1142.978883][T18742] dump_stack_lvl+0x136/0x150 [ 1142.983580][T18742] should_fail_ex+0x4a3/0x5b0 [ 1142.988279][T18742] prepare_alloc_pages+0x178/0x570 [ 1142.993418][T18742] __alloc_pages+0x149/0x4a0 [ 1142.998040][T18742] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1143.004824][T18742] ? filemap_get_entry+0x203/0x430 [ 1143.009964][T18742] ? lock_downgrade+0x690/0x690 [ 1143.014840][T18742] alloc_pages+0x1aa/0x270 [ 1143.019287][T18742] folio_alloc+0x20/0x70 [ 1143.023552][T18742] filemap_alloc_folio+0x3ad/0x450 [ 1143.028689][T18742] ? trace_mm_filemap_delete_from_page_cache+0x190/0x190 [ 1143.035737][T18742] __filemap_get_folio+0x2a6/0x990 [ 1143.040902][T18742] ext4_da_write_begin+0x466/0x8b0 [ 1143.046036][T18742] ? ext4_write_begin+0x1020/0x1020 [ 1143.051263][T18742] ? balance_dirty_pages_ratelimited_flags+0x8f/0x11d0 [ 1143.058133][T18742] generic_perform_write+0x256/0x570 [ 1143.063489][T18742] ? generic_file_readonly_mmap+0x180/0x180 [ 1143.069401][T18742] ? iunique+0x370/0x370 [ 1143.073666][T18742] ext4_buffered_write_iter+0x15b/0x460 [ 1143.079258][T18742] ext4_file_write_iter+0xbe0/0x1740 [ 1143.084552][T18742] ? aa_file_perm+0x592/0x1250 [ 1143.089335][T18742] ? iter_file_splice_write+0x16c/0xc80 [ 1143.095272][T18742] ? kasan_save_stack+0x32/0x40 [ 1143.100148][T18742] ? kasan_set_track+0x25/0x30 [ 1143.104931][T18742] ? ext4_file_mmap+0x6c0/0x6c0 [ 1143.109788][T18742] ? do_sendfile+0xb19/0x12c0 [ 1143.114485][T18742] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1143.119866][T18742] ? do_syscall_64+0x39/0xb0 [ 1143.124474][T18742] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1143.130558][T18742] ? mode_strip_sgid+0x1c0/0x1c0 [ 1143.135517][T18742] do_iter_readv_writev+0x20b/0x3b0 [ 1143.140736][T18742] ? generic_copy_file_range+0x1d0/0x1d0 [ 1143.146399][T18742] ? bpf_lsm_file_permission+0x9/0x10 [ 1143.151789][T18742] ? security_file_permission+0xaf/0xd0 [ 1143.157359][T18742] do_iter_write+0x185/0x7e0 [ 1143.161978][T18742] vfs_iter_write+0x74/0xa0 [ 1143.166501][T18742] iter_file_splice_write+0x745/0xc80 [ 1143.171907][T18742] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1143.178100][T18742] ? generic_file_splice_read+0x139/0x1b0 [ 1143.183842][T18742] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1143.190021][T18742] direct_splice_actor+0x114/0x180 [ 1143.195156][T18742] splice_direct_to_actor+0x335/0x8a0 [ 1143.200550][T18742] ? do_splice_direct+0x280/0x280 [ 1143.205600][T18742] ? folio_flags.constprop.0+0x150/0x150 [ 1143.211251][T18742] ? bpf_lsm_file_permission+0x9/0x10 [ 1143.216651][T18742] ? security_file_permission+0xaf/0xd0 [ 1143.222223][T18742] do_splice_direct+0x1ab/0x280 [ 1143.227096][T18742] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1143.232676][T18742] do_sendfile+0xb19/0x12c0 [ 1143.237237][T18742] ? vfs_iocb_iter_write+0x480/0x480 [ 1143.242554][T18742] __x64_sys_sendfile64+0x1d0/0x210 [ 1143.247766][T18742] ? ksys_write+0x1a3/0x250 [ 1143.252277][T18742] ? __ia32_sys_sendfile+0x220/0x220 [ 1143.257581][T18742] ? syscall_enter_from_user_mode+0x26/0x80 [ 1143.263497][T18742] do_syscall_64+0x39/0xb0 [ 1143.267942][T18742] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1143.273851][T18742] RIP: 0033:0x7f963c08c169 [ 1143.278278][T18742] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1143.297898][T18742] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1143.306325][T18742] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1143.314329][T18742] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1143.322317][T18742] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.330294][T18742] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000002 [ 1143.338298][T18742] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1143.346313][T18742] [ 1143.353799][T18742] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 1143.365564][T18742] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1143.373995][T18742] CPU: 0 PID: 18742 Comm: syz-executor.5 Not tainted 6.3.0-rc7-next-20230417-syzkaller #0 [ 1143.383909][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1143.393985][T18742] RIP: 0010:folio_wait_stable+0x23/0xe0 [ 1143.399558][T18742] Code: 00 00 00 0f 1f 40 00 f3 0f 1e fa 55 48 89 fd 53 e8 a2 92 d1 ff 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a4 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 1143.419210][T18742] RSP: 0018:ffffc9000316f488 EFLAGS: 00010203 [ 1143.425282][T18742] RAX: dffffc0000000000 RBX: ffff88803e265cb0 RCX: ffffc9000c002000 [ 1143.433257][T18742] RDX: 0000000000000001 RSI: ffffffff81b1f0ee RDI: 000000000000000c [ 1143.441232][T18742] RBP: fffffffffffffff4 R08: 0000000000000001 R09: ffffffff8c8eef13 [ 1143.449204][T18742] R10: fffffbfff191dde2 R11: 0000000000000000 R12: 0000000000000000 [ 1143.457198][T18742] R13: ffff88803e265ed8 R14: 0000000000002000 R15: ffff88803e265a50 [ 1143.465172][T18742] FS: 00007f963cd4d700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1143.474118][T18742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1143.480733][T18742] CR2: 00007f668b534110 CR3: 000000006ca4c000 CR4: 00000000003506f0 [ 1143.488722][T18742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1143.496690][T18742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1143.504661][T18742] Call Trace: [ 1143.507936][T18742] [ 1143.510865][T18742] ext4_da_write_begin+0x47f/0x8b0 [ 1143.515995][T18742] ? ext4_write_begin+0x1020/0x1020 [ 1143.521209][T18742] ? balance_dirty_pages_ratelimited_flags+0x8f/0x11d0 [ 1143.528067][T18742] generic_perform_write+0x256/0x570 [ 1143.533390][T18742] ? generic_file_readonly_mmap+0x180/0x180 [ 1143.539311][T18742] ? iunique+0x370/0x370 [ 1143.543569][T18742] ext4_buffered_write_iter+0x15b/0x460 [ 1143.549120][T18742] ext4_file_write_iter+0xbe0/0x1740 [ 1143.554436][T18742] ? aa_file_perm+0x592/0x1250 [ 1143.559208][T18742] ? iter_file_splice_write+0x16c/0xc80 [ 1143.564772][T18742] ? kasan_save_stack+0x32/0x40 [ 1143.569644][T18742] ? kasan_set_track+0x25/0x30 [ 1143.574445][T18742] ? ext4_file_mmap+0x6c0/0x6c0 [ 1143.579316][T18742] ? do_sendfile+0xb19/0x12c0 [ 1143.584006][T18742] ? __x64_sys_sendfile64+0x1d0/0x210 [ 1143.589386][T18742] ? do_syscall_64+0x39/0xb0 [ 1143.593988][T18742] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1143.600070][T18742] ? mode_strip_sgid+0x1c0/0x1c0 [ 1143.605028][T18742] do_iter_readv_writev+0x20b/0x3b0 [ 1143.610242][T18742] ? generic_copy_file_range+0x1d0/0x1d0 [ 1143.615893][T18742] ? bpf_lsm_file_permission+0x9/0x10 [ 1143.621276][T18742] ? security_file_permission+0xaf/0xd0 [ 1143.626842][T18742] do_iter_write+0x185/0x7e0 [ 1143.631470][T18742] vfs_iter_write+0x74/0xa0 [ 1143.635989][T18742] iter_file_splice_write+0x745/0xc80 [ 1143.641382][T18742] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1143.647579][T18742] ? generic_file_splice_read+0x139/0x1b0 [ 1143.653314][T18742] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 1143.659484][T18742] direct_splice_actor+0x114/0x180 [ 1143.664611][T18742] splice_direct_to_actor+0x335/0x8a0 [ 1143.669999][T18742] ? do_splice_direct+0x280/0x280 [ 1143.675066][T18742] ? folio_flags.constprop.0+0x150/0x150 [ 1143.680713][T18742] ? bpf_lsm_file_permission+0x9/0x10 [ 1143.686114][T18742] ? security_file_permission+0xaf/0xd0 [ 1143.691679][T18742] do_splice_direct+0x1ab/0x280 [ 1143.696548][T18742] ? splice_direct_to_actor+0x8a0/0x8a0 [ 1143.702115][T18742] do_sendfile+0xb19/0x12c0 [ 1143.706640][T18742] ? vfs_iocb_iter_write+0x480/0x480 [ 1143.711944][T18742] __x64_sys_sendfile64+0x1d0/0x210 [ 1143.717150][T18742] ? ksys_write+0x1a3/0x250 [ 1143.721654][T18742] ? __ia32_sys_sendfile+0x220/0x220 [ 1143.726945][T18742] ? syscall_enter_from_user_mode+0x26/0x80 [ 1143.732851][T18742] do_syscall_64+0x39/0xb0 [ 1143.737280][T18742] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1143.743182][T18742] RIP: 0033:0x7f963c08c169 [ 1143.747612][T18742] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1143.767224][T18742] RSP: 002b:00007f963cd4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 06:18:02 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100000000000000) 06:18:02 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xffffff7f00000000) [ 1143.775639][T18742] RAX: ffffffffffffffda RBX: 00007f963c1abf80 RCX: 00007f963c08c169 [ 1143.783614][T18742] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1143.791583][T18742] RBP: 00007f963cd4d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.799554][T18742] R10: 000000000001dd03 R11: 0000000000000246 R12: 0000000000000002 [ 1143.807525][T18742] R13: 00007ffd7ae18d4f R14: 00007f963cd4d300 R15: 0000000000022000 [ 1143.815511][T18742] [ 1143.818540][T18742] Modules linked in: 06:18:02 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000480)=0x5208, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x8, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) ioctl(r0, 0xffffffe1, &(0x7f0000000280)="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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) ftruncate(r4, 0x800) lseek(r4, 0x20400, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ftruncate(r4, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00ff010274c8f72cb07f707f00000000001a00", @ANYRES32=0x0, @ANYBLOB="040000000700f2ff00000b0000000a0004000a00"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) fcntl$setstatus(r3, 0x4, 0x46900) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000380)=""/134, 0x1008000, 0x1000, 0x4, 0x3}, 0x20) ftruncate(r3, 0x800) lseek(r3, 0x20400, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x80001d00c0d0) ftruncate(r3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000140)=0x80a0, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x100008, 0x4) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="583053551bc48b9198a137b731f3495bf1ae46bc7bdc11f3851f", 0x1a}, {&(0x7f0000000700)="72a68f86af1d724808d51997d1e5f7353158f94672a4f7f1dd0646521dd54cac5f16b01b4086677f1afa1d97477c7630578ed1a86902b2e80a364d2150643330a699812575f9b4f0f3910668129aea7c013ea13528bb0fb436b083e9bf662ca1ec660bc9af2a5f6cc0af816fbe1d7adfbbc259ce30dcfbbdf1c02b0b3e2c3d12cd4901fc7a975a056e999b928744e28c1a7ce5e01ab32c947059c4331bd907462002468e2a8d0e1ef8686c2552180860ea4aaece42dfdd6468e71d6470ac69a5fd", 0xc1}, {&(0x7f0000000800)="b4946432b02ae4b67d94a9bfcb8ee0b59b2628defd217f6c08f31e02d68f5f3b195025017a78fd03de5f7ceff13630f919ccd5081e8757f4df74ad93ec52290786e377499e4b94ae6196c1bd4d617cc2d001d4ab3c7b37abd59ccbe481af3b0425739e70c6ab4cada1490bea7d285097e3da9a448f9847695ff00834260c763a75605c081b9b280b8c7298e0f0771f2551b6a55da2702444b24f60be1c38bdfa18abbb86d9afaf8c0f8879aba233fad37ddbe977185c0cd8dfc78d8e9d3ce061247a5578d0b8d106ac8439daeabaa269a97a7a5d4e169e1e2a18c587e3ce40fce5acd3320021b1e3346ee804add20297441f76b75278", 0xf6}, {&(0x7f0000000900)="8d4da290e30ef93b4e03bb1a2bc74a61f65538a5a32a029d3aefadba54085c557ec3e3ab36387bd5fd11de8267da91b527d94ba1db7703285ccd4a5f99e4ec105cdff7043f42efd3676e21cca27f518453202210309ede0ff134b157b4ed841267bf0858a0c92048639f80c79f6b42a883db16b245e7899512505d08de76e392c32df3f0988180ea38f65fcf2030e8", 0x8f}, {&(0x7f00000009c0)="fb7d81fe248031dc391a0f204745ea340a8780fece43c4ffae32bc08f629a9849217", 0x22}, {&(0x7f0000000a00)="9f109c998c1f02cc615c35d8c1534f3a5ae45b047136f4535555f8e41c6ee54964d76360ae1eda226be0b5df746bdf", 0x2f}, {&(0x7f0000000a40)="6b6def557fb0b81494c6c5840369b7f5610ae3830b714a6010d56bb99cb1c2a48c3667d4e856bc0a6c0964eab23fd5370bf47b463606779f092282a79fa599f83f5d4655e790a1370ade609016522e01918137469bf56bbc6ef94de769a2", 0x5e}], 0x7, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x9, [{@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}]}, @ssrr={0x89, 0x17, 0x1a, [@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @empty, @multicast1, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3f}}], 0x70}}, {{&(0x7f0000000bc0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000c00)="0f4ea7898508f87b7a85aebd82de06a7816c0342cfd0176f3b296a67de92f58d0642531aa3a33d806245d9cda3156d46b20112ea3215f529ea9cb99f53445d8a1ef192a85baac1e07efbd72a669504c1a557949031ce08bc0dde139a310019d2b1fe827e1c14727b3bb9920f1af9c30cb208658d198dac1ca59374adc71d49990945444cd7ba2bb0dcad4d4de38bb079f3dd2510491f13558e74e57311a866beedaca18cfbfe013391a3", 0xaa}, {&(0x7f0000000cc0)="6454c11bcc4f7faec207eece3e4a6a4ec452bb4dae50ac4ad3d26ce702d03467e653269ec012e8c48d6121df3ae598c0e9dc9fd1c1cfb32b62584fc4057cd8c09b0f11288d1d15a95da7057364baf2f3b12206b65f6d106502bbe10eb7667899637c70bb3fed8598773daad32e7333cfea9d0f002236248a326f9837db95ac0f616e0b3f4b29dcb0b6f49b8941bbbd60664361374b8392d56a0c54f80acda13f6a665908a0f0b7298c86fbfa8e1c1f6f50c90f48265563d3f5cdb6eec9e609c3da85ace9c77cb21d2cb00c085abb5e", 0xcf}, {&(0x7f0000000dc0)="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", 0x1000}], 0x3, &(0x7f0000001e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x49a}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0xf, 0x1, [{0x7, 0x4, "f4dd"}, {0x1, 0x3, 'K'}, {0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x5e, 0x3, 0x0, [{@loopback, 0x1000}, {@broadcast, 0x8}]}, @end, @rr={0x7, 0xb, 0xb, [@multicast2, @dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp_prespec={0x44, 0x14, 0x4a, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}, {@multicast2, 0x800}]}, @rr={0x7, 0xb, 0xc5, [@multicast1, @local]}]}}}], 0x98}}], 0x3, 0x8805) [ 1143.850090][T18742] ---[ end trace 0000000000000000 ]--- [ 1143.856600][T18742] RIP: 0010:folio_wait_stable+0x23/0xe0 [ 1143.862225][T18742] Code: 00 00 00 0f 1f 40 00 f3 0f 1e fa 55 48 89 fd 53 e8 a2 92 d1 ff 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a4 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 1143.882328][T18742] RSP: 0018:ffffc9000316f488 EFLAGS: 00010203 06:18:02 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000010109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$addseals(r1, 0x409, 0xf) [ 1143.895405][T18742] RAX: dffffc0000000000 RBX: ffff88803e265cb0 RCX: ffffc9000c002000 [ 1143.904153][T10141] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1143.917378][T18742] RDX: 0000000000000001 RSI: ffffffff81b1f0ee RDI: 000000000000000c [ 1143.921160][ T5212] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1143.935777][ T5164] usb 2-1: USB disconnect, device number 5 [ 1143.946497][T18742] RBP: fffffffffffffff4 R08: 0000000000000001 R09: ffffffff8c8eef13 [ 1143.972635][T18742] R10: fffffbfff191dde2 R11: 0000000000000000 R12: 0000000000000000 [ 1143.981283][T18742] R13: ffff88803e265ed8 R14: 0000000000002000 R15: ffff88803e265a50 [ 1143.989795][ T5169] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1143.997517][T18742] FS: 00007f963cd4d700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1144.006808][T18742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1144.014903][T18742] CR2: 0000001b32724000 CR3: 000000006ca4c000 CR4: 00000000003506f0 [ 1144.023923][T18742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1144.032039][T18742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1144.050303][T18742] Kernel panic - not syncing: Fatal exception [ 1144.056540][T18742] Kernel Offset: disabled [ 1144.060866][T18742] Rebooting in 86400 seconds..