73430a300 R15: 0000000000022000 [ 2692.956380][T24246] CPU: 0 PID: 24246 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2692.956658][T24243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2692.966024][T24246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2692.966040][T24246] Call Trace: [ 2692.966047][T24246] dump_stack+0x143/0x1db [ 2692.991667][T24246] should_fail.cold+0x5/0xa [ 2692.994748][ T33] audit: type=1804 audit(1623020439.671:49): pid=24243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343830382F48C7C060 dev="sda1" ino=14393 res=1 errno=0 [ 2692.996306][T24246] ? security_file_alloc+0x34/0x170 [ 2692.996343][T24246] should_failslab+0x5/0x10 [ 2692.996371][T24246] kmem_cache_alloc+0x5b/0x360 [ 2692.996398][T24246] security_file_alloc+0x34/0x170 [ 2693.045541][T24246] __alloc_file+0xd8/0x280 [ 2693.050082][T24246] alloc_empty_file+0x6d/0x170 [ 2693.054964][T24246] path_openat+0xe3/0x27e0 [ 2693.059426][T24246] ? __lock_acquire+0x16a7/0x5230 [ 2693.064483][T24246] ? path_lookupat+0x850/0x850 [ 2693.069280][T24246] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2693.075296][T24246] do_filp_open+0x190/0x3d0 [ 2693.077809][T24248] FAULT_INJECTION: forcing a failure. [ 2693.077809][T24248] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.079815][T24246] ? may_open_dev+0xf0/0xf0 [ 2693.079845][T24246] ? alloc_fd+0x2e6/0x660 [ 2693.079870][T24246] ? lock_downgrade+0x6e0/0x6e0 [ 2693.079899][T24246] ? do_raw_spin_lock+0x120/0x2b0 [ 2693.111097][T24246] ? rwlock_bug.part.0+0x90/0x90 [ 2693.116045][T24246] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2693.122286][T24246] ? _find_next_bit+0x1e3/0x260 [ 2693.127129][T24246] ? _raw_spin_unlock+0x1a/0x30 [ 2693.131974][T24246] ? alloc_fd+0x2e6/0x660 [ 2693.136316][T24246] do_sys_openat2+0x16d/0x420 [ 2693.141003][T24246] ? build_open_flags+0x6f0/0x6f0 [ 2693.146022][T24246] ? __context_tracking_exit+0x9f/0xb0 [ 2693.151492][T24246] ? lock_downgrade+0x6e0/0x6e0 [ 2693.156341][T24246] __x64_sys_openat+0x13f/0x1f0 [ 2693.161200][T24246] ? __ia32_sys_open+0x1c0/0x1c0 [ 2693.166133][T24246] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2693.172112][T24246] ? syscall_enter_from_user_mode+0x27/0x70 [ 2693.178004][T24246] do_syscall_64+0x3a/0xb0 [ 2693.182415][T24246] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2693.188319][T24246] RIP: 0033:0x4196c4 [ 2693.192225][T24246] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2693.211926][T24246] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2693.220344][T24246] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2693.228320][T24246] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c 23:00:39 executing program 4 (fault-call:1 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2693.236300][T24246] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2693.244261][T24246] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2693.252221][T24246] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2693.260199][T24248] CPU: 1 PID: 24248 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0 [ 2693.268986][T24248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2693.279062][T24248] Call Trace: [ 2693.282363][T24248] dump_stack+0x143/0x1db [ 2693.286715][T24248] should_fail.cold+0x5/0xa [ 2693.291251][T24248] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2693.296654][T24248] should_failslab+0x5/0x10 [ 2693.301183][T24248] __kmalloc+0x72/0x310 [ 2693.305365][T24248] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2693.310700][T24248] tomoyo_encode+0x28/0x50 [ 2693.315147][T24248] tomoyo_realpath_from_path+0x186/0x620 [ 2693.320815][T24248] tomoyo_check_open_permission+0x272/0x380 [ 2693.327086][T24248] ? tomoyo_path_number_perm+0x590/0x590 [ 2693.332789][T24248] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2693.338891][T24248] ? path_get+0x5d/0x80 [ 2693.343048][T24248] ? lock_downgrade+0x6e0/0x6e0 [ 2693.348004][T24248] ? do_raw_spin_lock+0x120/0x2b0 [ 2693.353309][T24248] tomoyo_file_open+0xa3/0xd0 [ 2693.357994][T24248] security_file_open+0x52/0x4f0 [ 2693.362944][T24248] ? __mnt_want_write+0x196/0x270 [ 2693.368105][T24248] do_dentry_open+0x353/0x1090 [ 2693.373256][T24248] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2693.379587][T24248] ? may_open+0x1f6/0x420 [ 2693.384032][T24248] path_openat+0x1c0e/0x27e0 [ 2693.388741][T24248] ? path_lookupat+0x850/0x850 [ 2693.393501][T24248] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2693.399493][T24248] do_filp_open+0x190/0x3d0 [ 2693.404143][T24248] ? may_open_dev+0xf0/0xf0 [ 2693.408643][T24248] ? do_raw_spin_lock+0x120/0x2b0 [ 2693.413785][T24248] ? rwlock_bug.part.0+0x90/0x90 [ 2693.418823][T24248] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2693.426655][T24248] ? _find_next_bit+0x1e3/0x260 [ 2693.431532][T24248] ? _raw_spin_unlock+0x1a/0x30 [ 2693.436566][T24248] ? alloc_fd+0x2e6/0x660 [ 2693.440893][T24248] do_sys_openat2+0x16d/0x420 [ 2693.445571][T24248] ? build_open_flags+0x6f0/0x6f0 [ 2693.450593][T24248] ? __context_tracking_exit+0x9f/0xb0 [ 2693.456166][T24248] ? lock_downgrade+0x6e0/0x6e0 [ 2693.461043][T24248] __x64_sys_openat+0x13f/0x1f0 [ 2693.465921][T24248] ? __ia32_sys_open+0x1c0/0x1c0 [ 2693.470897][T24248] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2693.476886][T24248] ? syscall_enter_from_user_mode+0x27/0x70 [ 2693.482804][T24248] do_syscall_64+0x3a/0xb0 [ 2693.487287][T24248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2693.493203][T24248] RIP: 0033:0x4196c4 [ 2693.497207][T24248] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2693.516942][T24248] RSP: 002b:00007ff734309cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2693.525347][T24248] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2693.533397][T24248] RDX: 0000000000000005 RSI: 00007ff734309d60 RDI: 00000000ffffff9c [ 2693.541364][T24248] RBP: 00007ff734309d60 R08: 0000000000000000 R09: 0000000000000000 [ 2693.549335][T24248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 2693.557304][T24248] R13: 00007ffe38be063f R14: 00007ff73430a300 R15: 0000000000022000 [ 2693.565534][T24248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2693.573863][ T33] audit: type=1804 audit(1623020440.251:50): pid=24248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343830392F48C7C060 dev="sda1" ino=14393 res=1 errno=0 [ 2693.583522][T15081] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2693.853429][ T6374] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 2694.113493][T15081] usb 3-1: config 6 has an invalid interface number: 252 but max is 0 [ 2694.121910][T15081] usb 3-1: config 6 has no interface number 0 [ 2694.129463][T15081] usb 3-1: config 6 interface 252 altsetting 98 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2694.140934][T15081] usb 3-1: config 6 interface 252 altsetting 98 has an invalid endpoint with address 0x0, skipping [ 2694.151780][T15081] usb 3-1: config 6 interface 252 altsetting 98 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2694.162901][T15081] usb 3-1: config 6 interface 252 altsetting 98 has a duplicate endpoint with address 0xC, skipping [ 2694.173820][T15081] usb 3-1: config 6 interface 252 altsetting 98 bulk endpoint 0xB has invalid maxpacket 1024 [ 2694.184057][T15081] usb 3-1: config 6 interface 252 altsetting 98 has an invalid endpoint with address 0x0, skipping [ 2694.194819][T15081] usb 3-1: config 6 interface 252 altsetting 98 has an invalid endpoint with address 0x0, skipping [ 2694.205941][T15081] usb 3-1: config 6 interface 252 altsetting 98 has an invalid endpoint with address 0xDC, skipping [ 2694.216795][T15081] usb 3-1: config 6 interface 252 altsetting 98 has a duplicate endpoint with address 0xB, skipping [ 2694.227629][T15081] usb 3-1: config 6 interface 252 altsetting 98 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 2694.241004][T15081] usb 3-1: config 6 interface 252 has no altsetting 0 [ 2694.333531][ T6374] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2694.344842][ T6374] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2694.356936][ T6374] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2694.366760][ T6374] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2694.433556][T15081] usb 3-1: New USB device found, idVendor=046d, idProduct=08c7, bcdDevice=2c.13 [ 2694.442854][T15081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2694.451020][T15081] usb 3-1: Product: ᐇ [ 2694.455460][T15081] usb 3-1: Manufacturer: ј [ 2694.459975][T15081] usb 3-1: SerialNumber: syz [ 2694.487793][T24216] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2694.543492][ T6374] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2694.552727][ T6374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2694.560790][ T6374] usb 2-1: Product: syz [ 2694.565047][ T6374] usb 2-1: Manufacturer: syz [ 2694.569793][ T6374] usb 2-1: SerialNumber: syz 23:00:41 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x18}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:41 executing program 0 (fault-call:1 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x480680) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/192) ioctl$EVIOCSCLOCKID(r0, 0x401c5820, &(0x7f0000000080)) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) 23:00:41 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x6, 0x1f, 0x4, 0x3f, "59a7ddd926f36e2899318c0c006e57e6a353cc3069a68e9e9a257ffd500c310e"}) 23:00:41 executing program 4 (fault-call:1 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:00:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x4480) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) [ 2694.594918][T24229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2694.673870][ T6374] cdc_ncm 2-1:1.0: bind() failure [ 2694.681963][ T6374] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2694.689146][ T6374] cdc_ncm 2-1:1.1: bind() failure [ 2694.717695][T24265] FAULT_INJECTION: forcing a failure. [ 2694.717695][T24265] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.730921][T24265] CPU: 1 PID: 24265 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0 [ 2694.739798][T24265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2694.749873][T24265] Call Trace: [ 2694.753166][T24265] dump_stack+0x143/0x1db [ 2694.757519][T24265] should_fail.cold+0x5/0xa [ 2694.762048][T24265] ? ima_d_path+0x4d/0x1f0 [ 2694.766487][T24265] should_failslab+0x5/0x10 [ 2694.771019][T24265] kmem_cache_alloc+0x5b/0x360 [ 2694.775805][T24265] ima_d_path+0x4d/0x1f0 [ 2694.780070][T24265] process_measurement+0xb46/0x17e0 [ 2694.785303][T24265] ? mmap_violation_check+0x1e0/0x1e0 [ 2694.790503][T24271] FAULT_INJECTION: forcing a failure. [ 2694.790503][T24271] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.790693][T24265] ? tomoyo_path_number_perm+0x590/0x590 [ 2694.808930][T24265] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2694.815086][T24265] ? find_held_lock+0x2d/0x110 [ 2694.819869][T24265] ? aa_get_task_label+0x25f/0x540 [ 2694.825012][T24265] ? lock_downgrade+0x6e0/0x6e0 [ 2694.829996][T24265] ? fsnotify+0x1070/0x1070 [ 2694.834509][T24265] ? ext4_file_write_iter+0x1980/0x1980 [ 2694.840053][T24265] ? path_get+0x5d/0x80 [ 2694.844209][T24265] ? aa_get_task_label+0x288/0x540 [ 2694.849315][T24265] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2694.855552][T24265] ? apparmor_task_getsecid+0xc2/0x110 [ 2694.861024][T24265] ima_file_check+0xb9/0x100 [ 2694.865692][T24265] ? process_measurement+0x17e0/0x17e0 [ 2694.871145][T24265] ? may_open+0x1f6/0x420 [ 2694.875469][T24265] path_openat+0x15b5/0x27e0 [ 2694.880057][T24265] ? path_lookupat+0x850/0x850 [ 2694.884840][T24265] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2694.890822][T24265] do_filp_open+0x190/0x3d0 [ 2694.895318][T24265] ? may_open_dev+0xf0/0xf0 [ 2694.899899][T24265] ? do_raw_spin_lock+0x120/0x2b0 [ 2694.904924][T24265] ? rwlock_bug.part.0+0x90/0x90 [ 2694.909891][T24265] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2694.916146][T24265] ? _find_next_bit+0x1e3/0x260 [ 2694.920992][T24265] ? _raw_spin_unlock+0x1a/0x30 [ 2694.925846][T24265] ? alloc_fd+0x2e6/0x660 [ 2694.930169][T24265] do_sys_openat2+0x16d/0x420 [ 2694.934928][T24265] ? build_open_flags+0x6f0/0x6f0 [ 2694.939945][T24265] ? __context_tracking_exit+0x9f/0xb0 [ 2694.945408][T24265] ? lock_downgrade+0x6e0/0x6e0 [ 2694.950296][T24265] __x64_sys_openat+0x13f/0x1f0 [ 2694.955174][T24265] ? __ia32_sys_open+0x1c0/0x1c0 [ 2694.960139][T24265] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2694.966121][T24265] ? syscall_enter_from_user_mode+0x27/0x70 [ 2694.972013][T24265] do_syscall_64+0x3a/0xb0 [ 2694.976425][T24265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2694.982317][T24265] RIP: 0033:0x4196c4 [ 2694.986294][T24265] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2695.005912][T24265] RSP: 002b:00007ff734309cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2695.014339][T24265] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2695.022315][T24265] RDX: 0000000000000005 RSI: 00007ff734309d60 RDI: 00000000ffffff9c [ 2695.030283][T24265] RBP: 00007ff734309d60 R08: 0000000000000000 R09: 0000000000000000 [ 2695.038332][T24265] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 2695.046386][T24265] R13: 00007ffe38be063f R14: 00007ff73430a300 R15: 0000000000022000 [ 2695.054357][T24271] CPU: 0 PID: 24271 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2695.063272][T24271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2695.073354][T24271] Call Trace: [ 2695.076703][T24271] dump_stack+0x143/0x1db [ 2695.080771][ T33] audit: type=1804 audit(1623020441.751:51): pid=24265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14427 res=1 errno=0 [ 2695.081136][T24271] should_fail.cold+0x5/0xa [ 2695.105761][T24271] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2695.111526][T24271] should_failslab+0x5/0x10 [ 2695.116088][T24271] __kmalloc+0x72/0x310 [ 2695.120272][T24271] tomoyo_realpath_from_path+0xc3/0x620 [ 2695.125851][T24271] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2695.132151][T24271] tomoyo_check_open_permission+0x272/0x380 [ 2695.138077][T24271] ? tomoyo_path_number_perm+0x590/0x590 [ 2695.143898][T24271] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.149949][T24271] ? path_get+0x5d/0x80 [ 2695.154151][T24271] ? lock_downgrade+0x6e0/0x6e0 [ 2695.159028][T24271] ? do_raw_spin_lock+0x120/0x2b0 [ 2695.164246][T24271] tomoyo_file_open+0xa3/0xd0 23:00:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x5, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x3, 0xc4, &(0x7f00000000c0)="4f1cfdd593f79bf885b2a3eb5daf6fcb951408c34a499504e55fd43d9456c257811e72861f3d6e67b0f104a7ed407c1792718ec1951dd9da001435ae8dce57cf73792532f8aaf4c6e83dd96f5d1fccca957c4c4ef654f7fa494259c46b385c19134c1bb5e4c090fc6dac2c178ec9b06058acb52513a7f8780f9da89d7055e16ac9b47583a4fddca6387fd7e032b2e3e2eb8ef789ba16306127d2a1cf246539e5ba63fc27a72805c14ddef59503ad0774643524cf501ca381b532072d79509bce9d72ff45"}) ioctl$EVIOCSCLOCKID(r0, 0x401c5820, &(0x7f0000000080)) 23:00:41 executing program 4 (fault-call:1 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2695.168982][T24271] security_file_open+0x52/0x4f0 [ 2695.173952][T24271] ? __mnt_want_write+0x196/0x270 [ 2695.179007][T24271] do_dentry_open+0x353/0x1090 [ 2695.183796][T24271] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2695.190319][T24271] ? may_open+0x1f6/0x420 [ 2695.194681][T24271] path_openat+0x1c0e/0x27e0 [ 2695.199301][T24271] ? path_lookupat+0x850/0x850 [ 2695.204086][T24271] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.210196][T24271] do_filp_open+0x190/0x3d0 [ 2695.214725][T24271] ? may_open_dev+0xf0/0xf0 [ 2695.219272][T24271] ? do_raw_spin_lock+0x120/0x2b0 [ 2695.224398][T24271] ? rwlock_bug.part.0+0x90/0x90 [ 2695.229459][T24271] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2695.236053][T24271] ? _find_next_bit+0x1e3/0x260 [ 2695.240933][T24271] ? _raw_spin_unlock+0x1a/0x30 [ 2695.245815][T24271] ? alloc_fd+0x2e6/0x660 [ 2695.248353][T24279] FAULT_INJECTION: forcing a failure. [ 2695.248353][T24279] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.250186][T24271] do_sys_openat2+0x16d/0x420 [ 2695.250219][T24271] ? build_open_flags+0x6f0/0x6f0 [ 2695.250246][T24271] ? __context_tracking_exit+0x9f/0xb0 [ 2695.250275][T24271] ? lock_downgrade+0x6e0/0x6e0 [ 2695.282889][T24271] __x64_sys_openat+0x13f/0x1f0 [ 2695.287748][T24271] ? __ia32_sys_open+0x1c0/0x1c0 [ 2695.292886][T24271] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2695.298923][T24271] ? syscall_enter_from_user_mode+0x27/0x70 [ 2695.304827][T24271] do_syscall_64+0x3a/0xb0 [ 2695.309337][T24271] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2695.315316][T24271] RIP: 0033:0x4196c4 [ 2695.319205][T24271] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2695.338916][T24271] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2695.347420][T24271] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2695.355397][T24271] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2695.363374][T24271] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2695.371359][T24271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2695.379349][T24271] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2695.387337][T24279] CPU: 1 PID: 24279 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0 [ 2695.387615][T24271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2695.396134][T24279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2695.396152][T24279] Call Trace: [ 2695.396161][T24279] dump_stack+0x143/0x1db [ 2695.421082][T24279] should_fail.cold+0x5/0xa [ 2695.425629][T24279] ? ima_alloc_init_template+0xb4/0x750 [ 2695.429251][ T6374] usb 2-1: USB disconnect, device number 3 [ 2695.431287][T24279] should_failslab+0x5/0x10 [ 2695.431318][T24279] __kmalloc+0x72/0x310 [ 2695.431344][T24279] ima_alloc_init_template+0xb4/0x750 [ 2695.451271][T24279] ima_add_violation+0x115/0x3b0 [ 2695.456239][T24279] ? ima_store_template+0x140/0x140 [ 2695.461487][T24279] ? __d_path+0x160/0x160 [ 2695.465929][T24279] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2695.472197][T24279] process_measurement+0xb6a/0x17e0 [ 2695.477421][T24279] ? mmap_violation_check+0x1e0/0x1e0 [ 2695.482822][T24279] ? tomoyo_path_number_perm+0x590/0x590 [ 2695.488489][T24279] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.494506][T24279] ? find_held_lock+0x2d/0x110 [ 2695.499303][T24279] ? aa_get_task_label+0x25f/0x540 [ 2695.504444][T24279] ? lock_downgrade+0x6e0/0x6e0 [ 2695.509327][T24279] ? fsnotify+0x1070/0x1070 [ 2695.513862][T24279] ? ext4_file_write_iter+0x1980/0x1980 [ 2695.519433][T24279] ? path_get+0x5d/0x80 [ 2695.523706][T24279] ? aa_get_task_label+0x288/0x540 [ 2695.528855][T24279] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2695.535217][T24279] ? apparmor_task_getsecid+0xc2/0x110 [ 2695.540812][T24279] ima_file_check+0xb9/0x100 [ 2695.545431][T24279] ? process_measurement+0x17e0/0x17e0 [ 2695.550912][T24279] ? may_open+0x1f6/0x420 [ 2695.555269][T24279] path_openat+0x15b5/0x27e0 [ 2695.560151][T24279] ? path_lookupat+0x850/0x850 [ 2695.564943][T24279] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.571057][T24279] do_filp_open+0x190/0x3d0 [ 2695.575673][T24279] ? may_open_dev+0xf0/0xf0 [ 2695.580206][T24279] ? do_raw_spin_lock+0x120/0x2b0 [ 2695.585252][T24279] ? rwlock_bug.part.0+0x90/0x90 [ 2695.590212][T24279] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2695.596576][T24279] ? _find_next_bit+0x1e3/0x260 [ 2695.601568][T24279] ? _raw_spin_unlock+0x1a/0x30 [ 2695.606444][T24279] ? alloc_fd+0x2e6/0x660 [ 2695.610920][T24279] do_sys_openat2+0x16d/0x420 [ 2695.615741][T24279] ? build_open_flags+0x6f0/0x6f0 [ 2695.620801][T24279] ? __context_tracking_exit+0x9f/0xb0 [ 2695.626296][T24279] ? lock_downgrade+0x6e0/0x6e0 [ 2695.631208][T24279] __x64_sys_openat+0x13f/0x1f0 [ 2695.633626][ T33] audit: type=1804 audit(1623020442.061:52): pid=24271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343737312F48C7C060 dev="sda1" ino=15618 res=1 errno=0 [ 2695.636169][T24279] ? __ia32_sys_open+0x1c0/0x1c0 [ 2695.671408][T24279] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2695.677422][T24279] ? syscall_enter_from_user_mode+0x27/0x70 [ 2695.683346][T24279] do_syscall_64+0x3a/0xb0 [ 2695.687879][T24279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2695.693801][T24279] RIP: 0033:0x4196c4 [ 2695.697723][T24279] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 23:00:42 executing program 0 (fault-call:1 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:42 executing program 3: write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="c167cf96a23a22debff0851387b7bceaa6f86826a6817013ad7085a4cd5c8feb54a34d5e07b3d5f4491540be73b8c634e768b3c4bae58ef64fb7c58a2f3e2cfa7a3bb8a591f31f3c2726353e5c6bc157ce6657047d28ceafe150a34bcaeb0a22cd7aa3a14ec53a363db242016a1d5bbb1c50eec2b44f89397255d67673a2dbfa2d50aec392c0617bfdf2fd9e871d2e9bd0", 0x91) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000280)=""/42) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x80000004, 0x202802) syz_open_dev$hidraw(&(0x7f00000002c0), 0x4, 0x400300) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) write$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000300)) ioctl$EVIOCSCLOCKID(r1, 0x401c5820, &(0x7f0000000080)) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000000)=""/61) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/209) 23:00:42 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000140)=""/63) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/114) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x53, 0x9, 0x0, {0x2d, 0x1}, {0xfffe, 0x3c0c}, @const={0x401, {0x4006, 0x3, 0x5}}}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x7, 0x1, 0x200, 0x1, 0xf77, 0x4}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x6) [ 2695.717566][T24279] RSP: 002b:00007ff734309cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2695.726008][T24279] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2695.734006][T24279] RDX: 0000000000000005 RSI: 00007ff734309d60 RDI: 00000000ffffff9c [ 2695.742010][T24279] RBP: 00007ff734309d60 R08: 0000000000000000 R09: 0000000000000000 [ 2695.750008][T24279] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 2695.758002][T24279] R13: 00007ffe38be063f R14: 00007ff73430a300 R15: 0000000000022000 [ 2695.778372][T15081] usb 3-1: Found UVC 0.00 device ᐇ (046d:08c7) [ 2695.784812][T15081] usb 3-1: No valid video chain found. [ 2695.804278][ T33] audit: type=1804 audit(1623020442.481:53): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343831312F48C7C060 dev="sda1" ino=14415 res=0 errno=0 [ 2695.806985][T24295] FAULT_INJECTION: forcing a failure. [ 2695.806985][T24295] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.846804][T24295] CPU: 0 PID: 24295 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2695.855597][T24295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2695.865688][T24295] Call Trace: [ 2695.868982][T24295] dump_stack+0x143/0x1db [ 2695.873337][T24295] should_fail.cold+0x5/0xa 23:00:42 executing program 2: syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x18, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe7, 0x40, 0x67, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2e, 0x4, 0xc0}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1f, 0x8, 0x1}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x81, 0x1, 0xf8, 0x20, 0x1}, 0x24, &(0x7f00000000c0)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "5a43b644c946c1c630bdf1b6643ccfe1"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xa9, 0x7, 0x3, 0x7}]}, 0x3, [{0xba, &(0x7f0000000100)=@string={0xba, 0x3, "57ab17f1484d6d59725aa110dd6ffbdeb81343e5b8c95802b13c3c12b2105a0f371309b7a270d94ab56fa49615e1e9df83618be8ca9888af54cf8c18a60831c9ffabaaeff5256209fb7a78d623f4ac7d0b6fb4a99468529c123e76ff443d02442962ff9c9266737be2cbcf559582cc57f06873ca2a1ea27a72a5b45475c0d99fc1a3f0620b91186170a6397ed0d0e8c5a2da9db9fc30172a34a7a85e285c2f9cb6e6e87e1266481cd7db7492dfaea9ce77069eedef714ba9"}}, {0x35, &(0x7f00000001c0)=@string={0x35, 0x3, "7b01ce7a6990e8fe8a93e444ea06f9d80c27fab965ea9aa7807bf67db53e901aa3836b842f238e9e33004459f5688c8d53af98"}}, {0x34, &(0x7f0000000200)=@string={0x34, 0x3, "adb6d439105e5849d56f5cccb04e2d051368394d348112166ded8b21dc1e704dcd91278c82170366b7c4a6be509ee853bede"}}]}) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) [ 2695.877877][T24295] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2695.883283][T24295] should_failslab+0x5/0x10 [ 2695.887817][T24295] __kmalloc+0x72/0x310 [ 2695.889954][ T33] audit: type=1800 audit(1623020442.521:54): pid=24298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15618 res=0 errno=0 [ 2695.892001][T24295] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2695.892037][T24295] tomoyo_encode+0x28/0x50 [ 2695.892064][T24295] tomoyo_realpath_from_path+0x186/0x620 [ 2695.928480][T24295] tomoyo_check_open_permission+0x272/0x380 [ 2695.934428][T24295] ? tomoyo_path_number_perm+0x590/0x590 [ 2695.940105][T24295] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.946129][T24295] ? path_get+0x5d/0x80 [ 2695.950411][T24295] ? lock_downgrade+0x6e0/0x6e0 [ 2695.955307][T24295] ? do_raw_spin_lock+0x120/0x2b0 [ 2695.960370][T24295] tomoyo_file_open+0xa3/0xd0 [ 2695.965173][T24295] security_file_open+0x52/0x4f0 [ 2695.970356][T24295] ? __mnt_want_write+0x196/0x270 [ 2695.975411][T24295] do_dentry_open+0x353/0x1090 [ 2695.980178][T24295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2695.986422][T24295] ? may_open+0x1f6/0x420 [ 2695.990843][T24295] path_openat+0x1c0e/0x27e0 [ 2695.995558][T24295] ? path_lookupat+0x850/0x850 [ 2696.000346][T24295] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2696.006343][T24295] do_filp_open+0x190/0x3d0 [ 2696.010869][T24295] ? may_open_dev+0xf0/0xf0 [ 2696.015371][T24295] ? do_raw_spin_lock+0x120/0x2b0 [ 2696.020399][T24295] ? rwlock_bug.part.0+0x90/0x90 [ 2696.025344][T24295] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2696.031860][T24295] ? _find_next_bit+0x1e3/0x260 [ 2696.036724][T24295] ? _raw_spin_unlock+0x1a/0x30 [ 2696.041675][T24295] ? alloc_fd+0x2e6/0x660 [ 2696.046024][T24295] do_sys_openat2+0x16d/0x420 [ 2696.050709][T24295] ? build_open_flags+0x6f0/0x6f0 [ 2696.055746][T24295] ? __context_tracking_exit+0x9f/0xb0 [ 2696.061244][T24295] ? lock_downgrade+0x6e0/0x6e0 [ 2696.066184][T24295] __x64_sys_openat+0x13f/0x1f0 [ 2696.071078][T24295] ? __ia32_sys_open+0x1c0/0x1c0 [ 2696.076058][T24295] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2696.082483][T24295] ? syscall_enter_from_user_mode+0x27/0x70 [ 2696.088387][T24295] do_syscall_64+0x3a/0xb0 [ 2696.092829][T24295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2696.098948][T24295] RIP: 0033:0x4196c4 [ 2696.102860][T24295] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2696.122610][T24295] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2696.131217][T24295] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2696.139193][T24295] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2696.147178][T24295] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2696.155268][T24295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2696.163263][T24295] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2696.171390][T24295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2696.183001][T15081] usb 3-1: USB disconnect, device number 115 [ 2696.216689][ T33] audit: type=1804 audit(1623020442.891:55): pid=24295 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343737322F48C7C060 dev="sda1" ino=15554 res=1 errno=0 [ 2696.463334][ T6374] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2696.563224][T15081] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2696.833252][T15081] usb 3-1: device descriptor read/64, error 18 [ 2696.844021][ T6374] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2696.855491][ T6374] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2696.866598][ T6374] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2696.876584][ T6374] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2697.073915][ T6374] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2697.083259][ T6374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.091251][ T6374] usb 2-1: Product: syz [ 2697.095553][ T6374] usb 2-1: Manufacturer: syz [ 2697.100343][ T6374] usb 2-1: SerialNumber: syz [ 2697.134716][T24275] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2697.253250][T15081] usb 3-1: device descriptor read/64, error 18 23:00:44 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0xf}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:44 executing program 4 (fault-call:1 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:00:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x4591d4100138ceb) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/125) ioctl$EVIOCSCLOCKID(r0, 0x401c5820, &(0x7f0000000080)) 23:00:44 executing program 0 (fault-call:1 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:44 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f00000003c0)={0x40, 0xb, 0x47, {0x47, 0xb, "a7770ed48bef76628addf1b26337a7d388369444a963354a30a4441b781ac17b24fa3310978bc6ba5e52f576b977ea5ed582ad9425e3e10a25dfee61454ac87d58d0c20eb2"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20ab}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "f3d187c4"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0xdf3}}}}, &(0x7f00000002c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYBLOB="8a631817fea5b87fc9c8b7e6f5fc750002db818fce7e4ce35ff3651604cb4f13032839d25f6d0d59c19f153804817c456a06fe59eebe7d3f8ae750b89d0b3d78e8557f4f2f41ea24b45235d410bae9f21ec65b4f84a3726ed06c", @ANYRESOCT=0x0], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000240)={0x20, 0x1, 0x35, "1b56325e8deb8d249eb8c056979362a8c7d487f28a817f5983773a98a854a64fb57a906d4bf6615d93966bc9c11b7544f420d907c9"}, &(0x7f0000000280)={0x20, 0x3, 0x1, 0x8}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2697.437641][ T6374] cdc_ncm 2-1:1.0: bind() failure [ 2697.453556][ T6374] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2697.460582][ T6374] cdc_ncm 2-1:1.1: bind() failure [ 2697.469308][T24320] FAULT_INJECTION: forcing a failure. [ 2697.469308][T24320] name failslab, interval 1, probability 0, space 0, times 0 [ 2697.482090][T24320] CPU: 0 PID: 24320 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2697.490878][T24320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2697.500952][T24320] Call Trace: [ 2697.504419][T24320] dump_stack+0x143/0x1db [ 2697.508893][T24320] should_fail.cold+0x5/0xa [ 2697.513431][T24320] ? ima_d_path+0x4d/0x1f0 [ 2697.517869][T24320] should_failslab+0x5/0x10 [ 2697.522397][T24320] kmem_cache_alloc+0x5b/0x360 [ 2697.527192][T24320] ? do_raw_read_unlock+0x3b/0x70 [ 2697.532241][T24320] ima_d_path+0x4d/0x1f0 [ 2697.536504][T24320] ? integrity_inode_get+0x38/0x270 [ 2697.541722][T24320] process_measurement+0xb46/0x17e0 [ 2697.547053][T24320] ? mmap_violation_check+0x1e0/0x1e0 [ 2697.552458][T24320] ? tomoyo_path_number_perm+0x590/0x590 [ 2697.558126][T24320] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2697.564146][T24320] ? find_held_lock+0x2d/0x110 [ 2697.568952][T24320] ? aa_get_task_label+0x25f/0x540 [ 2697.574128][T24320] ? lock_downgrade+0x6e0/0x6e0 [ 2697.575196][T24326] FAULT_INJECTION: forcing a failure. [ 2697.575196][T24326] name failslab, interval 1, probability 0, space 0, times 0 [ 2697.579003][T24320] ? fsnotify+0x1070/0x1070 [ 2697.579035][T24320] ? ext4_file_write_iter+0x1980/0x1980 [ 2697.579061][T24320] ? path_get+0x5d/0x80 [ 2697.579087][T24320] ? aa_get_task_label+0x288/0x540 [ 2697.610949][T24320] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2697.617200][T24320] ? apparmor_task_getsecid+0xc2/0x110 [ 2697.622852][T24320] ima_file_check+0xb9/0x100 [ 2697.627436][T24320] ? process_measurement+0x17e0/0x17e0 [ 2697.632887][T24320] ? may_open+0x1f6/0x420 [ 2697.637213][T24320] path_openat+0x15b5/0x27e0 [ 2697.641824][T24320] ? path_lookupat+0x850/0x850 [ 2697.646595][T24320] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2697.652586][T24320] do_filp_open+0x190/0x3d0 [ 2697.657088][T24320] ? may_open_dev+0xf0/0xf0 [ 2697.661600][T24320] ? do_raw_spin_lock+0x120/0x2b0 [ 2697.666635][T24320] ? rwlock_bug.part.0+0x90/0x90 [ 2697.671569][T24320] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2697.677813][T24320] ? _find_next_bit+0x1e3/0x260 [ 2697.682668][T24320] ? _raw_spin_unlock+0x1a/0x30 [ 2697.687513][T24320] ? alloc_fd+0x2e6/0x660 [ 2697.691835][T24320] do_sys_openat2+0x16d/0x420 [ 2697.696599][T24320] ? build_open_flags+0x6f0/0x6f0 [ 2697.701624][T24320] ? __context_tracking_exit+0x9f/0xb0 [ 2697.707090][T24320] ? lock_downgrade+0x6e0/0x6e0 [ 2697.711941][T24320] __x64_sys_openat+0x13f/0x1f0 [ 2697.716878][T24320] ? __ia32_sys_open+0x1c0/0x1c0 [ 2697.721810][T24320] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2697.727796][T24320] ? syscall_enter_from_user_mode+0x27/0x70 [ 2697.733687][T24320] do_syscall_64+0x3a/0xb0 [ 2697.738099][T24320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2697.743989][T24320] RIP: 0033:0x4196c4 [ 2697.747880][T24320] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2697.767481][T24320] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2697.775996][T24320] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2697.783962][T24320] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2697.791928][T24320] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2697.799981][T24320] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2697.808138][T24320] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2697.816108][T24326] CPU: 1 PID: 24326 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0 [ 2697.823210][T15081] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2697.824886][T24326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2697.824902][T24326] Call Trace: [ 2697.824911][T24326] dump_stack+0x143/0x1db [ 2697.850277][T24326] should_fail.cold+0x5/0xa [ 2697.854814][T24326] ? ima_alloc_init_template+0x199/0x750 [ 2697.860477][T24326] should_failslab+0x5/0x10 [ 2697.860816][ T6374] usb 2-1: USB disconnect, device number 4 [ 2697.865008][T24326] __kmalloc+0x72/0x310 [ 2697.865041][T24326] ima_alloc_init_template+0x199/0x750 [ 2697.865068][T24326] ima_add_violation+0x115/0x3b0 [ 2697.865096][T24326] ? ima_store_template+0x140/0x140 [ 2697.890751][T24326] ? __d_path+0x160/0x160 [ 2697.895127][T24326] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2697.901396][T24326] process_measurement+0xb6a/0x17e0 [ 2697.906618][T24326] ? mmap_violation_check+0x1e0/0x1e0 [ 2697.912013][T24326] ? tomoyo_path_number_perm+0x590/0x590 [ 2697.917843][T24326] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2697.923945][T24326] ? find_held_lock+0x2d/0x110 [ 2697.928778][T24326] ? aa_get_task_label+0x25f/0x540 [ 2697.933923][T24326] ? lock_downgrade+0x6e0/0x6e0 [ 2697.938806][T24326] ? fsnotify+0x1070/0x1070 [ 2697.943349][T24326] ? ext4_file_write_iter+0x1980/0x1980 [ 2697.949014][T24326] ? path_get+0x5d/0x80 [ 2697.953266][T24326] ? aa_get_task_label+0x288/0x540 [ 2697.958409][T24326] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2697.964731][T24326] ? apparmor_task_getsecid+0xc2/0x110 [ 2697.970221][T24326] ima_file_check+0xb9/0x100 [ 2697.974846][T24326] ? process_measurement+0x17e0/0x17e0 [ 2697.980360][T24326] ? may_open+0x1f6/0x420 [ 2697.984720][T24326] path_openat+0x15b5/0x27e0 [ 2697.985475][T24339] FAULT_INJECTION: forcing a failure. [ 2697.985475][T24339] name failslab, interval 1, probability 0, space 0, times 0 [ 2697.989345][T24326] ? path_lookupat+0x850/0x850 [ 2697.989377][T24326] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2697.989410][T24326] do_filp_open+0x190/0x3d0 [ 2697.989432][T24326] ? may_open_dev+0xf0/0xf0 [ 2697.989453][T24326] ? do_raw_spin_lock+0x120/0x2b0 [ 2698.026848][T24326] ? rwlock_bug.part.0+0x90/0x90 [ 2698.031798][T24326] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2698.038135][T24326] ? _find_next_bit+0x1e3/0x260 [ 2698.042985][T24326] ? _raw_spin_unlock+0x1a/0x30 [ 2698.047829][T24326] ? alloc_fd+0x2e6/0x660 [ 2698.052152][T24326] do_sys_openat2+0x16d/0x420 [ 2698.056842][T24326] ? build_open_flags+0x6f0/0x6f0 [ 2698.061863][T24326] ? __context_tracking_exit+0x9f/0xb0 [ 2698.067363][T24326] ? lock_downgrade+0x6e0/0x6e0 [ 2698.072213][T24326] __x64_sys_openat+0x13f/0x1f0 [ 2698.077062][T24326] ? __ia32_sys_open+0x1c0/0x1c0 [ 2698.082115][T24326] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2698.088096][T24326] ? syscall_enter_from_user_mode+0x27/0x70 [ 2698.094072][T24326] do_syscall_64+0x3a/0xb0 [ 2698.098495][T24326] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2698.104383][T24326] RIP: 0033:0x4196c4 [ 2698.108274][T24326] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2698.128052][T24326] RSP: 002b:00007ff7342e8cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2698.136469][T24326] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2698.144433][T24326] RDX: 0000000000000005 RSI: 00007ff7342e8d60 RDI: 00000000ffffff9c [ 2698.152410][T24326] RBP: 00007ff7342e8d60 R08: 0000000000000000 R09: 0000000000000000 [ 2698.160479][T24326] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 2698.168460][T24326] R13: 00007ffe38be063f R14: 00007ff7342e9300 R15: 0000000000022000 [ 2698.176454][T24339] CPU: 0 PID: 24339 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 23:00:44 executing program 0 (fault-call:1 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:44 executing program 3: syz_open_dev$evdev(&(0x7f00000006c0), 0x7, 0x2102) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40007bae, 0x428141) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xf0, 0x2c0300) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/222) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/241) ioctl$EVIOCSCLOCKID(r0, 0x401c5820, &(0x7f0000000080)) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0x40081) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000200)=""/135) [ 2698.183168][ T33] audit: type=1804 audit(1623020444.491:56): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15697 res=1 errno=0 [ 2698.185258][T24339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2698.215565][T24339] Call Trace: [ 2698.219042][T24339] dump_stack+0x143/0x1db [ 2698.223397][T24339] should_fail.cold+0x5/0xa [ 2698.228064][T24339] ? ima_alloc_init_template+0xb4/0x750 [ 2698.233637][T24339] should_failslab+0x5/0x10 [ 2698.238268][T24339] __kmalloc+0x72/0x310 [ 2698.242459][T24339] ima_alloc_init_template+0xb4/0x750 [ 2698.243467][ T33] audit: type=1804 audit(1623020444.921:57): pid=24326 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343831322F48C7C060 dev="sda1" ino=15761 res=0 errno=0 [ 2698.247878][T24339] ima_add_violation+0x115/0x3b0 [ 2698.247909][T24339] ? ima_store_template+0x140/0x140 [ 2698.247936][T24339] ? __d_path+0x160/0x160 [ 2698.247961][T24339] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2698.298296][T24339] process_measurement+0xb6a/0x17e0 [ 2698.303526][T24339] ? mmap_violation_check+0x1e0/0x1e0 [ 2698.308941][T24339] ? tomoyo_path_number_perm+0x590/0x590 [ 2698.314608][T24339] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2698.320622][T24339] ? find_held_lock+0x2d/0x110 [ 2698.325414][T24339] ? aa_get_task_label+0x25f/0x540 [ 2698.330562][T24339] ? lock_downgrade+0x6e0/0x6e0 [ 2698.335453][T24339] ? fsnotify+0x1070/0x1070 23:00:45 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:00:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x401c5820, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0xd4, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/160) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/59) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x10001, 0x2000) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/199) [ 2698.339980][T24339] ? ext4_file_write_iter+0x1980/0x1980 [ 2698.345561][T24339] ? path_get+0x5d/0x80 [ 2698.349750][T24339] ? aa_get_task_label+0x288/0x540 [ 2698.354891][T24339] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2698.361188][T24339] ? apparmor_task_getsecid+0xc2/0x110 [ 2698.366855][T24339] ima_file_check+0xb9/0x100 [ 2698.371476][T24339] ? process_measurement+0x17e0/0x17e0 [ 2698.376971][T24339] ? may_open+0x1f6/0x420 [ 2698.381333][T24339] path_openat+0x15b5/0x27e0 [ 2698.385997][T24339] ? path_lookupat+0x850/0x850 [ 2698.390812][T24339] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2698.396840][T24339] do_filp_open+0x190/0x3d0 [ 2698.401367][T24339] ? may_open_dev+0xf0/0xf0 [ 2698.405890][T24339] ? do_raw_spin_lock+0x120/0x2b0 [ 2698.411080][T24339] ? rwlock_bug.part.0+0x90/0x90 [ 2698.416134][T24339] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2698.422406][T24339] ? _find_next_bit+0x1e3/0x260 [ 2698.427283][T24339] ? _raw_spin_unlock+0x1a/0x30 [ 2698.432165][T24339] ? alloc_fd+0x2e6/0x660 [ 2698.436522][T24339] do_sys_openat2+0x16d/0x420 [ 2698.441318][T24339] ? build_open_flags+0x6f0/0x6f0 [ 2698.446375][T24339] ? __context_tracking_exit+0x9f/0xb0 [ 2698.451088][ T33] audit: type=1804 audit(1623020445.121:58): pid=24348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343831332F48C7C060 dev="sda1" ino=15841 res=1 errno=0 [ 2698.451858][T24339] ? lock_downgrade+0x6e0/0x6e0 [ 2698.451896][T24339] __x64_sys_openat+0x13f/0x1f0 23:00:45 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x5) [ 2698.491550][T24339] ? __ia32_sys_open+0x1c0/0x1c0 [ 2698.496519][T24339] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2698.502625][T24339] ? syscall_enter_from_user_mode+0x27/0x70 [ 2698.508558][T24339] do_syscall_64+0x3a/0xb0 [ 2698.513263][T24339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2698.519193][T24339] RIP: 0033:0x4196c4 [ 2698.523111][T24339] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2698.542836][T24339] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2698.551278][T24339] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2698.558585][ T33] audit: type=1804 audit(1623020445.231:59): pid=24351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343831342F48C7C060 dev="sda1" ino=15841 res=1 errno=0 23:00:45 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffa, 0x64a600) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/78) syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x840) [ 2698.559268][T24339] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2698.559289][T24339] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2698.559307][T24339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2698.559324][T24339] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2698.642210][ T33] audit: type=1804 audit(1623020445.231:60): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343737342F48C7C060 dev="sda1" ino=15650 res=0 errno=0 23:00:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/248) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/85) r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) write$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000001c0)) [ 2698.843799][T15081] usb 3-1: device descriptor read/64, error 18 [ 2698.873118][ T6374] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 2699.243226][ T6374] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2699.256299][ T6374] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2699.266188][ T6374] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2699.433637][ T6374] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2699.442708][ T6374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2699.450793][ T6374] usb 2-1: Product: syz [ 2699.455028][ T6374] usb 2-1: Manufacturer: syz [ 2699.459640][ T6374] usb 2-1: SerialNumber: syz 23:00:46 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:46 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x5) 23:00:46 executing program 0 (fault-call:1 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:46 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x58d, 0x400000) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x3, 0x1, 0x1000, 0x6, 0x7f, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x401c5820, &(0x7f0000000080)) 23:00:46 executing program 5: syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xd7, 0x46d, 0xc295, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xecc}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3f, 0x7, 0x40}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x20, 0x4, 0x40, 0x3}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x441}}, {0x8e, &(0x7f0000000100)=@string={0x8e, 0x3, "c2adcc9c29b84718456c1948a3689d227a953c07b2455f6c5f9f77b12dc6bff9f921e304f176f4af817296c2762baeaa7badcdf6c0716302ad908f59b0792f817a509aed06cae6be75fb97bb7d078d8792e8683f80fdca79e4c970f0555d4acf6dd98287928911651b85bf4c9b9c696912466629e16b03db88f1feed6a88571fe1221434001a045410cc5bab"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:00:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x60501) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x204000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/94) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x5452, &(0x7f0000000080)) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000700)=""/4096) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000140)=""/55) [ 2699.743252][ T6374] cdc_ncm 2-1:1.0: bind() failure [ 2699.751374][ T6374] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2699.758570][ T6374] cdc_ncm 2-1:1.1: bind() failure [ 2699.776267][T24373] FAULT_INJECTION: forcing a failure. [ 2699.776267][T24373] name failslab, interval 1, probability 0, space 0, times 0 [ 2699.788969][T24373] CPU: 1 PID: 24373 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2699.797761][T24373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2699.807843][T24373] Call Trace: [ 2699.811151][T24373] dump_stack+0x143/0x1db [ 2699.812676][ T6374] usb 2-1: USB disconnect, device number 5 [ 2699.815503][T24373] should_fail.cold+0x5/0xa [ 2699.815536][T24373] ? ima_alloc_init_template+0x199/0x750 [ 2699.815564][T24373] should_failslab+0x5/0x10 [ 2699.815589][T24373] __kmalloc+0x72/0x310 [ 2699.815614][T24373] ima_alloc_init_template+0x199/0x750 [ 2699.845642][T24373] ima_add_violation+0x115/0x3b0 [ 2699.850609][T24373] ? ima_store_template+0x140/0x140 [ 2699.855835][T24373] ? __d_path+0x160/0x160 [ 2699.860185][T24373] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2699.866480][T24373] process_measurement+0xb6a/0x17e0 [ 2699.871817][T24373] ? mmap_violation_check+0x1e0/0x1e0 [ 2699.877240][T24373] ? tomoyo_path_number_perm+0x590/0x590 [ 2699.882934][T24373] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2699.888940][T24373] ? find_held_lock+0x2d/0x110 [ 2699.893730][T24373] ? aa_get_task_label+0x25f/0x540 [ 2699.898865][T24373] ? lock_downgrade+0x6e0/0x6e0 [ 2699.903743][T24373] ? fsnotify+0x1070/0x1070 [ 2699.908271][T24373] ? ext4_file_write_iter+0x1980/0x1980 [ 2699.913847][T24373] ? path_get+0x5d/0x80 [ 2699.918026][T24373] ? aa_get_task_label+0x288/0x540 [ 2699.923251][T24373] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2699.929523][T24373] ? apparmor_task_getsecid+0xc2/0x110 [ 2699.935008][T24373] ima_file_check+0xb9/0x100 [ 2699.939628][T24373] ? process_measurement+0x17e0/0x17e0 [ 2699.945115][T24373] ? may_open+0x1f6/0x420 [ 2699.949474][T24373] path_openat+0x15b5/0x27e0 [ 2699.954096][T24373] ? path_lookupat+0x850/0x850 [ 2699.958901][T24373] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2699.964999][T24373] do_filp_open+0x190/0x3d0 [ 2699.969637][T24373] ? may_open_dev+0xf0/0xf0 [ 2699.974161][T24373] ? do_raw_spin_lock+0x120/0x2b0 [ 2699.979208][T24373] ? rwlock_bug.part.0+0x90/0x90 [ 2699.984164][T24373] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2699.990443][T24373] ? _find_next_bit+0x1e3/0x260 [ 2699.995316][T24373] ? _raw_spin_unlock+0x1a/0x30 [ 2700.000183][T24373] ? alloc_fd+0x2e6/0x660 [ 2700.004553][T24373] do_sys_openat2+0x16d/0x420 [ 2700.009297][T24373] ? build_open_flags+0x6f0/0x6f0 [ 2700.014344][T24373] ? __context_tracking_exit+0x9f/0xb0 [ 2700.019827][T24373] ? lock_downgrade+0x6e0/0x6e0 [ 2700.024787][T24373] __x64_sys_openat+0x13f/0x1f0 [ 2700.029665][T24373] ? __ia32_sys_open+0x1c0/0x1c0 [ 2700.034629][T24373] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 23:00:46 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x5) 23:00:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x80) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x200) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)=0x1) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x2000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x17, 0x9b, &(0x7f00000000c0)="cb4441c60502960e0dd728772f4d01cc8875787e96f819ffeefe6c7285b1fd7158fca5014e6cde7681ce50447d939ec71bc1d2f4062a404870d3f6075b2ee7c3327abab923ef31dc09af6dfdd5ff8bafd526f4410809ee34ff8512d6f2d6add0109e0fb80ee9d19c054d79228cb24f02a74ee43e38e040eb60f69aef0e08c6eecd0deb0411a43af9876ee005f81a477fccc658781df4217891017f"}) [ 2700.040641][T24373] ? syscall_enter_from_user_mode+0x27/0x70 [ 2700.046562][T24373] do_syscall_64+0x3a/0xb0 [ 2700.051002][T24373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2700.056949][T24373] RIP: 0033:0x4196c4 [ 2700.060968][T24373] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2700.080599][T24373] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2700.089045][T24373] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2700.097039][T24373] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2700.102424][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 2700.102440][ T33] audit: type=1804 audit(1623020446.771:63): pid=24392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343831362F48C7C060 dev="sda1" ino=15713 res=1 errno=0 23:00:46 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x5) 23:00:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x5, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) [ 2700.105157][T24373] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2700.105177][T24373] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2700.105194][T24373] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 23:00:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x401c5820, &(0x7f0000000040)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/178) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x10001, 0x400000) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000180)={{0x1, 0x1, 0x200, 0x3, 0x5c, 0x4}, 0x2fd, [0x7, 0x8000, 0x2, 0x80000001, 0x6, 0xc0, 0x5, 0x2, 0x6, 0x0, 0xfffffffc, 0xd6d, 0x6, 0x0, 0x9, 0x6, 0x3, 0x3ff, 0x1ff, 0x7, 0x6, 0x3f, 0x3, 0x800, 0x10001, 0x9, 0x8, 0x9, 0x5, 0x200, 0x3, 0x6d, 0x5, 0x900000, 0x2, 0x3f, 0x2, 0x8001, 0x4, 0xffff, 0x3, 0x8, 0xfffff801, 0xffffffff, 0xffff, 0x7, 0x2, 0x81, 0x800, 0xffffffff, 0x3f, 0x79f1, 0x862d, 0x8, 0x42580, 0x400, 0xffff4121, 0x9, 0x5, 0x1, 0x6, 0x6, 0x0, 0xd7ef, 0x0, 0x8001, 0x5, 0x0, 0x3ff, 0x3, 0xe19, 0x7, 0x7, 0x400, 0x3, 0x1ff, 0x4, 0x0, 0x2, 0x3, 0x3, 0x8001, 0x3, 0x0, 0x8, 0x6, 0x1, 0xfff, 0x97, 0x6, 0x9, 0x1, 0x80000001, 0xfffffc01, 0x0, 0x200, 0x0, 0xd, 0x6, 0x7, 0x2, 0x0, 0x7fff, 0x0, 0x0, 0xfffc0000, 0x2, 0x81, 0x0, 0x6, 0x9, 0x80000001, 0x4ac, 0x9, 0x80000001, 0x6, 0x1, 0x5adf, 0x0, 0x0, 0x4, 0x9, 0x0, 0x6, 0xfffffff7, 0xaf, 0x3, 0x9, 0x4, 0xffffffff, 0x20000, 0x1, 0x6, 0x3, 0x47b7aae3, 0xffff0001, 0x5, 0x401, 0x6, 0x8, 0x1, 0x4, 0x401, 0x38, 0xffffffff, 0x3, 0x1000, 0x4, 0x74bb, 0x5, 0x0, 0x3, 0x2, 0xfffff85f, 0xa2d, 0x3ff, 0x0, 0x9, 0x7, 0x78b, 0xff, 0x4, 0x2d, 0x7fffffff, 0x5, 0xfffffeb8, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x9c8, 0x5, 0x36, 0x6, 0xfffffffd, 0x1f, 0x0, 0x2, 0x0, 0x2, 0xffffffff, 0x937, 0x1f, 0x0, 0x10000, 0x3f, 0x6a14, 0x6, 0x6, 0x2, 0x0, 0x10000, 0x4, 0x100, 0x10000, 0x6, 0x4, 0xc7, 0x1, 0x4, 0x0, 0x4ba, 0x200, 0x9, 0x6b2f, 0x3, 0x2, 0x3ff, 0x9, 0x6, 0x16, 0xfffffffe, 0x1, 0xc9, 0x2, 0x8, 0x6, 0x40, 0x400, 0x258d1471, 0x2d76, 0xb0f, 0x80, 0x728, 0x7, 0x2775, 0x3, 0x101, 0x7fff, 0x2, 0x3, 0x7, 0xffff, 0x7fff, 0xfffffffc, 0x0, 0xca0, 0xffffffff, 0x8, 0x4, 0xc5, 0xffffffc1, 0x2, 0x1, 0x3, 0xffffffff, 0x200, 0x5, 0xfdb, 0x9, 0x81, 0x4, 0x4, 0xdb4, 0x9b, 0x7, 0x8000, 0xffffa313, 0x4, 0x1, 0x0, 0x8, 0x400, 0x8, 0xfffffeff, 0x7, 0x5, 0x7, 0x101, 0x7ff, 0x1, 0x0, 0x0, 0x7, 0x8, 0xba, 0x4, 0x0, 0x81, 0x8000, 0xcf, 0x1, 0x0, 0x48e36c8b, 0x5, 0x10000, 0x6, 0x7, 0x6, 0xe5e, 0x8, 0x10000, 0x101, 0x3ff, 0x6, 0x2, 0x0, 0x7f8, 0x8, 0x8, 0x1ff, 0x2, 0x101, 0x3, 0x4, 0x10000, 0x8, 0xfffffff9, 0x10000, 0x8, 0x8001, 0x5, 0x5, 0x6c, 0x2, 0xffffb46f, 0x20, 0x10000, 0xda2, 0x20, 0x7, 0x5, 0x80000000, 0x7, 0x7, 0x3, 0x1a3, 0xff, 0x189a, 0x1, 0x8000, 0x5, 0xec4b, 0x7, 0xbfe5, 0x1000, 0x2, 0x1000, 0x680, 0x5d98, 0x3, 0xd24, 0x3, 0x80000001, 0x714de88d, 0x0, 0x100, 0x8, 0x7, 0x26, 0x2, 0xd145, 0x101, 0x1, 0x7ff, 0x10000, 0x5, 0xffffffff, 0x0, 0x7, 0x5, 0x7, 0x8, 0x8, 0x6, 0x1694dcc7, 0x4, 0x8000, 0xce22, 0x1, 0x1000, 0x1, 0x4a, 0x3, 0x6, 0x1ff, 0x40, 0x5, 0x6d, 0x9, 0x100, 0x7fffffff, 0xffffffff, 0x3, 0x30, 0x6, 0x3, 0xcde, 0x4, 0x4, 0x3000000, 0x200, 0xb9d, 0x5, 0x7fff, 0x5, 0x7, 0x1, 0x5c2c, 0xfe, 0x10001, 0x0, 0x9, 0x6, 0x6, 0xfaee, 0x4, 0x80000001, 0x5, 0x2, 0xfff, 0x10000, 0x400, 0x400, 0x3, 0x566a1087, 0x6, 0x6, 0xaf8e1c3, 0x9, 0xffffffff, 0xffff8001, 0x5, 0x6, 0x3, 0x9, 0x3f, 0x8d6, 0x80000000, 0x1, 0xb2, 0x96, 0x3ff, 0x3, 0x1, 0x100, 0x8, 0x81, 0x1ff, 0xfffffffd, 0x5, 0x518, 0x4, 0x3, 0x10000, 0x80000000, 0x7fffffff, 0x9, 0x9, 0x27f2, 0x2291, 0x2, 0x6, 0x81, 0x0, 0x0, 0x8000, 0x3ff, 0x5, 0x7, 0x7, 0x8cd, 0x9, 0x9, 0x8, 0x28e7, 0x4a8, 0x3865524e, 0x3, 0x1439, 0x800, 0x3, 0x7, 0xddf, 0x80, 0x7, 0x7, 0xe5b2, 0x3, 0xfffffbff, 0x7, 0x329, 0x5, 0x6, 0x1ff, 0x6, 0x7fff, 0x7, 0x23, 0x7, 0x2, 0x4, 0x7ff00, 0x40, 0x5, 0x6, 0x3f, 0x1f, 0x7f, 0x10000, 0x8, 0x200, 0x6, 0x8, 0x3, 0x9, 0x6, 0x7, 0x1, 0xa5, 0x5, 0x73e, 0x7fffffff, 0x16b1, 0xa6, 0x0, 0xfffffff8, 0x8, 0x1, 0x0, 0x8, 0x8, 0xfffffffe, 0x5, 0x4, 0xfffffff8, 0x80000001, 0x1, 0x727, 0x851, 0x98, 0x8, 0xff, 0x4, 0x3, 0x6, 0x7, 0x903, 0xffffffff, 0x3, 0x7f, 0xffffffe0, 0x75d9, 0xfffffffa, 0x8, 0xeb6c, 0x971, 0x8000, 0x3, 0x9, 0x4, 0x4, 0xa46e, 0x55a, 0xa, 0x80000001, 0x100, 0x400, 0x9, 0x40000000, 0x7fff, 0x8, 0x2, 0x1, 0x2, 0x2, 0x8, 0x20, 0xfffffff8, 0x1, 0xfffffff9, 0x9, 0x4096, 0x1, 0x3, 0x4, 0x4, 0x0, 0x200, 0x200, 0x3, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3f, 0x55, 0x0, 0x2, 0xff, 0x0, 0x5, 0x101, 0x8001, 0x5000, 0x1, 0xffff, 0xfffffffc, 0x8, 0x5, 0x7, 0xff, 0x3, 0x2, 0x6, 0x80000001, 0x9, 0x8, 0x400, 0x5, 0x4, 0x8, 0x200, 0xb3, 0x3ff, 0x0, 0xf684, 0x100, 0x4ac, 0x7, 0x6, 0x9, 0x5, 0x0, 0x5, 0x4736, 0xffff0001, 0x81, 0x0, 0x8000, 0x6, 0x6918, 0x0, 0x4, 0x7, 0x5, 0x3, 0x0, 0x88b, 0xffffffff, 0x7, 0x37fb, 0x5, 0x6, 0x3, 0x1, 0x7fffffff, 0x1, 0x5, 0x7, 0x7fff, 0x8001, 0x8001, 0x4, 0x8, 0xec35, 0x3, 0x472c, 0x0, 0x8, 0x8, 0x3, 0x1000, 0xffff, 0x100, 0x80000001, 0x1, 0x7, 0x101, 0xf35, 0x5, 0x9, 0xfffffffa, 0x6, 0x8, 0x3, 0x1, 0x7, 0x2, 0x1000, 0x1f, 0x7fff, 0xfff, 0x8, 0xffffffff, 0x6, 0x20, 0x5, 0x0, 0x9, 0xfff, 0x4, 0x5, 0x8, 0x3, 0x5, 0x101, 0x4, 0x3, 0xc9, 0x1, 0x7ff, 0x1000, 0x8000, 0x4, 0xee, 0x5, 0x0, 0x4, 0x5, 0x80, 0x7, 0x4a5f, 0x10001, 0x0, 0x1f, 0x7, 0x3, 0x9, 0x800, 0x7f, 0x0, 0x1, 0xc, 0x4, 0xffff, 0xfffff000, 0x4, 0x1f, 0x1ff, 0x16e, 0x2, 0x6, 0xf3, 0xfffffffb, 0x38e2e105, 0x8, 0x100, 0xa324, 0x17c00, 0x200, 0x2, 0x4, 0xff, 0x7, 0x0, 0x2, 0x0, 0x400000, 0x4, 0x100, 0x20, 0x7, 0x31, 0x7, 0x7ff, 0xbe, 0x1, 0x8, 0x4, 0x7, 0x3, 0x80, 0x2, 0x0, 0x6, 0x6, 0x6, 0x3, 0x800, 0x10000, 0x401, 0x0, 0x3, 0x0, 0x0, 0x5, 0x6, 0xffff, 0x6, 0x8, 0xa4, 0xfffffffd, 0xda74, 0x80000001, 0x5, 0xff, 0x1f, 0x4, 0x9, 0xfffffff8, 0x10001, 0x8001, 0x7, 0xfff, 0xffff, 0x100, 0xe509, 0x3, 0x4, 0x9, 0x3b, 0x3, 0x2, 0x9, 0x3, 0x9, 0x3f, 0x3, 0x2, 0x363c087, 0xffffff46, 0x7, 0xffff, 0x101, 0x8, 0x8c75, 0x3, 0x2e3, 0x4, 0x2, 0x80, 0xfffffffd, 0x80, 0x1f, 0x8, 0x2, 0x5, 0x4, 0x0, 0x1ff, 0x8, 0x0, 0x9, 0x8, 0x80000001, 0x4, 0x7, 0x2, 0xff5, 0x56, 0x9, 0xfffffe00, 0x4, 0x200, 0xfff, 0x7fff, 0x0, 0xec8, 0x1000, 0xfff, 0x7, 0xffff0af9, 0x800, 0x6, 0x4, 0x7fffffff, 0xffffff01, 0x2, 0xfffffffb, 0x3, 0x60, 0x1, 0x3c, 0x0, 0x5, 0x8, 0x400, 0x8, 0x34b16dbe, 0x1c, 0x5, 0x1000, 0x9, 0x1, 0x0, 0x6fb, 0x5, 0x8, 0x9, 0x0, 0x7ff, 0x5, 0x800, 0x7, 0x7fffffff, 0xb792, 0x2, 0x37a, 0x8, 0x2, 0xf6000000, 0x7f, 0x7, 0x1ff, 0x0, 0x100, 0x9, 0xfffffe23, 0xcf, 0x20, 0x6, 0x6, 0xda39, 0x0, 0x1, 0x1, 0x7ca, 0x81, 0xbef, 0xb3c5, 0x0, 0x100, 0x4, 0x10000, 0x4, 0x5bca, 0x40, 0x6, 0x80000000, 0x9660, 0x7ff, 0x1, 0x7, 0x1f8c0, 0x5, 0xffff, 0xf0, 0x2, 0x2, 0xff, 0x33c5, 0x6, 0xeccd, 0x5, 0x1, 0x3ff, 0x659, 0x0, 0x81, 0x9ffc, 0x8, 0x20, 0xfffffffd, 0x2, 0xd4f1e73, 0x0, 0x400, 0x10001, 0x4000000, 0x7, 0x1, 0x7ff, 0x29d2, 0x6, 0x400, 0xffffffff, 0x6, 0x80000000, 0x1, 0x8, 0x8, 0xd3, 0x40, 0x0, 0x1, 0x5, 0x1, 0x80, 0x0, 0x80000001, 0x0, 0x682, 0x9, 0xae5, 0x9, 0xe000, 0x44630b88, 0x2, 0x7f, 0x8, 0x400, 0x6ce, 0x4, 0x3, 0x3, 0x8, 0x9, 0x102, 0x46, 0xb074, 0x1000, 0x2, 0xffff, 0x80000001, 0x10001, 0x10000, 0x6, 0x2, 0x7, 0x6, 0xc5, 0x3, 0x3ff, 0x6, 0x6, 0x400, 0x2, 0x2, 0x3ff, 0x4, 0x33f, 0xa71, 0x0, 0x0, 0x1, 0x7, 0x4, 0x80000000, 0x5, 0x5]}) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000011c0)=""/215) 23:00:46 executing program 0 (fault-call:1 fault-nth:9): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2700.195584][ T33] audit: type=1804 audit(1623020446.821:64): pid=24373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343737352F48C7C060 dev="sda1" ino=14411 res=0 errno=0 [ 2700.297481][T24404] FAULT_INJECTION: forcing a failure. [ 2700.297481][T24404] name failslab, interval 1, probability 0, space 0, times 0 [ 2700.298242][ T33] audit: type=1804 audit(1623020446.971:65): pid=24400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343831372F48C7C060 dev="sda1" ino=14412 res=1 errno=0 [ 2700.310212][T24404] CPU: 0 PID: 24404 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2700.348875][T24404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2700.358952][T24404] Call Trace: [ 2700.362248][T24404] dump_stack+0x143/0x1db [ 2700.366587][T24404] should_fail.cold+0x5/0xa [ 2700.371213][T24404] ? ima_write_template_field_data+0x47/0x1c0 [ 2700.377808][T24404] should_failslab+0x5/0x10 [ 2700.382695][T24404] __kmalloc+0x72/0x310 [ 2700.386907][T24404] ? ima_alloc_init_template+0x199/0x750 [ 2700.392650][T24404] ima_write_template_field_data+0x47/0x1c0 [ 2700.398654][T24404] ima_eventdigest_init_common+0xed/0x250 [ 2700.404476][T24404] ? ima_write_template_field_data+0x1c0/0x1c0 [ 2700.410756][T24404] ? lock_acquire+0x19d/0x700 [ 2700.415451][T24404] ? fs_reclaim_acquire+0xb2/0x160 [ 2700.420585][T24404] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2700.426151][T24404] ima_alloc_init_template+0x39e/0x750 [ 2700.431612][T24404] ima_add_violation+0x115/0x3b0 [ 2700.436548][T24404] ? ima_store_template+0x140/0x140 [ 2700.441748][T24404] ? __d_path+0x160/0x160 [ 2700.446088][T24404] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2700.452344][T24404] process_measurement+0xb6a/0x17e0 [ 2700.457542][T24404] ? mmap_violation_check+0x1e0/0x1e0 [ 2700.462915][T24404] ? tomoyo_path_number_perm+0x590/0x590 [ 2700.468565][T24404] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2700.474546][T24404] ? find_held_lock+0x2d/0x110 [ 2700.479548][T24404] ? aa_get_task_label+0x25f/0x540 [ 2700.484658][T24404] ? lock_downgrade+0x6e0/0x6e0 [ 2700.489512][T24404] ? fsnotify+0x1070/0x1070 [ 2700.494066][T24404] ? ext4_file_write_iter+0x1980/0x1980 [ 2700.499638][T24404] ? path_get+0x5d/0x80 [ 2700.503866][T24404] ? aa_get_task_label+0x288/0x540 [ 2700.508978][T24404] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2700.515314][T24404] ? apparmor_task_getsecid+0xc2/0x110 [ 2700.520800][T24404] ima_file_check+0xb9/0x100 [ 2700.525400][T24404] ? process_measurement+0x17e0/0x17e0 [ 2700.530874][T24404] ? may_open+0x1f6/0x420 [ 2700.535234][T24404] path_openat+0x15b5/0x27e0 [ 2700.539836][T24404] ? path_lookupat+0x850/0x850 [ 2700.544623][T24404] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2700.550620][T24404] do_filp_open+0x190/0x3d0 [ 2700.555121][T24404] ? may_open_dev+0xf0/0xf0 [ 2700.559617][T24404] ? do_raw_spin_lock+0x120/0x2b0 [ 2700.564631][T24404] ? rwlock_bug.part.0+0x90/0x90 [ 2700.569569][T24404] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2700.575806][T24404] ? _find_next_bit+0x1e3/0x260 [ 2700.580654][T24404] ? _raw_spin_unlock+0x1a/0x30 [ 2700.585507][T24404] ? alloc_fd+0x2e6/0x660 [ 2700.589870][T24404] do_sys_openat2+0x16d/0x420 [ 2700.594599][T24404] ? build_open_flags+0x6f0/0x6f0 [ 2700.599615][T24404] ? __context_tracking_exit+0x9f/0xb0 [ 2700.605097][T24404] ? lock_downgrade+0x6e0/0x6e0 [ 2700.609948][T24404] __x64_sys_openat+0x13f/0x1f0 [ 2700.614797][T24404] ? __ia32_sys_open+0x1c0/0x1c0 [ 2700.619915][T24404] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2700.625893][T24404] ? syscall_enter_from_user_mode+0x27/0x70 [ 2700.631784][T24404] do_syscall_64+0x3a/0xb0 [ 2700.636277][T24404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2700.642165][T24404] RIP: 0033:0x4196c4 [ 2700.646050][T24404] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2700.665658][T24404] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2700.674109][T24404] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2700.682078][T24404] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2700.690041][T24404] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2700.698093][T24404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2700.706153][T24404] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2700.718079][ T33] audit: type=1804 audit(1623020447.391:66): pid=24404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343737362F48C7C060 dev="sda1" ino=13976 res=0 errno=0 [ 2700.783011][ T6374] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 2701.153545][ T6374] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2701.162462][ T6374] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2701.172710][ T6374] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2701.181796][ T6374] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2701.353587][ T6374] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2701.362644][ T6374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2701.371178][ T6374] usb 2-1: Product: syz [ 2701.375580][ T6374] usb 2-1: Manufacturer: syz [ 2701.380289][ T6374] usb 2-1: SerialNumber: syz [ 2701.426559][ T6374] cdc_ncm 2-1:1.0: skipping garbage [ 2701.431820][ T6374] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 2701.438536][ T6374] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 2701.445750][ T6374] cdc_ncm 2-1:1.0: bind() failure 23:00:48 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:48 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x5) 23:00:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0xb741, 0x14000) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) 23:00:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x5) 23:00:48 executing program 0 (fault-call:1 fault-nth:10): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x1, 0x40, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "87"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1f, 0xdc, 0xfffc, 0x6}, {0x6, 0x24, 0x1a, 0x3f, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x30, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x20, 0x0, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x4, 0x5}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xe2, 0xf8, 0x71, 0xcf, 0x20}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x8, 0x0, 0x20, [0xc0f0, 0xc0, 0xfe8000, 0x3fe8]}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "8ace770e86a198aa7a314725ec290393"}, @ptm_cap={0x3}]}, 0x6, [{0x101, &(0x7f0000000100)=@string={0x101, 0x3, "baa86958a6accc6b7feaa0ced38dc68ba41c4d70642f5f8cad35fe57802b3a59d0884c25c82d3d63a62165ed14f2d8eb31626af462c36dd112779f0b9479a1bd7ff5f1549a9cf68da01abdba6301826ef4417a1b1f04f5db9a606580171e9a5fa8bf91957b2fde9e50e7efe505022da09086d8aadb16369a6374ca9212a06cbb3132ae0ccfddf1a451c94f8aebeb9d11837edd40432aacbe8ac5b73f0c9ca7fffd88635333b8d87e4fb6aae1b18582d6fbf917009824d06523658392cc47f85db0671496493e0cb814679e5c6976fc0657386ed685074c557ca79484fab7c0bb7b00b00dad3a1c99c5e5407d70af8cc70d0ed1def363a74c4ce5a5d2cc1f52"}}, {0x5d, &(0x7f0000000240)=@string={0x5d, 0x3, "c9aae4b3dfcbe72b077c65eb358d16e4671f1344b3c15ef38af598e0c0b303b44a8b985a42623f86489263431d59ef1cffd5270a6b2e864fad8271651317de386b0af0d976996ed286e6d8f0cf51aeac2e4905e8f1a65b93ea1603"}}, {0x88, &(0x7f00000002c0)=@string={0x88, 0x3, "6e2cb8a1ae17872d5e0d060fbbc89426411de5c33e251fe8cb2c5e08e1302f8a5320f4497eda937e23a28fa2c2c5d02f696723e2638ce34281a6090b25421a4186110bbd2bc61ca1b689943e52ebdedb97d8f1ab7dfe791f35da48be845e026a8966eb1b776e5fde926e3187a31f1578f2b18823c240e72a5a04494d1dd8839f61618e1f96c6"}}, {0x7e, &(0x7f0000000380)=@string={0x7e, 0x3, "d1f31f89ec385f9311d34395186fb752d464de247b5ebe990505f8f377cf92143c0a4c5f371e1980cb5371bc785d9de349fcc143b0573a1428502755f92d8724fdf465f72a897d279d2fbbf7662111b3068ca42d71a237ee0c9439a594d54f1a1cdf445e0425950d83e496d18d1254dd929938aa5559fbb585d29275"}}, {0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "f9ba22fc7dcdb965d6ad6e07589867d69808ed5c537e818ce5a41234dba3178f6b4b24914ec0f107c01ee628f8c45f0f98b41a6acb5ff4c4fc204646440415fd4d9f5d39467ceda61e914734c050e93cfee480590b757742936de47f21637ad8455c09de80bf014e8f4201727fff2a63b9512ce555e456daec11cbd315f716cdcbfb19c6c90e1f19e44e05124b6263ef595673bca410dee3c87d24479ef18e4dcd7bdfbca02f24bd6a898ac0bfc8f0c4a31ee3a8762ad19533f1cd26ef5aa33a826a98c9b8a49090d0e4ac4fb0ed429ffea472a564a617ed8370386816add8c1145d8221d449833af2390c72b4284c"}}, {0x8f, &(0x7f0000000500)=@string={0x8f, 0x3, "ae0949ec4fcbc1d909783f1220b01d12746c40694630850025ba92625bfc6e6c871527fcc81633b79abbdc85308724ed327b89ecba6bf4bfb64c082ba64983909b3e9a67a12ff16d0ed1b52f60476049b4d047e56a57b4315d47e183afe4edcb66fe1d9bbda5bea541c760a504920ac177f038b667b355afab806b5b0974e75cfe75097f2923c124140ea2ec29"}}]}) syz_usb_disconnect(r0) [ 2701.634702][T20128] usb 2-1: USB disconnect, device number 6 23:00:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x5) [ 2701.696775][ T33] audit: type=1804 audit(1623020448.371:67): pid=24423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343831382F48C7C060 dev="sda1" ino=14129 res=1 errno=0 [ 2701.745351][ T33] audit: type=1804 audit(1623020448.411:68): pid=24422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353034382F48C7C060 dev="sda1" ino=14161 res=1 errno=0 [ 2701.748319][T24424] FAULT_INJECTION: forcing a failure. [ 2701.748319][T24424] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.787992][T24424] CPU: 1 PID: 24424 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2701.796899][T24424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2701.806983][T24424] Call Trace: [ 2701.810284][T24424] dump_stack+0x143/0x1db [ 2701.814645][T24424] should_fail.cold+0x5/0xa [ 2701.819186][T24424] ? ima_write_template_field_data+0xeb/0x1c0 [ 2701.825316][T24424] should_failslab+0x5/0x10 [ 2701.829853][T24424] __kmalloc+0x72/0x310 [ 2701.834048][T24424] ima_write_template_field_data+0xeb/0x1c0 [ 2701.840100][T24424] ima_alloc_init_template+0x39e/0x750 [ 2701.845679][T24424] ima_add_violation+0x115/0x3b0 [ 2701.850741][T24424] ? ima_store_template+0x140/0x140 [ 2701.855976][T24424] ? __d_path+0x160/0x160 [ 2701.860335][T24424] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2701.866729][T24424] process_measurement+0xb6a/0x17e0 [ 2701.872071][T24424] ? mmap_violation_check+0x1e0/0x1e0 [ 2701.877480][T24424] ? tomoyo_path_number_perm+0x590/0x590 [ 2701.883152][T24424] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2701.889175][T24424] ? find_held_lock+0x2d/0x110 [ 2701.893994][T24424] ? aa_get_task_label+0x25f/0x540 [ 2701.899170][T24424] ? lock_downgrade+0x6e0/0x6e0 [ 2701.904058][T24424] ? fsnotify+0x1070/0x1070 [ 2701.908586][T24424] ? ext4_file_write_iter+0x1980/0x1980 [ 2701.914160][T24424] ? path_get+0x5d/0x80 [ 2701.918348][T24424] ? aa_get_task_label+0x288/0x540 [ 2701.920559][ T33] audit: type=1804 audit(1623020448.471:69): pid=24434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343831392F48C7C060 dev="sda1" ino=13986 res=1 errno=0 [ 2701.923481][T24424] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2701.923518][T24424] ? apparmor_task_getsecid+0xc2/0x110 [ 2701.923542][T24424] ima_file_check+0xb9/0x100 [ 2701.923566][T24424] ? process_measurement+0x17e0/0x17e0 [ 2701.975164][T24424] ? may_open+0x1f6/0x420 [ 2701.979525][T24424] path_openat+0x15b5/0x27e0 [ 2701.984262][T24424] ? path_lookupat+0x850/0x850 [ 2701.989059][T24424] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 23:00:48 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000140)=""/63) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/114) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x53, 0x9, 0x0, {0x2d, 0x1}, {0xfffe, 0x3c0c}, @const={0x401, {0x4006, 0x3, 0x5}}}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x7, 0x1, 0x200, 0x1, 0xf77, 0x4}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x6) 23:00:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2d6, 0x48440) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/5) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7fff, 0x640) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000001700)=""/4096) 23:00:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x5) [ 2701.995074][T24424] do_filp_open+0x190/0x3d0 [ 2701.999599][T24424] ? may_open_dev+0xf0/0xf0 [ 2702.004129][T24424] ? do_raw_spin_lock+0x120/0x2b0 [ 2702.009184][T24424] ? rwlock_bug.part.0+0x90/0x90 [ 2702.014152][T24424] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2702.020531][T24424] ? _find_next_bit+0x1e3/0x260 [ 2702.025415][T24424] ? _raw_spin_unlock+0x1a/0x30 [ 2702.030295][T24424] ? alloc_fd+0x2e6/0x660 [ 2702.034657][T24424] do_sys_openat2+0x16d/0x420 [ 2702.039364][T24424] ? build_open_flags+0x6f0/0x6f0 [ 2702.044424][T24424] ? __context_tracking_exit+0x9f/0xb0 [ 2702.049919][T24424] ? lock_downgrade+0x6e0/0x6e0 [ 2702.054466][ T33] audit: type=1804 audit(1623020448.471:70): pid=24440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343832302F48C7C060 dev="sda1" ino=14209 res=1 errno=0 [ 2702.054799][T24424] __x64_sys_openat+0x13f/0x1f0 [ 2702.054833][T24424] ? __ia32_sys_open+0x1c0/0x1c0 23:00:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xa, 0x5) [ 2702.054859][T24424] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2702.100524][T24424] ? syscall_enter_from_user_mode+0x27/0x70 [ 2702.106457][T24424] do_syscall_64+0x3a/0xb0 [ 2702.110904][T24424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2702.116928][T24424] RIP: 0033:0x4196c4 [ 2702.120842][T24424] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2702.133652][ T33] audit: type=1800 audit(1623020448.471:71): pid=24438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14161 res=0 errno=0 [ 2702.140482][T24424] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2702.140513][T24424] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2702.140531][T24424] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2702.140548][T24424] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 23:00:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x5) [ 2702.140564][T24424] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2702.199408][ T33] audit: type=1804 audit(1623020448.471:72): pid=24444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343832312F48C7C060 dev="sda1" ino=14226 res=1 errno=0 [ 2702.202045][T24424] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2702.353037][T12689] usb 6-1: new low-speed USB device number 108 using dummy_hcd [ 2702.562888][T20128] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 2702.623322][T12689] usb 6-1: Invalid ep0 maxpacket: 16 [ 2702.772948][T12689] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 2702.942929][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2702.954331][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2702.966568][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2702.976778][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2703.012943][T12689] usb 6-1: Invalid ep0 maxpacket: 16 [ 2703.018419][T12689] usb usb6-port1: attempt power cycle [ 2703.142885][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2703.152455][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.160535][T20128] usb 2-1: Product: syz [ 2703.164959][T20128] usb 2-1: Manufacturer: syz [ 2703.169576][T20128] usb 2-1: SerialNumber: syz [ 2703.194361][T24429] raw-gadget gadget: fail, usb_ep_enable returned -22 23:00:50 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:50 executing program 0 (fault-call:1 fault-nth:11): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:50 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000140)=""/63) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/114) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x53, 0x9, 0x0, {0x2d, 0x1}, {0xfffe, 0x3c0c}, @const={0x401, {0x4006, 0x3, 0x5}}}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x7, 0x1, 0x200, 0x1, 0xf77, 0x4}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x6) 23:00:50 executing program 2: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/10) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) 23:00:50 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x48, 0x5) [ 2703.453113][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2703.469448][T12689] usb 6-1: new low-speed USB device number 110 using dummy_hcd [ 2703.485708][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2703.492619][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2703.541740][T24462] FAULT_INJECTION: forcing a failure. [ 2703.541740][T24462] name failslab, interval 1, probability 0, space 0, times 0 [ 2703.548568][T20128] usb 2-1: USB disconnect, device number 7 [ 2703.555096][T24462] CPU: 0 PID: 24462 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2703.569785][T24462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2703.579869][T24462] Call Trace: [ 2703.583169][T24462] dump_stack+0x143/0x1db [ 2703.587552][T24462] should_fail.cold+0x5/0xa [ 2703.592091][T24462] ? ima_add_digest_entry+0x4e/0x510 [ 2703.597412][T24462] should_failslab+0x5/0x10 [ 2703.601948][T24462] kmem_cache_alloc_trace+0x55/0x2a0 [ 2703.607272][T24462] ima_add_digest_entry+0x4e/0x510 [ 2703.612424][T24462] ima_add_template_entry+0x581/0x790 [ 2703.617833][T24462] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2703.624129][T24462] ? ima_get_binary_runtime_size+0x40/0x40 [ 2703.629987][T24462] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2703.635744][T24462] ? ima_alloc_init_template+0x532/0x750 [ 2703.641416][T24462] ima_add_violation+0x16c/0x3b0 [ 2703.646406][T24462] ? ima_store_template+0x140/0x140 [ 2703.651660][T24462] ? __d_path+0x160/0x160 [ 2703.656021][T24462] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2703.662293][T24462] process_measurement+0xb6a/0x17e0 [ 2703.667635][T24462] ? mmap_violation_check+0x1e0/0x1e0 [ 2703.673038][T24462] ? tomoyo_path_number_perm+0x590/0x590 [ 2703.678726][T24462] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.684856][T24462] ? find_held_lock+0x2d/0x110 [ 2703.689744][T24462] ? aa_get_task_label+0x25f/0x540 [ 2703.694891][T24462] ? lock_downgrade+0x6e0/0x6e0 [ 2703.699885][T24462] ? fsnotify+0x1070/0x1070 [ 2703.704426][T24462] ? ext4_file_write_iter+0x1980/0x1980 [ 2703.710005][T24462] ? path_get+0x5d/0x80 [ 2703.713409][T12689] usb 6-1: Invalid ep0 maxpacket: 16 [ 2703.714196][T24462] ? aa_get_task_label+0x288/0x540 [ 2703.724688][T24462] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2703.730966][T24462] ? apparmor_task_getsecid+0xc2/0x110 [ 2703.736459][T24462] ima_file_check+0xb9/0x100 [ 2703.741073][T24462] ? process_measurement+0x17e0/0x17e0 [ 2703.746575][T24462] ? may_open+0x1f6/0x420 [ 2703.750940][T24462] path_openat+0x15b5/0x27e0 [ 2703.755566][T24462] ? path_lookupat+0x850/0x850 [ 2703.760597][T24462] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.766892][T24462] do_filp_open+0x190/0x3d0 [ 2703.771558][T24462] ? may_open_dev+0xf0/0xf0 [ 2703.776166][T24462] ? do_raw_spin_lock+0x120/0x2b0 [ 2703.781337][T24462] ? rwlock_bug.part.0+0x90/0x90 [ 2703.786292][T24462] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2703.792544][T24462] ? _find_next_bit+0x1e3/0x260 [ 2703.797412][T24462] ? _raw_spin_unlock+0x1a/0x30 [ 2703.802287][T24462] ? alloc_fd+0x2e6/0x660 [ 2703.806642][T24462] do_sys_openat2+0x16d/0x420 [ 2703.811341][T24462] ? build_open_flags+0x6f0/0x6f0 [ 2703.816362][T24462] ? __context_tracking_exit+0x9f/0xb0 [ 2703.821831][T24462] ? lock_downgrade+0x6e0/0x6e0 [ 2703.826704][T24462] __x64_sys_openat+0x13f/0x1f0 [ 2703.831559][T24462] ? __ia32_sys_open+0x1c0/0x1c0 [ 2703.836513][T24462] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2703.842514][T24462] ? syscall_enter_from_user_mode+0x27/0x70 [ 2703.848425][T24462] do_syscall_64+0x3a/0xb0 [ 2703.852835][T24462] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2703.858729][T24462] RIP: 0033:0x4196c4 [ 2703.862614][T24462] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2703.862817][T12689] usb 6-1: new low-speed USB device number 111 using dummy_hcd [ 2703.882257][T24462] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2703.882289][T24462] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2703.882305][T24462] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2703.882321][T24462] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2703.882336][T24462] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2703.882350][T24462] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2703.882753][T24462] ima: OUT OF MEMORY ERROR creating queue entry [ 2703.954707][T20128] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2703.983055][T12689] usb 6-1: Invalid ep0 maxpacket: 16 [ 2703.988681][T12689] usb usb6-port1: unable to enumerate USB device [ 2704.312804][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2704.324233][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2704.336946][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2704.346867][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2704.523270][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2704.532802][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2704.540936][T20128] usb 2-1: Product: syz [ 2704.545177][T20128] usb 2-1: Manufacturer: syz [ 2704.549786][T20128] usb 2-1: SerialNumber: syz [ 2704.574278][T24465] raw-gadget gadget: fail, usb_ep_enable returned -22 23:00:51 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x80000003, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x4, 0xffff01d7]) 23:00:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c, 0x5) 23:00:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/112) 23:00:51 executing program 0 (fault-call:1 fault-nth:12): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:51 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000140)=""/63) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/114) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x53, 0x9, 0x0, {0x2d, 0x1}, {0xfffe, 0x3c0c}, @const={0x401, {0x4006, 0x3, 0x5}}}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x7, 0x1, 0x200, 0x1, 0xf77, 0x4}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x6) [ 2704.742131][T24490] FAULT_INJECTION: forcing a failure. [ 2704.742131][T24490] name failslab, interval 1, probability 0, space 0, times 0 [ 2704.754884][T24490] CPU: 0 PID: 24490 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2704.763773][T24490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2704.773853][T24490] Call Trace: [ 2704.777153][T24490] dump_stack+0x143/0x1db [ 2704.781508][T24490] should_fail.cold+0x5/0xa [ 2704.786045][T24490] ? audit_log_start.part.0+0x27d/0x760 23:00:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x68, 0x5) 23:00:51 executing program 2: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000280)=""/200) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8001, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x157000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x57, 0x7fff, 0x0, {0x85, 0x5}, {0x6, 0x3}, @rumble={0x6, 0x8}}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000001c0)=[0x1, 0x8]) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000200)=""/128) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0xc0189436, &(0x7f0000000080)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000001700)=""/4096) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000700)=""/4096) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x4) [ 2704.791631][T24490] should_failslab+0x5/0x10 [ 2704.796169][T24490] kmem_cache_alloc+0x5b/0x360 [ 2704.800973][T24490] audit_log_start.part.0+0x27d/0x760 [ 2704.806509][T24490] ? audit_log_task_context+0x160/0x160 [ 2704.812258][T24490] ? audit_filter+0x319/0xb90 [ 2704.816962][T24490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2704.823236][T24490] ? integrity_audit_message+0x36b/0x430 [ 2704.828895][T24490] ? integrity_kernel_read+0xb0/0xb0 [ 2704.834208][T24490] ? audit_compare_dname_path+0x120/0x120 23:00:51 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c, 0x5) [ 2704.839955][T24490] audit_log_start+0x5f/0x90 [ 2704.844576][T24490] integrity_audit_message+0x100/0x430 [ 2704.850064][T24490] ? integrity_kernel_read+0xb0/0xb0 [ 2704.855377][T24490] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2704.861653][T24490] ? ima_get_binary_runtime_size+0x40/0x40 [ 2704.867487][T24490] integrity_audit_msg+0x3d/0x50 [ 2704.872446][T24490] ima_add_violation+0x19f/0x3b0 [ 2704.877544][T24490] ? ima_store_template+0x140/0x140 [ 2704.883136][T24490] ? __d_path+0x160/0x160 [ 2704.887489][T24490] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2704.893762][T24490] process_measurement+0xb6a/0x17e0 [ 2704.898992][T24490] ? mmap_violation_check+0x1e0/0x1e0 [ 2704.904390][T24490] ? tomoyo_path_number_perm+0x590/0x590 [ 2704.910053][T24490] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2704.913118][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2704.916062][T24490] ? find_held_lock+0x2d/0x110 [ 2704.916096][T24490] ? aa_get_task_label+0x25f/0x540 [ 2704.916125][T24490] ? lock_downgrade+0x6e0/0x6e0 [ 2704.934545][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found 23:00:51 executing program 5: syz_usb_connect$cdc_ecm(0x3, 0x18d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17b, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "18a35e412e"}, {0x5, 0x24, 0x0, 0x1c}, {0xd, 0x24, 0xf, 0x1, 0x48, 0x89f1, 0x1, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x1, 0x6, 0x8, 0x8, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x3f}, @obex={0x5, 0x24, 0x15, 0x20}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm_detail={0xef, 0x24, 0x13, 0x3, "78e087d6e2ffefdb3dd1e16a992064f4492bad163ea99ef9adf2ee5e40f97d1d5a7ae73053c30fd6a72d06351def7dca9e0f4cb9e9741e3aa043f54bf4403dc2daad1698518f1c51db6d20841cc67beadc2736b00d851c9f9b5a913e7f0dd950c9c6c0bebd9bbff56fb4ae672825d9dade2d3de71c595309e4109eecbab0d93aa5a0ee3120400573bd2cccd3074a61a9755de7dec91692198d324435bce2db8068545f2799aeb54fb97ff67810052cba13bea670a4f48c08758ec0198812c3098e2b3333791a2743a66c2c1919dd1865753debdaa0caeab52b3af88c9e029c36c7f1289302a10ed6c5ab80"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x5, 0x7ff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x20, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x1, 0xbb, 0x4, 0x40}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xd6, 0x81, 0xdf17, 0x34}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x407}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2704.935864][T24490] ? fsnotify+0x1070/0x1070 [ 2704.935914][T24490] ? ext4_file_write_iter+0x1980/0x1980 [ 2704.935942][T24490] ? path_get+0x5d/0x80 [ 2704.942763][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2704.947177][T24490] ? aa_get_task_label+0x288/0x540 [ 2704.967091][T24490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2704.973458][T24490] ? apparmor_task_getsecid+0xc2/0x110 [ 2704.978967][T24490] ima_file_check+0xb9/0x100 [ 2704.983604][T24490] ? process_measurement+0x17e0/0x17e0 [ 2704.989103][T24490] ? may_open+0x1f6/0x420 [ 2704.993478][T24490] path_openat+0x15b5/0x27e0 [ 2704.998102][T24490] ? path_lookupat+0x850/0x850 [ 2705.002901][T24490] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2705.008916][T24490] do_filp_open+0x190/0x3d0 [ 2705.013468][T24490] ? may_open_dev+0xf0/0xf0 [ 2705.019580][T24490] ? do_raw_spin_lock+0x120/0x2b0 [ 2705.024647][T24490] ? rwlock_bug.part.0+0x90/0x90 [ 2705.029617][T24490] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2705.035898][T24490] ? _find_next_bit+0x1e3/0x260 [ 2705.040920][T24490] ? _raw_spin_unlock+0x1a/0x30 [ 2705.044814][T20128] usb 2-1: USB disconnect, device number 8 [ 2705.045876][T24490] ? alloc_fd+0x2e6/0x660 [ 2705.045908][T24490] do_sys_openat2+0x16d/0x420 [ 2705.045935][T24490] ? build_open_flags+0x6f0/0x6f0 [ 2705.045961][T24490] ? __context_tracking_exit+0x9f/0xb0 [ 2705.071281][T24490] ? lock_downgrade+0x6e0/0x6e0 [ 2705.076242][T24490] __x64_sys_openat+0x13f/0x1f0 [ 2705.081124][T24490] ? __ia32_sys_open+0x1c0/0x1c0 [ 2705.086109][T24490] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2705.092125][T24490] ? syscall_enter_from_user_mode+0x27/0x70 [ 2705.098049][T24490] do_syscall_64+0x3a/0xb0 [ 2705.102497][T24490] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2705.108419][T24490] RIP: 0033:0x4196c4 [ 2705.112331][T24490] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2705.131966][T24490] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2705.140410][T24490] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2705.148409][T24490] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2705.156407][T24490] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2705.164407][T24490] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2705.172406][T24490] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2705.180716][T24490] audit_log_lost: 9 callbacks suppressed [ 2705.180731][T24490] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 2705.194275][T24490] audit: out of memory in audit_log_start [ 2705.216541][ T33] audit: type=1804 audit(1623020451.891:82): pid=24512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343832362F48C7C060 dev="sda1" ino=14082 res=1 errno=0 23:00:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x3, 0x3, 0x8, 0x80000001, "3ad0cad8cb2f2e22a00c823e03f9718901432516982d52d7d997af61f3cc5e89"}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x1038c2) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/186) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x2, 0x1000, 0x3, 0x1000, 0x1, 0x80000000}) 23:00:51 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000140)=""/63) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/114) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x53, 0x9, 0x0, {0x2d, 0x1}, {0xfffe, 0x3c0c}, @const={0x401, {0x4006, 0x3, 0x5}}}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x7, 0x1, 0x200, 0x1, 0xf77, 0x4}) 23:00:51 executing program 0 (fault-call:1 fault-nth:13): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x74, 0x5) [ 2705.322312][ T33] audit: type=1800 audit(1623020451.992:83): pid=24519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14033 res=0 errno=0 23:00:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a, 0x5) [ 2705.374877][T24524] FAULT_INJECTION: forcing a failure. [ 2705.374877][T24524] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.387810][T24524] CPU: 0 PID: 24524 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2705.396600][T24524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:00:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x30000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/124) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) [ 2705.406256][ T33] audit: type=1804 audit(1623020452.042:84): pid=24525 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343832372F48C7C060 dev="sda1" ino=14458 res=1 errno=0 [ 2705.406787][T24524] Call Trace: [ 2705.406799][T24524] dump_stack+0x143/0x1db [ 2705.444083][T24524] should_fail.cold+0x5/0xa [ 2705.448664][T24524] ? __alloc_skb+0x20b/0x340 [ 2705.453282][T24524] should_failslab+0x5/0x10 [ 2705.457879][T24524] kmem_cache_alloc_node+0x55/0x390 [ 2705.463202][T24524] __alloc_skb+0x20b/0x340 [ 2705.467797][T24524] audit_log_start.part.0+0x2a2/0x760 23:00:52 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/63) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/114) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x53, 0x9, 0x0, {0x2d, 0x1}, {0xfffe, 0x3c0c}, @const={0x401, {0x4006, 0x3, 0x5}}}) [ 2705.473221][T24524] ? audit_log_task_context+0x160/0x160 [ 2705.478799][T24524] ? audit_filter+0x319/0xb90 [ 2705.483503][T24524] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2705.490289][T24524] ? integrity_audit_message+0x36b/0x430 [ 2705.496062][T24524] ? integrity_kernel_read+0xb0/0xb0 [ 2705.501379][T24524] ? audit_compare_dname_path+0x120/0x120 [ 2705.507159][T24524] audit_log_start+0x5f/0x90 23:00:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0x5) [ 2705.509425][ T33] audit: type=1804 audit(1623020452.182:85): pid=24528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343832382F48C7C060 dev="sda1" ino=13903 res=1 errno=0 [ 2705.511770][T24524] integrity_audit_message+0x100/0x430 [ 2705.511802][T24524] ? integrity_kernel_read+0xb0/0xb0 [ 2705.511826][T24524] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2705.511856][T24524] ? ima_get_binary_runtime_size+0x40/0x40 [ 2705.564499][T24524] integrity_audit_msg+0x3d/0x50 [ 2705.569555][T24524] ima_add_violation+0x19f/0x3b0 [ 2705.574529][T24524] ? ima_store_template+0x140/0x140 [ 2705.579759][T24524] ? __d_path+0x160/0x160 [ 2705.584207][T24524] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2705.590476][T24524] process_measurement+0xb6a/0x17e0 [ 2705.595799][T24524] ? mmap_violation_check+0x1e0/0x1e0 23:00:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x5) [ 2705.600990][ T33] audit: type=1804 audit(1623020452.272:86): pid=24534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343832392F48C7C060 dev="sda1" ino=14450 res=1 errno=0 [ 2705.601219][T24524] ? tomoyo_path_number_perm+0x590/0x590 [ 2705.601256][T24524] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2705.633304][T20128] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 2705.636571][T24524] ? find_held_lock+0x2d/0x110 [ 2705.636606][T24524] ? aa_get_task_label+0x25f/0x540 [ 2705.659881][T24524] ? lock_downgrade+0x6e0/0x6e0 [ 2705.664942][T24524] ? fsnotify+0x1070/0x1070 [ 2705.669474][T24524] ? ext4_file_write_iter+0x1980/0x1980 [ 2705.675048][T24524] ? path_get+0x5d/0x80 [ 2705.679240][T24524] ? aa_get_task_label+0x288/0x540 [ 2705.684380][T24524] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2705.688668][ T33] audit: type=1800 audit(1623020452.362:87): pid=24532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13984 res=0 errno=0 [ 2705.690747][T24524] ? apparmor_task_getsecid+0xc2/0x110 [ 2705.690779][T24524] ima_file_check+0xb9/0x100 [ 2705.690804][T24524] ? process_measurement+0x17e0/0x17e0 [ 2705.727411][T24524] ? may_open+0x1f6/0x420 [ 2705.731773][T24524] path_openat+0x15b5/0x27e0 [ 2705.736414][T24524] ? path_lookupat+0x850/0x850 [ 2705.738657][ T33] audit: type=1804 audit(1623020452.412:88): pid=24537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343833302F48C7C060 dev="sda1" ino=14458 res=1 errno=0 [ 2705.741195][T24524] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2705.741235][T24524] do_filp_open+0x190/0x3d0 [ 2705.741260][T24524] ? may_open_dev+0xf0/0xf0 [ 2705.741282][T24524] ? do_raw_spin_lock+0x120/0x2b0 [ 2705.790919][T24524] ? rwlock_bug.part.0+0x90/0x90 [ 2705.795925][T24524] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2705.802194][T24524] ? _find_next_bit+0x1e3/0x260 [ 2705.807203][T24524] ? _raw_spin_unlock+0x1a/0x30 [ 2705.812052][T24524] ? alloc_fd+0x2e6/0x660 [ 2705.816470][T24524] do_sys_openat2+0x16d/0x420 [ 2705.821143][T24524] ? build_open_flags+0x6f0/0x6f0 [ 2705.826161][T24524] ? __context_tracking_exit+0x9f/0xb0 [ 2705.831636][T24524] ? lock_downgrade+0x6e0/0x6e0 [ 2705.836641][T24524] __x64_sys_openat+0x13f/0x1f0 [ 2705.841602][T24524] ? __ia32_sys_open+0x1c0/0x1c0 [ 2705.846554][T24524] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2705.852806][T24524] ? syscall_enter_from_user_mode+0x27/0x70 [ 2705.858722][T24524] do_syscall_64+0x3a/0xb0 [ 2705.863545][T24524] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2705.869881][T24524] RIP: 0033:0x4196c4 [ 2705.873856][T24524] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2705.893460][T24524] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2705.902172][T24524] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2705.910158][T24524] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2705.918145][T24524] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2705.926116][T24524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2705.934200][T24524] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2705.942450][T24524] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 2706.012764][ T6374] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2706.112716][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2706.124175][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2706.136391][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2706.146307][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2706.282634][ T6374] usb 6-1: Invalid ep0 maxpacket: 512 [ 2706.332873][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2706.342071][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.350126][T20128] usb 2-1: Product: syz [ 2706.354357][T20128] usb 2-1: Manufacturer: syz [ 2706.359102][T20128] usb 2-1: SerialNumber: syz [ 2706.384086][T24514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2706.432682][ T6374] usb 6-1: new high-speed USB device number 113 using dummy_hcd 23:00:53 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:53 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0x5) [ 2706.672787][ T6374] usb 6-1: Invalid ep0 maxpacket: 512 [ 2706.678363][ T6374] usb usb6-port1: attempt power cycle [ 2706.680162][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2706.699727][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2706.706848][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2706.726211][T20128] usb 2-1: USB disconnect, device number 9 [ 2707.092599][T20128] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 2707.102788][ T6374] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2707.192850][ T6374] usb 6-1: Invalid ep0 maxpacket: 512 [ 2707.352618][ T6374] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2707.452796][ T6374] usb 6-1: Invalid ep0 maxpacket: 512 [ 2707.458392][ T6374] usb usb6-port1: unable to enumerate USB device [ 2707.462670][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2707.475744][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2707.487393][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2707.497384][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2707.662755][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2707.671951][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2707.680192][T20128] usb 2-1: Product: syz [ 2707.684428][T20128] usb 2-1: Manufacturer: syz [ 2707.689299][T20128] usb 2-1: SerialNumber: syz [ 2707.714003][T24548] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2707.972679][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2707.981026][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2707.988201][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2707.996866][T20128] usb 2-1: USB disconnect, device number 10 23:00:54 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/95) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x381742) 23:00:54 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/63) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/114) 23:00:54 executing program 0 (fault-call:1 fault-nth:14): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:54 executing program 2: syz_open_dev$evdev(&(0x7f00000006c0), 0x10004, 0x400) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x521620) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xd1, 0x4c101) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x20000) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/98) 23:00:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x5) 23:00:54 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xa00, 0x5) [ 2708.128899][T24582] FAULT_INJECTION: forcing a failure. [ 2708.128899][T24582] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.141668][T24582] CPU: 0 PID: 24582 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2708.150483][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2708.160690][T24582] Call Trace: [ 2708.164087][T24582] dump_stack+0x143/0x1db [ 2708.168443][T24582] should_fail.cold+0x5/0xa [ 2708.172978][T24582] should_failslab+0x5/0x10 23:00:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x5) [ 2708.177608][T24582] __kmalloc_node_track_caller+0x7d/0x330 [ 2708.183372][T24582] ? audit_log_start.part.0+0x2a2/0x760 [ 2708.189132][T24582] __alloc_skb+0xde/0x340 [ 2708.193488][T24582] audit_log_start.part.0+0x2a2/0x760 [ 2708.198891][T24582] ? audit_log_task_context+0x160/0x160 [ 2708.204470][T24582] ? audit_filter+0x319/0xb90 [ 2708.209341][T24582] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2708.215616][T24582] ? integrity_audit_message+0x36b/0x430 [ 2708.221429][T24582] ? integrity_kernel_read+0xb0/0xb0 23:00:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0x5) [ 2708.226742][T24582] ? audit_compare_dname_path+0x120/0x120 [ 2708.232494][T24582] audit_log_start+0x5f/0x90 [ 2708.237226][T24582] integrity_audit_message+0x100/0x430 [ 2708.242736][T24582] ? integrity_kernel_read+0xb0/0xb0 [ 2708.248052][T24582] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2708.254334][T24582] ? ima_get_binary_runtime_size+0x40/0x40 [ 2708.260173][T24582] integrity_audit_msg+0x3d/0x50 [ 2708.265133][T24582] ima_add_violation+0x19f/0x3b0 [ 2708.270202][T24582] ? ima_store_template+0x140/0x140 [ 2708.275431][T24582] ? __d_path+0x160/0x160 [ 2708.279789][T24582] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2708.286065][T24582] process_measurement+0xb6a/0x17e0 [ 2708.291292][T24582] ? mmap_violation_check+0x1e0/0x1e0 [ 2708.296782][T24582] ? tomoyo_path_number_perm+0x590/0x590 [ 2708.302452][T24582] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.308469][T24582] ? find_held_lock+0x2d/0x110 [ 2708.313266][T24582] ? aa_get_task_label+0x25f/0x540 [ 2708.318408][T24582] ? lock_downgrade+0x6e0/0x6e0 [ 2708.323288][T24582] ? fsnotify+0x1070/0x1070 23:00:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0x5) 23:00:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc3, 0xb29c1fb03ac58e10) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/42) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2708.327815][T24582] ? ext4_file_write_iter+0x1980/0x1980 [ 2708.333388][T24582] ? path_get+0x5d/0x80 [ 2708.337572][T24582] ? aa_get_task_label+0x288/0x540 [ 2708.342816][T24582] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2708.349088][T24582] ? apparmor_task_getsecid+0xc2/0x110 [ 2708.354580][T24582] ima_file_check+0xb9/0x100 [ 2708.359202][T24582] ? process_measurement+0x17e0/0x17e0 [ 2708.364683][T24582] ? may_open+0x1f6/0x420 [ 2708.369045][T24582] path_openat+0x15b5/0x27e0 [ 2708.373662][T24582] ? path_lookupat+0x850/0x850 [ 2708.378465][T24582] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.384647][T24582] do_filp_open+0x190/0x3d0 [ 2708.389177][T24582] ? may_open_dev+0xf0/0xf0 [ 2708.393701][T24582] ? do_raw_spin_lock+0x120/0x2b0 [ 2708.398766][T24582] ? rwlock_bug.part.0+0x90/0x90 [ 2708.403733][T24582] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2708.410218][T24582] ? _find_next_bit+0x1e3/0x260 [ 2708.415096][T24582] ? _raw_spin_unlock+0x1a/0x30 [ 2708.419970][T24582] ? alloc_fd+0x2e6/0x660 [ 2708.424333][T24582] do_sys_openat2+0x16d/0x420 23:00:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4800, 0x5) 23:00:55 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/61) [ 2708.429046][T24582] ? build_open_flags+0x6f0/0x6f0 [ 2708.434101][T24582] ? __context_tracking_exit+0x9f/0xb0 [ 2708.439582][T24582] ? lock_downgrade+0x6e0/0x6e0 [ 2708.444636][T24582] __x64_sys_openat+0x13f/0x1f0 [ 2708.449517][T24582] ? __ia32_sys_open+0x1c0/0x1c0 [ 2708.454483][T24582] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2708.460502][T24582] ? syscall_enter_from_user_mode+0x27/0x70 [ 2708.466524][T24582] do_syscall_64+0x3a/0xb0 [ 2708.470967][T24582] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2708.477062][T24582] RIP: 0033:0x4196c4 [ 2708.480971][T24582] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2708.500601][T24582] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2708.509045][T24582] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2708.517038][T24582] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2708.525029][T24582] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2708.533015][T24582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2708.541162][T24582] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 23:00:55 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/63) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) 23:00:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c00, 0x5) 23:00:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x7, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) 23:00:55 executing program 0 (fault-call:1 fault-nth:15): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2708.678202][T24612] FAULT_INJECTION: forcing a failure. [ 2708.678202][T24612] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.691032][T24612] CPU: 0 PID: 24612 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2708.699925][T24612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2708.710001][T24612] Call Trace: [ 2708.713282][T24612] dump_stack+0x143/0x1db [ 2708.717635][T24612] should_fail.cold+0x5/0xa [ 2708.722270][T24612] ? aa_label_snxprint+0x4e4/0x910 [ 2708.727382][T24612] ? aa_label_asxprint+0x86/0x130 [ 2708.732441][T24612] should_failslab+0x5/0x10 [ 2708.737112][T24612] __kmalloc+0x72/0x310 [ 2708.741262][T24612] aa_label_asxprint+0x86/0x130 [ 2708.746187][T24612] apparmor_secid_to_secctx+0x84/0x150 [ 2708.751851][T24612] security_secid_to_secctx+0x6c/0xb0 [ 2708.757547][T24612] audit_log_task_context+0xec/0x160 [ 2708.762923][T24612] ? audit_log_format+0x110/0x110 [ 2708.767946][T24612] ? from_kuid+0x85/0xc0 [ 2708.772183][T24612] integrity_audit_message+0x250/0x430 [ 2708.777638][T24612] ? integrity_kernel_read+0xb0/0xb0 [ 2708.782941][T24612] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2708.789299][T24612] ? ima_get_binary_runtime_size+0x40/0x40 [ 2708.795289][T24612] integrity_audit_msg+0x3d/0x50 [ 2708.800222][T24612] ima_add_violation+0x19f/0x3b0 [ 2708.805154][T24612] ? ima_store_template+0x140/0x140 [ 2708.810347][T24612] ? __d_path+0x160/0x160 [ 2708.814683][T24612] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2708.821242][T24612] process_measurement+0xb6a/0x17e0 [ 2708.826645][T24612] ? mmap_violation_check+0x1e0/0x1e0 [ 2708.832176][T24612] ? tomoyo_path_number_perm+0x590/0x590 [ 2708.837812][T24612] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.843799][T24612] ? find_held_lock+0x2d/0x110 [ 2708.848666][T24612] ? aa_get_task_label+0x25f/0x540 [ 2708.853804][T24612] ? lock_downgrade+0x6e0/0x6e0 [ 2708.858662][T24612] ? fsnotify+0x1070/0x1070 [ 2708.863212][T24612] ? ext4_file_write_iter+0x1980/0x1980 [ 2708.868885][T24612] ? path_get+0x5d/0x80 [ 2708.873060][T24612] ? aa_get_task_label+0x288/0x540 [ 2708.878164][T24612] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2708.884401][T24612] ? apparmor_task_getsecid+0xc2/0x110 [ 2708.890004][T24612] ima_file_check+0xb9/0x100 [ 2708.894606][T24612] ? process_measurement+0x17e0/0x17e0 [ 2708.900055][T24612] ? may_open+0x1f6/0x420 [ 2708.904564][T24612] path_openat+0x15b5/0x27e0 [ 2708.909158][T24612] ? path_lookupat+0x850/0x850 [ 2708.913911][T24612] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.920100][T24612] do_filp_open+0x190/0x3d0 [ 2708.924595][T24612] ? may_open_dev+0xf0/0xf0 [ 2708.929085][T24612] ? do_raw_spin_lock+0x120/0x2b0 [ 2708.934278][T24612] ? rwlock_bug.part.0+0x90/0x90 [ 2708.939209][T24612] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2708.945444][T24612] ? _find_next_bit+0x1e3/0x260 [ 2708.950288][T24612] ? _raw_spin_unlock+0x1a/0x30 [ 2708.955151][T24612] ? alloc_fd+0x2e6/0x660 [ 2708.959474][T24612] do_sys_openat2+0x16d/0x420 [ 2708.964151][T24612] ? build_open_flags+0x6f0/0x6f0 [ 2708.969280][T24612] ? __context_tracking_exit+0x9f/0xb0 [ 2708.974745][T24612] ? lock_downgrade+0x6e0/0x6e0 [ 2708.979717][T24612] __x64_sys_openat+0x13f/0x1f0 [ 2708.984567][T24612] ? __ia32_sys_open+0x1c0/0x1c0 [ 2708.989697][T24612] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2708.995674][T24612] ? syscall_enter_from_user_mode+0x27/0x70 [ 2709.001559][T24612] do_syscall_64+0x3a/0xb0 [ 2709.006007][T24612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2709.011982][T24612] RIP: 0033:0x4196c4 [ 2709.015907][T24612] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2709.035595][T24612] RSP: 002b:00007f0baa8b6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2709.044015][T24612] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2709.052138][T24612] RDX: 0000000000000006 RSI: 00007f0baa8b6d60 RDI: 00000000ffffff9c [ 2709.060102][T24612] RBP: 00007f0baa8b6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2709.068074][T24612] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2709.076052][T24612] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 [ 2709.302434][T20128] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 2709.663017][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2709.674482][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2709.685915][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2709.695896][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2709.862944][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2709.872163][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2709.880236][T20128] usb 2-1: Product: syz [ 2709.884468][T20128] usb 2-1: Manufacturer: syz [ 2709.889214][T20128] usb 2-1: SerialNumber: syz [ 2709.913913][T24585] raw-gadget gadget: fail, usb_ep_enable returned -22 23:00:56 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:56 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x341000) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10040) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0xff, 0x82f, 0x4, 0x5, 0x4646a5da, 0xfffffffa}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5a4d08d70c83b3ff, 0x24, &(0x7f00000000c0)="a01c203d4c52bde82ac23f275ff93089456023200c8ea5c2fc802bebdf1b7e75c1c822e7"}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/76) 23:00:56 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/63) syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) 23:00:56 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6800, 0x5) 23:00:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f00000000c0), 0x11, 0x101040) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/88) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x0, 0x7]) 23:00:56 executing program 0 (fault-call:1 fault-nth:16): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2710.182535][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2710.203617][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2710.210626][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2710.215941][ T33] kauditd_printk_skb: 15 callbacks suppressed [ 2710.215956][ T33] audit: type=1800 audit(1623020456.882:100): pid=24625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14578 res=0 errno=0 [ 2710.273978][T20128] usb 2-1: USB disconnect, device number 11 23:00:57 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/63) 23:00:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/98) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x1fd, 0x701841) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/34) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x80c03) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001700)=""/4062) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/7) [ 2710.297012][ T33] audit: type=1804 audit(1623020456.972:101): pid=24633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343833392F48C7C060 dev="sda1" ino=14738 res=1 errno=0 [ 2710.331632][T24634] FAULT_INJECTION: forcing a failure. [ 2710.331632][T24634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2710.344851][T24634] CPU: 0 PID: 24634 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0 [ 2710.353648][T24634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2710.363728][T24634] Call Trace: [ 2710.367026][T24634] dump_stack+0x143/0x1db [ 2710.371425][T24634] should_fail.cold+0x5/0xa [ 2710.375965][T24634] _copy_to_user+0x2c/0x150 [ 2710.380501][T24634] simple_read_from_buffer+0xcc/0x160 [ 2710.385904][T24634] proc_fail_nth_read+0x187/0x220 [ 2710.390961][T24634] ? proc_sessionid_read+0x220/0x220 23:00:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c00, 0x5) [ 2710.391565][ T33] audit: type=1804 audit(1623020457.002:102): pid=24634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343738332F48C7C060 dev="sda1" ino=14754 res=1 errno=0 [ 2710.396270][T24634] ? security_file_permission+0x248/0x560 [ 2710.396312][T24634] ? proc_sessionid_read+0x220/0x220 [ 2710.396341][T24634] vfs_read+0x1b5/0x570 [ 2710.396368][T24634] ksys_read+0x12d/0x250 [ 2710.426569][ T33] audit: type=1800 audit(1623020457.022:103): pid=24643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14464 res=0 errno=0 [ 2710.431985][T24634] ? vfs_write+0x9e0/0x9e0 [ 2710.432015][T24634] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2710.432047][T24634] ? syscall_enter_from_user_mode+0x27/0x70 [ 2710.432074][T24634] do_syscall_64+0x3a/0xb0 [ 2710.487692][T24634] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2710.493626][T24634] RIP: 0033:0x41935c [ 2710.497540][T24634] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 23:00:57 executing program 5: ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/140) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x141440) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:00:57 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) [ 2710.517293][T24634] RSP: 002b:00007f0baa8b7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2710.525743][T24634] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000041935c [ 2710.533735][T24634] RDX: 000000000000000f RSI: 00007f0baa8b71e0 RDI: 0000000000000004 [ 2710.541740][T24634] RBP: 00007f0baa8b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.549735][T24634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.557730][T24634] R13: 00007fff0005f97f R14: 00007f0baa8b7300 R15: 0000000000022000 23:00:57 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/88) [ 2710.652235][ T33] audit: type=1804 audit(1623020457.322:104): pid=24655 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343834302F48C7C060 dev="sda1" ino=14292 res=1 errno=0 [ 2710.708871][ T33] audit: type=1800 audit(1623020457.362:105): pid=24657 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14530 res=0 errno=0 [ 2710.852347][T20128] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 2711.212838][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2711.223882][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2711.235328][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2711.245440][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2711.422794][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2711.431885][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2711.439956][T20128] usb 2-1: Product: syz [ 2711.444182][T20128] usb 2-1: Manufacturer: syz [ 2711.448776][T20128] usb 2-1: SerialNumber: syz [ 2711.474179][T24629] raw-gadget gadget: fail, usb_ep_enable returned -22 23:00:58 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x7}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:58 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:00:58 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7400, 0x5) 23:00:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ea, 0x2) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x80000001, 0x1c12]) 23:00:58 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) 23:00:58 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2711.742737][T20128] cdc_ncm 2-1:1.0: bind() failure 23:00:58 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2711.763758][ T33] audit: type=1800 audit(1623020458.442:106): pid=24673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14642 res=0 errno=0 [ 2711.798190][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2711.805139][T20128] cdc_ncm 2-1:1.1: bind() failure 23:00:58 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x6) 23:00:58 executing program 5: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/81) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x101000) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x210180) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x7, 0x20000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000140)={0x57, 0x7f, 0x40, {0x8, 0x8c9e}, {0x8, 0x40}, @const={0xd8d, {0x200, 0x2346, 0x0, 0x9}}}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0xe, 0x5, 0x7fff, "1f6afc8aa00b134566cb8ae3b8009cf069d8beab37974340e93d56b47c412e14"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2711.843267][T20128] usb 2-1: USB disconnect, device number 12 23:00:58 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00, 0x5) 23:00:58 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:00:58 executing program 2: ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/127) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0xc0189436, &(0x7f0000000080)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0xffffff01, 0x1, 0xee66, 0x6, 0x4, 0x7}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0xfffffffffffffff8, 0x200000) read$hidraw(0xffffffffffffffff, &(0x7f0000000140)=""/202, 0xca) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x442) write$hidraw(r2, &(0x7f0000000000)="c9", 0xfffffdef) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000240)="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") ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000080)={0x3, 0x100, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x400000) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001240)=""/4096) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x1) [ 2711.903631][ T33] audit: type=1804 audit(1623020458.442:107): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343738342F48C7C060 dev="sda1" ino=14625 res=1 errno=0 [ 2712.108393][ T33] audit: type=1804 audit(1623020458.542:108): pid=24675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343834312F48C7C060 dev="sda1" ino=14642 res=1 errno=0 [ 2712.140830][ T33] audit: type=1800 audit(1623020458.602:109): pid=24690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14495 res=0 errno=0 [ 2712.252296][T20128] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 2712.612825][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2712.624047][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2712.636135][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2712.646046][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2712.822754][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2712.832309][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2712.840615][T20128] usb 2-1: Product: syz [ 2712.844822][T20128] usb 2-1: Manufacturer: syz [ 2712.849408][T20128] usb 2-1: SerialNumber: syz [ 2712.874055][T24680] raw-gadget gadget: fail, usb_ep_enable returned -22 23:00:59 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x5) 23:00:59 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x0) 23:00:59 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:00:59 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x6) 23:00:59 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:00:59 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00, 0x5) [ 2713.135369][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2713.152347][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2713.159235][T20128] cdc_ncm 2-1:1.1: bind() failure 23:00:59 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa840) 23:00:59 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0x5) [ 2713.229188][T20128] usb 2-1: USB disconnect, device number 13 23:00:59 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x5) 23:00:59 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x6) 23:01:00 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:00 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x3, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:00 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x6) 23:01:00 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x5) 23:01:00 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x6) [ 2713.682219][T20128] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 2714.062724][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2714.073882][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2714.086026][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2714.095882][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2714.272672][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2714.281776][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.289855][T20128] usb 2-1: Product: syz [ 2714.294093][T20128] usb 2-1: Manufacturer: syz [ 2714.298828][T20128] usb 2-1: SerialNumber: syz [ 2714.323565][T24723] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:01 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:01 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/131) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x480000) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/178) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8400) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000200)=[0xff]) 23:01:01 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x3, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:01 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:01 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x6) 23:01:01 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x5) [ 2714.602342][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2714.623986][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2714.630911][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:01 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x5) [ 2714.675657][T20128] usb 2-1: USB disconnect, device number 14 23:01:01 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:01 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x6) 23:01:01 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x3, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:01 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x200) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/157) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x14800) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/120) 23:01:01 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2715.092120][T20128] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 2715.452583][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2715.463747][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2715.475268][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2715.485205][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2715.652744][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2715.662056][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.670119][T20128] usb 2-1: Product: syz [ 2715.674327][T20128] usb 2-1: Manufacturer: syz [ 2715.678979][T20128] usb 2-1: SerialNumber: syz [ 2715.713208][T24771] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:02 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x300}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:02 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x5) 23:01:02 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/68) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/228) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x2) 23:01:02 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x5) 23:01:02 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x3, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x6) [ 2715.984917][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2716.027160][ T33] kauditd_printk_skb: 24 callbacks suppressed [ 2716.027177][ T33] audit: type=1804 audit(1623020462.702:134): pid=24809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343834382F48C7C060 dev="sda1" ino=15601 res=1 errno=0 [ 2716.034478][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2716.070630][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:02 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x5) 23:01:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x6) 23:01:02 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000003, 0x101640) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/62) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:02 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x3, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:02 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x5) [ 2716.233409][ T33] audit: type=1800 audit(1623020462.702:135): pid=24808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=15617 res=0 errno=0 [ 2716.245234][T20128] usb 2-1: USB disconnect, device number 15 23:01:03 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x5) [ 2716.385270][ T33] audit: type=1804 audit(1623020462.782:136): pid=24813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343739312F48C7C060 dev="sda1" ino=15666 res=1 errno=0 [ 2716.443004][ T33] audit: type=1800 audit(1623020462.792:137): pid=24808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=15617 res=0 errno=0 [ 2716.466821][ T33] audit: type=1804 audit(1623020462.842:138): pid=24815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353036382F48C7C060 dev="sda1" ino=15730 res=1 errno=0 [ 2716.502614][ T33] audit: type=1804 audit(1623020462.952:139): pid=24825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343834392F48C7C060 dev="sda1" ino=15601 res=1 errno=0 [ 2716.533500][ T33] audit: type=1804 audit(1623020462.952:140): pid=24823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343739322F48C7C060 dev="sda1" ino=15585 res=1 errno=0 [ 2716.563982][ T33] audit: type=1804 audit(1623020463.092:141): pid=24838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353036392F48C7C060 dev="sda1" ino=14408 res=1 errno=0 [ 2716.594150][ T33] audit: type=1804 audit(1623020463.152:142): pid=24840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343835302F48C7C060 dev="sda1" ino=15441 res=1 errno=0 [ 2716.682025][T20128] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 2717.042885][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2717.053999][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2717.065471][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2717.075337][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2717.242445][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2717.251544][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2717.259619][T20128] usb 2-1: Product: syz [ 2717.263868][T20128] usb 2-1: Manufacturer: syz [ 2717.268479][T20128] usb 2-1: SerialNumber: syz [ 2717.293393][T24816] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:04 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x500}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0x6) 23:01:04 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1, 0x4, 0x3, 0x2, "8a076fba533fd608a020c0802593174d23a8ac06e835c62a3f022f07bc235d83"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x4401) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/241) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x5, 0x200800) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x4, 0xaf, &(0x7f0000000200)="e81f5af348e6c0be3230d235ade9b7cbb7da4e2d9d7197c8883f448a60a387953c4fe465bd72694ed8e7dea367b2c88029fabb5242ad0d9043f5a0ecd32550a8e74154eb55329e4fd12fcb3721488cf4267599b565c19a7cdad993d45ee10303b8208cd9098d10c013035847b4b38f1c777714327495fa10c59cf569a79ee5550cb13d6592c4a0fe61254f14f609702bffd3e3064e74212442525335d17441ad4d02bb2c4170e6dbcb01a551381ce3"}) 23:01:04 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x3, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:04 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000003, 0x101640) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/62) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:04 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x5) [ 2717.562292][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2717.570915][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2717.577895][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x6) [ 2717.637001][ T33] audit: type=1804 audit(1623020464.312:143): pid=24857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343739332F48C7C060 dev="sda1" ino=15985 res=1 errno=0 [ 2717.678310][T20128] usb 2-1: USB disconnect, device number 16 23:01:04 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xa000000, 0x5) 23:01:04 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x3, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:04 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x840) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:04 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x6) 23:01:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0x6) [ 2718.121894][T20128] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 2718.481950][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2718.493095][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2718.504408][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2718.514278][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2718.682473][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2718.691650][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2718.699699][T20128] usb 2-1: Product: syz [ 2718.704145][T20128] usb 2-1: Manufacturer: syz [ 2718.708765][T20128] usb 2-1: SerialNumber: syz [ 2718.733344][T24862] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:05 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x600}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x5) 23:01:05 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:05 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xa000000, 0x5) 23:01:05 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x88080) 23:01:05 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x6) [ 2719.003641][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2719.028629][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2719.035571][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2719.100676][T20128] usb 2-1: USB disconnect, device number 17 23:01:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0x5) 23:01:05 executing program 2: syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:05 executing program 5: read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:05 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x6) 23:01:05 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x6) 23:01:06 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2719.561811][T20128] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 2719.922259][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2719.933511][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2719.945011][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2719.955187][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2720.122603][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2720.131923][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2720.139951][T20128] usb 2-1: Product: syz [ 2720.144178][T20128] usb 2-1: Manufacturer: syz [ 2720.148805][T20128] usb 2-1: SerialNumber: syz [ 2720.173330][T24905] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:07 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x700}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:07 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x400) 23:01:07 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x6) 23:01:07 executing program 3: read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:07 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0x5) 23:01:07 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2720.432697][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2720.446227][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2720.453393][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2720.535340][T20128] usb 2-1: USB disconnect, device number 18 23:01:07 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0x6) 23:01:07 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:07 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x48000000, 0x5) 23:01:07 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2203) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x600002) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x100, 0x9]) 23:01:07 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x5) 23:01:07 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2721.041702][T20128] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 2721.412184][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2721.423219][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2721.434490][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2721.444408][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2721.622224][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2721.631508][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.639601][T20128] usb 2-1: Product: syz [ 2721.643855][T20128] usb 2-1: Manufacturer: syz [ 2721.648460][T20128] usb 2-1: SerialNumber: syz [ 2721.673130][T24957] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:08 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1800}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:08 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x16, 0xc, &(0x7f00000000c0)="9b843ee81b19ef2f6941d738"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x15, 0x6b, &(0x7f0000000000)="b52701e7453f5d28b8934c64d84e6e5bec0720e5c7f921d3c0900533f3556cf6bb510e59588b5d9d0ea0af05e632668c23aa642e88bf65e4afc70740cf6f53acdfb4351b32b52918e14c11be51d156ba2cca7ad9affce4eb39c428ebf69d8649051469ddfc10304d96b6fc"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:08 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c000000, 0x5) 23:01:08 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x6) 23:01:08 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x840) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:08 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2721.943790][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2721.987402][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2721.994331][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:08 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2722.042004][ T33] kauditd_printk_skb: 23 callbacks suppressed [ 2722.042023][ T33] audit: type=1804 audit(1623020468.723:167): pid=24987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343830302F48C7C060 dev="sda1" ino=16761 res=1 errno=0 23:01:08 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x6) [ 2722.100106][T20128] usb 2-1: USB disconnect, device number 19 23:01:08 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x68000000, 0x5) 23:01:08 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x6) 23:01:08 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x7ff7ffffffffff, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x3f, 0x100, 0x6}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:08 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x6) [ 2722.233181][ T33] audit: type=1804 audit(1623020468.763:168): pid=24990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343835372F48C7C060 dev="sda1" ino=16373 res=1 errno=0 [ 2722.306308][ T33] audit: type=1804 audit(1623020468.913:169): pid=25007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343830312F48C7C060 dev="sda1" ino=13839 res=1 errno=0 [ 2722.362469][ T33] audit: type=1804 audit(1623020468.963:170): pid=25008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343835382F48C7C060 dev="sda1" ino=16383 res=1 errno=0 [ 2722.411715][ T33] audit: type=1804 audit(1623020469.073:171): pid=25012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353037372F48C7C060 dev="sda1" ino=15719 res=1 errno=0 [ 2722.442174][ T33] audit: type=1804 audit(1623020469.093:172): pid=25015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343830322F48C7C060 dev="sda1" ino=15723 res=1 errno=0 [ 2722.641653][T20128] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 2723.002206][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2723.013619][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2723.026435][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2723.036555][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2723.222076][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2723.231545][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2723.239685][T20128] usb 2-1: Product: syz [ 2723.243933][T20128] usb 2-1: Manufacturer: syz [ 2723.248605][T20128] usb 2-1: SerialNumber: syz [ 2723.273602][T25001] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:10 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1f00}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:10 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:10 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c000000, 0x5) 23:01:10 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101e40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:10 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x6) 23:01:10 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x7ff7ffffffffff, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x3f, 0x100, 0x6}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2723.542381][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2723.559890][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2723.566981][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:10 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1c00000000, 0x101740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x210a00) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/133) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) syz_open_dev$evdev(&(0x7f0000000200), 0x3ff, 0x80) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000100)=""/229) [ 2723.648554][ T33] audit: type=1804 audit(1623020470.323:173): pid=25032 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343830332F48C7C060 dev="sda1" ino=16374 res=1 errno=0 [ 2723.660739][T20128] usb 2-1: USB disconnect, device number 20 23:01:10 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:10 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x6) 23:01:10 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x74000000, 0x5) 23:01:10 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2723.751682][ T33] audit: type=1800 audit(1623020470.363:174): pid=25030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=16768 res=0 errno=0 23:01:10 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x6) [ 2723.877279][ T33] audit: type=1804 audit(1623020470.373:175): pid=25031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343835392F48C7C060 dev="sda1" ino=16767 res=1 errno=0 [ 2723.975465][ T33] audit: type=1804 audit(1623020470.513:176): pid=25043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343830342F48C7C060 dev="sda1" ino=16379 res=1 errno=0 [ 2724.201512][T20128] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 2724.562062][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2724.573362][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2724.584772][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2724.594608][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2724.771558][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2724.780799][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2724.788915][T20128] usb 2-1: Product: syz [ 2724.793271][T20128] usb 2-1: Manufacturer: syz [ 2724.797873][T20128] usb 2-1: SerialNumber: syz [ 2724.822915][T25037] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:11 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x2000}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x6) 23:01:11 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:11 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x10000ffff, 0x0) 23:01:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a000000, 0x5) 23:01:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x74000000, 0x5) [ 2725.081803][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2725.114221][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2725.121136][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xa1ffffff, 0x5) 23:01:11 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a000000, 0x5) [ 2725.215468][T20128] usb 2-1: USB disconnect, device number 21 23:01:12 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x6) 23:01:12 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/51) 23:01:12 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x10000ffff, 0x0) 23:01:12 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0x5) [ 2725.621430][T20128] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 2725.992002][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2726.003325][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2726.015564][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2726.025404][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2726.201916][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2726.211171][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2726.219349][T20128] usb 2-1: Product: syz [ 2726.223603][T20128] usb 2-1: Manufacturer: syz [ 2726.228315][T20128] usb 2-1: SerialNumber: syz [ 2726.252908][T25079] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:13 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0x5) 23:01:13 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/36) 23:01:13 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x6) 23:01:13 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x4000}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:13 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/51) 23:01:13 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a000000, 0x5) [ 2726.524061][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2726.560904][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2726.567983][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:13 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0x5) 23:01:13 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/226) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2726.681098][T20128] usb 2-1: USB disconnect, device number 22 23:01:13 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0x6) 23:01:13 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x74000000, 0x5) 23:01:13 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x5) 23:01:13 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2d8, 0x300) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/183) 23:01:13 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0x6) [ 2727.111343][T20128] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 2727.472134][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2727.483528][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2727.495065][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2727.505396][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2727.691832][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2727.701342][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2727.710058][T20128] usb 2-1: Product: syz [ 2727.714529][T20128] usb 2-1: Manufacturer: syz [ 2727.719371][T20128] usb 2-1: SerialNumber: syz [ 2727.743091][T25121] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:14 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0xff00}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:14 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:14 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x6) 23:01:14 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffff7f, 0x5) 23:01:14 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0x240) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffd, 0x20000) 23:01:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x6) [ 2728.022883][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2728.047602][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2728.054559][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:14 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x5) [ 2728.102519][T20128] usb 2-1: USB disconnect, device number 23 [ 2728.141496][ T33] kauditd_printk_skb: 18 callbacks suppressed [ 2728.141514][ T33] audit: type=1804 audit(1623020474.823:195): pid=25162 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343831302F48C7C060 dev="sda1" ino=16377 res=1 errno=0 23:01:14 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x3, 0xf, 0x1, 0x1, "7e765afddbc467e49a43c1957dffabd4a4b5e410245cf87d8ea1fdb69d56539b"}) 23:01:14 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x6) 23:01:14 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffa1, 0x5) [ 2728.297386][ T33] audit: type=1804 audit(1623020474.823:196): pid=25163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353134302F48C7C060 dev="sda1" ino=16375 res=1 errno=0 23:01:15 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0x6) [ 2728.457913][ T33] audit: type=1804 audit(1623020475.033:197): pid=25178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353038362F48C7C060 dev="sda1" ino=16373 res=1 errno=0 [ 2728.489379][ T33] audit: type=1804 audit(1623020475.033:198): pid=25183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343831312F48C7C060 dev="sda1" ino=16383 res=1 errno=0 [ 2728.521103][ T33] audit: type=1804 audit(1623020475.063:199): pid=25184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343836372F48C7C060 dev="sda1" ino=16782 res=1 errno=0 [ 2728.551334][ T33] audit: type=1800 audit(1623020475.073:200): pid=25187 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=14470 res=0 errno=0 [ 2728.573110][ T33] audit: type=1804 audit(1623020475.123:201): pid=25189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343831322F48C7C060 dev="sda1" ino=15755 res=1 errno=0 [ 2728.701273][T20128] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 2729.081812][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2729.093324][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2729.105046][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2729.114884][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2729.281791][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2729.290999][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2729.299079][T20128] usb 2-1: Product: syz [ 2729.303343][T20128] usb 2-1: Manufacturer: syz [ 2729.307933][T20128] usb 2-1: SerialNumber: syz [ 2729.332685][T25175] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:16 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x6) 23:01:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x5) 23:01:16 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000002700)=""/4098) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xfffff1bd, 0x5b7cd0b5, 0x20, 0x7fffffff, 0x80000000, 0x5a1}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x6) 23:01:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2729.601909][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2729.634455][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2729.641427][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2729.672607][ T33] audit: type=1804 audit(1623020476.353:202): pid=25204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343836382F48C7C060 dev="sda1" ino=16381 res=1 errno=0 [ 2729.683359][T20128] usb 2-1: USB disconnect, device number 24 23:01:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0x5) 23:01:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x5) 23:01:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/203) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x5) [ 2729.832365][ T33] audit: type=1804 audit(1623020476.403:203): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353038372F48C7C060 dev="sda1" ino=16384 res=1 errno=0 23:01:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000002700)=""/4098) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xfffff1bd, 0x5b7cd0b5, 0x20, 0x7fffffff, 0x80000000, 0x5a1}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0x6) [ 2729.908755][ T33] audit: type=1800 audit(1623020476.433:204): pid=25207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=16788 res=0 errno=0 [ 2730.151196][T20128] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 2730.511649][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2730.522847][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2730.533766][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2730.543687][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2730.721634][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2730.731114][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2730.739219][T20128] usb 2-1: Product: syz [ 2730.743493][T20128] usb 2-1: Manufacturer: syz [ 2730.748305][T20128] usb 2-1: SerialNumber: syz [ 2730.782468][T25210] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:17 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:17 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x8, 0xd7, 0x8000, 0xfffffff9, 0x80, 0xffffff7f}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x4, 0x7f, &(0x7f0000000000)="eabad13e1562e6c81b1e8c4fdf496482e5fd8bbb9349367a71e574c597d3f3155a3a81b9972066aad6e8ee602723e1a7d562aeb0756683b53323d695df08ae1a4095dc98c95899946f49dd37896fd0870ff6685e0c052948e87b47d6afcc30674417612c7f397f1c087614a97804be0a2f0788991bccee5b7cada2bc3fed76"}) 23:01:17 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0x6) 23:01:17 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffa1, 0x5) 23:01:17 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0x6) 23:01:17 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0x5) [ 2731.041219][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2731.049870][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2731.057094][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2731.166024][T20128] usb 2-1: USB disconnect, device number 25 23:01:17 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x52, 0x1f, 0x1, {0x6, 0x4}, {0xb1, 0x4}, @const={0x3, {0x7, 0x400, 0xb45, 0xff81}}}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/252) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/96) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/44) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000200)=0xfffffffc) 23:01:17 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0x5) 23:01:17 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x400) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x4093) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x3, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:01:17 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0x6) 23:01:18 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x6) 23:01:18 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x69a5, 0x638a80) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/28) [ 2731.621062][T20128] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 2731.981566][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2731.992961][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2732.004693][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2732.015156][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2732.181784][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2732.191383][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2732.199497][T20128] usb 2-1: Product: syz [ 2732.203961][T20128] usb 2-1: Manufacturer: syz [ 2732.208567][T20128] usb 2-1: SerialNumber: syz [ 2732.232539][T25259] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:19 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:19 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0x6) 23:01:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0x5) 23:01:19 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x0) 23:01:19 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x1, 0xff, 0x0, 0x6792, 0x8, 0x2}) 23:01:19 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2732.501371][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2732.509846][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2732.516803][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:19 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0x6) 23:01:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0x5) [ 2732.616766][T20128] usb 2-1: USB disconnect, device number 26 23:01:19 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/151) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/74) 23:01:19 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0x6) 23:01:19 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x0) 23:01:19 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) [ 2733.060998][T20128] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 2733.421012][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2733.432079][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2733.443406][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2733.453267][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2733.621470][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2733.631181][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2733.639335][T20128] usb 2-1: Product: syz [ 2733.643731][T20128] usb 2-1: Manufacturer: syz [ 2733.648526][T20128] usb 2-1: SerialNumber: syz [ 2733.682216][T25304] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:20 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0x5) 23:01:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0x6) 23:01:20 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x402) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0x31, &(0x7f0000000040)="2f80b7c45ac960dce981de6466a6927e0159bc45feb33867200fa8cc0a7d387c5e96c2ec96d3394d17cdeda4fbbb9f0b87"}) 23:01:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6800, 0x5) 23:01:20 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x167640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/63) syz_open_dev$evdev(&(0x7f00000006c0), 0x4, 0x101400) [ 2733.952623][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2733.974023][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2733.981509][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2734.029256][ T33] kauditd_printk_skb: 21 callbacks suppressed [ 2734.029272][ T33] audit: type=1804 audit(1623020480.703:226): pid=25335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343832302F48C7C060 dev="sda1" ino=16380 res=1 errno=0 [ 2734.050864][T20128] usb 2-1: USB disconnect, device number 27 23:01:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x6) 23:01:20 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000008000, 0x218201) 23:01:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0x6) 23:01:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0x5) [ 2734.181980][ T33] audit: type=1804 audit(1623020480.763:227): pid=25341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353039332F48C7C060 dev="sda1" ino=16799 res=1 errno=0 23:01:20 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0x5) 23:01:21 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x400040) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/251) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/50) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2734.333450][ T33] audit: type=1800 audit(1623020480.773:228): pid=25339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=16376 res=0 errno=0 [ 2734.404093][ T33] audit: type=1804 audit(1623020480.983:229): pid=25357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343832312F48C7C060 dev="sda1" ino=16375 res=1 errno=0 [ 2734.461609][ T33] audit: type=1804 audit(1623020481.043:230): pid=25360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343837362F48C7C060 dev="sda1" ino=16048 res=1 errno=0 [ 2734.492249][ T33] audit: type=1804 audit(1623020481.073:231): pid=25361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353039342F48C7C060 dev="sda1" ino=16045 res=1 errno=0 [ 2734.523437][ T33] audit: type=1804 audit(1623020481.083:232): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353134392F48C7C060 dev="sda1" ino=14555 res=1 errno=0 [ 2734.670873][T20128] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 2735.031343][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2735.042527][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2735.054006][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2735.064096][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2735.251602][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2735.260886][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.268883][T20128] usb 2-1: Product: syz [ 2735.273100][T20128] usb 2-1: Manufacturer: syz [ 2735.277723][T20128] usb 2-1: SerialNumber: syz [ 2735.312012][T25350] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:22 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0x6) 23:01:22 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x6) 23:01:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0x5) 23:01:22 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/95) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x381742) 23:01:22 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/54) [ 2735.601811][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2735.624745][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2735.631793][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2735.691275][ T33] audit: type=1804 audit(1623020482.363:233): pid=25384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343837372F48C7C060 dev="sda1" ino=16383 res=1 errno=0 [ 2735.692170][T20128] usb 2-1: USB disconnect, device number 28 23:01:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x5) 23:01:22 executing program 5: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/183) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1337c1) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0x6) 23:01:22 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/95) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x381742) [ 2735.830849][ T33] audit: type=1804 audit(1623020482.423:234): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343832322F48C7C060 dev="sda1" ino=16801 res=1 errno=0 23:01:22 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x400040) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/251) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/50) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xa00000000000000, 0x5) [ 2735.882056][ T33] audit: type=1804 audit(1623020482.453:235): pid=25383 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353039352F48C7C060 dev="sda1" ino=16382 res=1 errno=0 [ 2736.220810][T20128] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 2736.591378][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2736.602525][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2736.613948][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2736.623769][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2736.801302][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2736.810363][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2736.818700][T20128] usb 2-1: Product: syz [ 2736.822936][T20128] usb 2-1: Manufacturer: syz [ 2736.827533][T20128] usb 2-1: SerialNumber: syz [ 2736.861932][T25389] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:23 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0x5) 23:01:23 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0x6) 23:01:23 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x400040) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/251) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/50) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:23 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000100)=""/69) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xf7a2, 0x20280) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000200)=[0xc253, 0x5]) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000180)=0xb8) r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x7, 0x200102) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000340)=""/164) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x48000) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000080)={0x1156f776, 0x81, 0x9, 0x20, 0xc9, 0xf074}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x40100) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f00000001c0)={0x6, 0x5, 0x2, 0xfffffffe, 0x81, 0x4}) r6 = syz_open_dev$evdev(&(0x7f0000000400), 0x9, 0x708c0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000440)=""/122) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000002c0)={0x54, 0xd5, 0x9840, {0x4, 0x6}, {0x3, 0x3}, @period={0x5d, 0x40, 0x1ff, 0x101, 0x9, {0x5, 0x1, 0x5, 0x7}, 0x7, &(0x7f0000000280)=[0xf68, 0x1f, 0x63, 0x2, 0xfffa, 0x3, 0x7f]}}) 23:01:23 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0x6) [ 2737.131399][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2737.160586][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2737.167841][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:23 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x5) 23:01:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x5) 23:01:23 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0x6) 23:01:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0x5) [ 2737.258792][T20128] usb 2-1: USB disconnect, device number 29 23:01:24 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0xfffff000, 0x200008, 0x9, 0x7, 0x7ffffffd, 0x59}) 23:01:24 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a, 0x5) [ 2737.640683][T20128] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 2738.011221][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2738.022448][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2738.034083][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2738.043917][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2738.211201][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2738.220527][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2738.228585][T20128] usb 2-1: Product: syz [ 2738.233294][T20128] usb 2-1: Manufacturer: syz [ 2738.238007][T20128] usb 2-1: SerialNumber: syz [ 2738.262193][T25430] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:25 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x7}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0x5) 23:01:25 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0x5) 23:01:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0x6) 23:01:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x74, 0x5) 23:01:25 executing program 5: syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0xe1, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f80a096ac2"}, {0x5, 0x24, 0x0, 0xd3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x1, 0x4731}, @country_functional={0x10, 0x24, 0x7, 0xfa, 0x200, [0x8001, 0x0, 0x6, 0x4, 0x0]}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0xff, 0x8b}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x1, 0xf2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x1, 0x7f}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x141, 0x1, 0x20, 0x20, 0x40, 0xe5}, 0x41, &(0x7f0000000100)={0x5, 0xf, 0x41, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xe4, 0xb2, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x8, 0x0, 0xfff, [0x3f30, 0xfffe80, 0x30, 0xc0c0]}, @generic={0x13, 0x10, 0x2, "9ae06cd4d34f39eb20a81cc19f2f48f4"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x413}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000200)={0x0, 0x5, 0x3, 0x8, "082a0117e3b0b9a1eaa1d91aa6cbd369e9ca2b75d11ffb38736425faa2ef8dd9"}) [ 2738.530896][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2738.550254][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2738.557187][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:25 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0x5) 23:01:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4800000000000000, 0x5) 23:01:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4) 23:01:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x74, 0x5) [ 2738.642491][T20128] usb 2-1: USB disconnect, device number 30 23:01:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c00000000000000, 0x5) 23:01:25 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c, 0x5) [ 2739.010627][T20128] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 2739.371067][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2739.382109][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2739.393626][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2739.403599][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2739.581123][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2739.590302][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.598367][T20128] usb 2-1: Product: syz [ 2739.602705][T20128] usb 2-1: Manufacturer: syz [ 2739.607309][T20128] usb 2-1: SerialNumber: syz [ 2739.632062][T25472] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:26 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10) 23:01:26 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4) 23:01:26 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6800000000000000, 0x5) 23:01:26 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x5) 23:01:26 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xeb8e3c76f0945628) [ 2739.891990][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2739.916743][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2739.923757][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2739.952198][ T33] kauditd_printk_skb: 20 callbacks suppressed 23:01:26 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c00000000000000, 0x5) 23:01:26 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x5) [ 2739.952215][ T33] audit: type=1804 audit(1623020486.634:256): pid=25513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343838352F48C7C060 dev="sda1" ino=14787 res=1 errno=0 23:01:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:01:26 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x5d, 0x80) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000001700)=""/102) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/228) [ 2740.035945][T20128] usb 2-1: USB disconnect, device number 31 23:01:26 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4) 23:01:26 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7400000000000000, 0x5) [ 2740.127507][ T33] audit: type=1804 audit(1623020486.634:257): pid=25512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353135372F48C7C060 dev="sda1" ino=14835 res=1 errno=0 [ 2740.222907][ T33] audit: type=1804 audit(1623020486.764:258): pid=25520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343838362F48C7C060 dev="sda1" ino=14577 res=1 errno=0 [ 2740.274188][ T33] audit: type=1804 audit(1623020486.864:259): pid=25533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353135382F48C7C060 dev="sda1" ino=14561 res=1 errno=0 [ 2740.304519][ T33] audit: type=1804 audit(1623020486.944:260): pid=25536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343838372F48C7C060 dev="sda1" ino=13888 res=1 errno=0 [ 2740.470565][T20128] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 2740.840598][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2740.851663][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2740.863092][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2740.873222][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2741.041101][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2741.050160][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2741.058519][T20128] usb 2-1: Product: syz [ 2741.062881][T20128] usb 2-1: Manufacturer: syz [ 2741.067484][T20128] usb 2-1: SerialNumber: syz [ 2741.091945][T25515] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:28 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x1ff, 0x8200) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001180)=""/24) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000180)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x379, 0x103083) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/230) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x8006) 23:01:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:01:28 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x6, 0x1f, 0x4, 0x3f, "59a7ddd926f36e2899318c0c006e57e6a353cc3069a68e9e9a257ffd500c310e"}) 23:01:28 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/51) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00000000000000, 0x5) [ 2741.372109][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2741.384055][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2741.391060][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2741.421504][ T33] audit: type=1804 audit(1623020488.104:261): pid=25549 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343838382F48C7C060 dev="sda1" ino=15009 res=1 errno=0 [ 2741.470855][T20128] usb 2-1: USB disconnect, device number 32 23:01:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xa1ffffff00000000, 0x5) 23:01:28 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) 23:01:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00000000000000, 0x5) 23:01:28 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x6, 0x1f, 0x4, 0x3f, "59a7ddd926f36e2899318c0c006e57e6a353cc3069a68e9e9a257ffd500c310e"}) 23:01:28 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/216) [ 2741.588011][ T33] audit: type=1804 audit(1623020488.164:262): pid=25554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343833302F48C7C060 dev="sda1" ino=15108 res=1 errno=0 23:01:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0x5) [ 2741.720514][ T33] audit: type=1804 audit(1623020488.234:263): pid=25568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343833302F48C7C060 dev="sda1" ino=15108 res=1 errno=0 [ 2741.775153][ T33] audit: type=1804 audit(1623020488.314:264): pid=25573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343838392F48C7C060 dev="sda1" ino=14865 res=1 errno=0 [ 2741.805462][ T33] audit: type=1804 audit(1623020488.344:265): pid=25575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353136302F48C7C060 dev="sda1" ino=14977 res=1 errno=0 [ 2741.910458][T20128] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 2742.271207][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2742.282605][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2742.293757][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2742.303654][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2742.470959][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2742.480222][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2742.488260][T20128] usb 2-1: Product: syz [ 2742.492496][T20128] usb 2-1: Manufacturer: syz [ 2742.497132][T20128] usb 2-1: SerialNumber: syz [ 2742.521869][T25557] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:29 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0xf, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:29 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x100, 0x222801) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000240)=""/81) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x10001, 0x41) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x8, 0x6]) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000200)={0x40, 0x17, 0x7, 0x4, "005df023ebc259bfa4a3c14bba6adff3c8a80c01bf6e18a84a5722cc78fa4687"}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff7ffffffc, 0x3ad402) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000040)=""/187) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000100)=""/248) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000340)=""/122) 23:01:29 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0x5fd5, 0x4, 0xe68, 0x200, 0x0, 0xc80000}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/156) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/50) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:29 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00000000000000, 0x5) 23:01:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0x5) 23:01:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x6, 0x1f, 0x4, 0x3f, "59a7ddd926f36e2899318c0c006e57e6a353cc3069a68e9e9a257ffd500c310e"}) [ 2742.790486][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2742.825532][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2742.832494][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0x5) 23:01:29 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0x602300) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000100)={0xffff, 0xf3, 0x9, 0x97, 0x3, 0x8}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/206) 23:01:29 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00000000000000, 0x5) [ 2742.902006][T20128] usb 2-1: USB disconnect, device number 33 23:01:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0x5) 23:01:29 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/132) 23:01:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffff7f00000000, 0x5) [ 2743.310379][T20128] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 2743.671028][T20128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2743.681811][T20128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2743.692281][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2743.703664][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2743.870828][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2743.880103][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2743.888162][T20128] usb 2-1: Product: syz [ 2743.892399][T20128] usb 2-1: Manufacturer: syz [ 2743.896999][T20128] usb 2-1: SerialNumber: syz [ 2743.921768][T25598] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2743.941655][T20128] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 2743.948685][T20128] cdc_ncm 2-1:1.0: bind() failure 23:01:30 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x10, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:30 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffffffffdf, 0x200800) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/149) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000140)=""/4096) 23:01:30 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) 23:01:30 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0x5) 23:01:30 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4f3c, 0x309000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/21) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x181000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/146) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:30 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x0) [ 2744.152392][T20128] usb 2-1: USB disconnect, device number 34 23:01:30 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) 23:01:31 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4) 23:01:31 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x4, 0x1, 0x0, 0x3f, 0xd1c, 0x5}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000040)=""/105) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:31 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x6) 23:01:31 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) 23:01:31 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) [ 2744.710250][T20128] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 2745.070740][T20128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2745.081083][T20128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2745.089992][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2745.101009][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2745.280776][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2745.290186][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2745.298194][T20128] usb 2-1: Product: syz [ 2745.302438][T20128] usb 2-1: Manufacturer: syz [ 2745.307053][T20128] usb 2-1: SerialNumber: syz [ 2745.331758][T25650] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2745.351034][T20128] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 2745.358374][T20128] cdc_ncm 2-1:1.0: bind() failure 23:01:32 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000080)="5df2f47a673409244fb6a7eceb2114b27aad29165cff0f4a3991470c7baea3319f5f87a07bead13c4ac437abc552c2744affdbc68eb404f0989b9ad506091b1efdf42d7d37a0cf15c05f05933bb5b690ee01fa80b02ffd3de989b566dc720eb7", 0x60) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/61) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/2) r3 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000100)=""/188) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000001700)=""/4096) 23:01:32 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0xf, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:32 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/212) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x503100) 23:01:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x6) 23:01:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10) 23:01:32 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00000000000000, 0x5) [ 2745.564213][T20128] usb 2-1: USB disconnect, device number 35 [ 2745.639269][ T33] kauditd_printk_skb: 14 callbacks suppressed [ 2745.639287][ T33] audit: type=1804 audit(1623020492.314:280): pid=25682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343833362F48C7C060 dev="sda1" ino=15363 res=1 errno=0 23:01:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:01:32 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x101640) 23:01:32 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00000000000000, 0x5) 23:01:32 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x90240) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000000, 0x200000) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/143) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000000)=""/126) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001700)=""/4096) 23:01:32 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000080)="5df2f47a673409244fb6a7eceb2114b27aad29165cff0f4a3991470c7baea3319f5f87a07bead13c4ac437abc552c2744affdbc68eb404f0989b9ad506091b1efdf42d7d37a0cf15c05f05933bb5b690ee01fa80b02ffd3de989b566dc720eb7", 0x60) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/61) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/2) r3 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000100)=""/188) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000001700)=""/4096) [ 2745.792255][ T33] audit: type=1804 audit(1623020492.374:281): pid=25685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353131302F48C7C060 dev="sda1" ino=15443 res=1 errno=0 23:01:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x594) 23:01:32 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xb31) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2745.934795][ T33] audit: type=1804 audit(1623020492.384:282): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343833362F48C7C060 dev="sda1" ino=15363 res=1 errno=0 [ 2745.991444][ T33] audit: type=1804 audit(1623020492.614:283): pid=25703 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353131312F48C7C060 dev="sda1" ino=15443 res=1 errno=0 [ 2746.100210][T20128] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 2746.460729][T20128] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2746.473993][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2746.483795][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2746.660611][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2746.670373][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2746.678834][T20128] usb 2-1: Product: syz [ 2746.683283][T20128] usb 2-1: Manufacturer: syz [ 2746.688039][T20128] usb 2-1: SerialNumber: syz [ 2746.731138][T20128] cdc_ncm 2-1:1.0: skipping garbage 23:01:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4092) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x1, 0x8000, 0x800, 0x1, 0x81, 0xabda}) 23:01:33 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x10, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:01:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00000000000000, 0x5) 23:01:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x59e) 23:01:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x101403) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1000, 0x14000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x1a, 0x6]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:33 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/32) [ 2746.980742][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2746.998425][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2747.005469][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2747.029872][ T33] audit: type=1804 audit(1623020493.704:284): pid=25724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343839392F48C7C060 dev="sda1" ino=15507 res=1 errno=0 23:01:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5a9) 23:01:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x84400) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/66) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/121) [ 2747.108159][T20128] usb 2-1: USB disconnect, device number 36 23:01:33 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/211) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x5, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/107) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4092) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x1, 0x8000, 0x800, 0x1, 0x81, 0xabda}) [ 2747.172707][ T33] audit: type=1804 audit(1623020493.834:285): pid=25735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353136392F48C7C060 dev="sda1" ino=14639 res=1 errno=0 23:01:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x677) 23:01:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2747.322786][ T33] audit: type=1804 audit(1623020493.894:286): pid=25743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343930302F48C7C060 dev="sda1" ino=14637 res=1 errno=0 [ 2747.388793][ T33] audit: type=1804 audit(1623020493.964:287): pid=25748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343833392F48C7C060 dev="sda1" ino=14583 res=1 errno=0 [ 2747.430645][ T33] audit: type=1804 audit(1623020493.974:288): pid=25748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343833392F48C7C060 dev="sda1" ino=14583 res=1 errno=0 [ 2747.460832][ T33] audit: type=1804 audit(1623020494.044:289): pid=25754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353137302F48C7C060 dev="sda1" ino=15619 res=1 errno=0 [ 2747.580105][T20128] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 2747.940107][T20128] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2747.953658][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2747.963555][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2748.130568][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2748.139785][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2748.148223][T20128] usb 2-1: Product: syz [ 2748.152496][T20128] usb 2-1: Manufacturer: syz [ 2748.157096][T20128] usb 2-1: SerialNumber: syz [ 2748.221335][T20128] cdc_ncm 2-1:1.0: skipping garbage 23:01:35 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x4, 0x400}}}}}}]}}, 0x0) 23:01:35 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/141) 23:01:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000180)=""/250) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/60) syz_open_dev$evdev(&(0x7f0000000140), 0x100000001, 0x40000) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x240201) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/10) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000040)=""/57) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000000c0)=""/55) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:35 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x68d) 23:01:35 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x677) [ 2748.473905][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2748.502346][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2748.509193][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:35 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001000), 0x0, 0x4e003) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000001700)=""/188) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001040)={0x5, 0x5d, 0x4, 0x2, "3c485d58b54e28cda6d528cef66d6de68dd849dd0ed100"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/4096) 23:01:35 executing program 4: ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000080)={0x3a, 0x206, 0xc001, 0x0, 0x7, 0x4}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x40, 0x5, 0x5, 0x6a, "1ad003db92a72e480b42282da7c3b650564a5f23fe1f9672e771151be9c57e47"}) 23:01:35 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2748.600174][T20128] usb 2-1: USB disconnect, device number 37 23:01:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x677) 23:01:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/144) 23:01:35 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2748.990015][T20128] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 2749.360494][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2749.371434][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2749.381216][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2749.550513][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2749.559666][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2749.567725][T20128] usb 2-1: Product: syz [ 2749.571966][T20128] usb 2-1: Manufacturer: syz [ 2749.576593][T20128] usb 2-1: SerialNumber: syz 23:01:36 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/182) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:36 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x7, 0x20000) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000001740)=""/111) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000017c0)=""/141) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/4096) 23:01:36 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/211) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x5, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/107) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:36 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x7, 0x400}}}}}}]}}, 0x0) 23:01:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/212) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x400400) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000001700)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x248605) 23:01:36 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2749.870393][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2749.892546][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2749.899438][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:36 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x59e) [ 2749.979673][T20128] usb 2-1: USB disconnect, device number 38 23:01:36 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000001700)=""/4096) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0x248}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x6, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x20, 0x3f, 0x90}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x2, 0x4, 0x0, 0x10, 0x4}, 0x4a, &(0x7f00000000c0)={0x5, 0xf, 0x4a, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x1a, 0x2, 0xb56, 0xf00f, 0x1, [0xff0000, 0xc0]}, @ptm_cap={0x3}, @generic={0x10, 0x10, 0x3, "51eecaa5df31829433844e09e3"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd4, "ea68e6721b61dfc38babf287c1d0f7ed"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x6, 0x9}]}, 0x2, [{0x65, &(0x7f0000000600)=ANY=[@ANYBLOB="650363ac2b688fd12f8dc36060e77c404de4facff252f0123e8d00a704f4128d88540a3e59c84c79014b62afb2ec63feb4506e0cd707ae034fe04b57882d6b7ca7e1b8c5b87e3548f5444ef4dc1ed7b47b7aa9fb250900e83c7175f72744f8934ed126e6368a7edc2a39b6f2b5c23c2281127b7710580332f5b9f73798ed6e48b5b12632d7c7676c0570ec"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}]}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x5, 0x5]) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x2, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x5, 0x6, 0x28}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x3, 0x6, 0xf4}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x94, "21a5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x0, 0x2, {0x7, 0x25, 0x1, 0x81, 0x20, 0xcd00}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x20, 0x7, 0x40, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x6}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0xff, 0xd8, 0x81, 0x10, 0x8}, 0x3b, &(0x7f0000000340)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x4, 0xf780, 0xfffd, [0x3f30]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x3f, 0x0, 0x81}, @ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x3ff, 0xff00, 0x5, [0xff3f00, 0x3f, 0xc000]}]}, 0x5, [{0x5c, &(0x7f0000000380)=@string={0x5c, 0x3, "649d4c5c00e714dd953083f99d41dfd04a8e1fafdb262594040a566ac8466c4bf3848838f47cb6a69c262214d10f8af165d64ba673273809ebe953aa151aaed8ee5ac2739e3192c945a58749107e09ecf6f00c1293dc1d825bba"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1409}}, {0x9d, &(0x7f0000000480)=@string={0x9d, 0x3, "44cb972b33f5768893953e5c51e59c60b185e9f05e9cbb3b37de8f3c25efdc72d554a4780deff8f66f8611ba97010b279f2f6b8fbee53584c9fd90ec7b3a1cd1041791b269b106ef2f10d8087970c4bc61942e8f9a0e757b8ec925aafc34aa9421fd05c57b2903831a1f8dbd0b8f441378eef42df3774474b01f7168d9ba7bfccfa53626be95ee4869496b71bb7a31f57ccda14a4f88dcaf64aa98"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44c}}]}) 23:01:36 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/54) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x1, 0x3, 0x9, 0x7fff, 0x2, 0x8}) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/110) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x56, 0x0, 0x7f, {0xfd8, 0xff}, {0xff}, @period={0x58, 0x31fe, 0x1c00, 0x3, 0x9, {0x4, 0x2, 0x8, 0x3}, 0x5, &(0x7f0000000140)=[0x0, 0x1, 0x4, 0x6, 0x5]}}) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000001c0)=0x1) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000100)={0x1, 0x0, 0x6, 0x1f, 0x5, 0x7}) 23:01:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xb31) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:36 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000001, 0x624002) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x3fc, {0xc2}, {0x0, 0x100}, @ramp={0xff, 0x5, {0x7fff, 0x868, 0x4, 0x973}}}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/240) 23:01:36 executing program 2 (fault-call:0 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:36 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x194, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2750.256592][T25851] FAULT_INJECTION: forcing a failure. [ 2750.256592][T25851] name failslab, interval 1, probability 0, space 0, times 0 [ 2750.269372][T25851] CPU: 0 PID: 25851 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2750.278169][T25851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2750.288251][T25851] Call Trace: [ 2750.291561][T25851] dump_stack+0x143/0x1db [ 2750.295925][T25851] should_fail.cold+0x5/0xa [ 2750.300522][T25851] ? getname_flags.part.0+0x50/0x4f0 [ 2750.305853][T25851] should_failslab+0x5/0x10 [ 2750.310407][T25851] kmem_cache_alloc+0x5b/0x360 [ 2750.315203][T25851] getname_flags.part.0+0x50/0x4f0 [ 2750.320353][T25851] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2750.326377][T25851] getname+0x8e/0xd0 [ 2750.330405][T25851] do_sys_openat2+0xf5/0x420 [ 2750.335034][T25851] ? build_open_flags+0x6f0/0x6f0 [ 2750.340093][T25851] ? __context_tracking_exit+0x9f/0xb0 [ 2750.345595][T25851] ? lock_downgrade+0x6e0/0x6e0 [ 2750.350489][T25851] __x64_sys_openat+0x13f/0x1f0 23:01:37 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/140) syz_open_dev$evdev(&(0x7f00000017c0), 0x3ff, 0x20000) r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x21, 0x4200) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001780)={0x14, 0x26, &(0x7f0000001740)="07e5e9f08d21578b914f9edc055d252675fc43bf2ca3f19fc34a5b2f2fbf065e28ed5f34c64c"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x298444) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/4096) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0xa841) r3 = syz_open_dev$hiddev(&(0x7f0000001800), 0xffff, 0x200) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000001840)={0x2, 0x1, 0x8, 0x7390, 0x8, 0x9}) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) 23:01:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xb31) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2750.355506][T25851] ? __ia32_sys_open+0x1c0/0x1c0 [ 2750.360511][T25851] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2750.366533][T25851] ? syscall_enter_from_user_mode+0x27/0x70 [ 2750.372553][T25851] do_syscall_64+0x3a/0xb0 [ 2750.377000][T25851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2750.382940][T25851] RIP: 0033:0x4196c4 [ 2750.386862][T25851] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2750.406649][T25851] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2750.415101][T25851] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2750.423106][T25851] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2750.431107][T25851] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2750.439110][T25851] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2750.447106][T25851] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2750.619906][T20128] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 2750.627576][ T2686] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2750.869970][ T2686] usb 5-1: Using ep0 maxpacket: 32 [ 2750.990005][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2751.001243][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2751.012857][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2751.022773][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2751.110001][ T2686] usb 5-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2751.123055][ T2686] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2751.230655][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2751.240226][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.248254][T20128] usb 2-1: Product: syz [ 2751.252649][T20128] usb 2-1: Manufacturer: syz [ 2751.257259][T20128] usb 2-1: SerialNumber: syz [ 2751.291550][T25826] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2751.360000][ T2686] usb 5-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.40 [ 2751.369251][ T2686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.377463][ T2686] usb 5-1: Product: syz [ 2751.381730][ T2686] usb 5-1: Manufacturer: ᐉ [ 2751.386332][ T2686] usb 5-1: SerialNumber: syz 23:01:38 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0xf, 0x400}}}}}}]}}, 0x0) 23:01:38 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/199) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x600800) r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x8440) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000140)={0x2, 0xffffffff, 0x0, 0x1, 0xfc42, 0x6}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x117201) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000001c0)=""/94) 23:01:38 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x194, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:38 executing program 2 (fault-call:0 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2751.572998][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2751.593858][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2751.600883][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2751.613924][T25877] FAULT_INJECTION: forcing a failure. [ 2751.613924][T25877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2751.627225][T25877] CPU: 0 PID: 25877 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2751.636057][T25877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2751.646140][T25877] Call Trace: [ 2751.649441][T25877] dump_stack+0x143/0x1db [ 2751.653802][T25877] should_fail.cold+0x5/0xa [ 2751.655113][T20128] usb 2-1: USB disconnect, device number 39 [ 2751.658333][T25877] strncpy_from_user+0x34/0x3e0 [ 2751.658371][T25877] getname_flags.part.0+0x95/0x4f0 [ 2751.674358][T25877] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2751.680466][T25877] getname+0x8e/0xd0 [ 2751.684393][T25877] do_sys_openat2+0xf5/0x420 [ 2751.689016][T25877] ? build_open_flags+0x6f0/0x6f0 [ 2751.694082][T25877] ? __context_tracking_exit+0x9f/0xb0 [ 2751.699579][T25877] ? lock_downgrade+0x6e0/0x6e0 [ 2751.704469][T25877] __x64_sys_openat+0x13f/0x1f0 [ 2751.709354][T25877] ? __ia32_sys_open+0x1c0/0x1c0 [ 2751.714426][T25877] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2751.720452][T25877] ? syscall_enter_from_user_mode+0x27/0x70 [ 2751.726378][T25877] do_syscall_64+0x3a/0xb0 [ 2751.730840][T25877] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2751.736772][T25877] RIP: 0033:0x4196c4 [ 2751.740691][T25877] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2751.760511][T25877] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2751.768956][T25877] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2751.776987][T25877] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2751.785023][T25877] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2751.793139][T25877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2751.794013][ T33] kauditd_printk_skb: 14 callbacks suppressed [ 2751.794028][ T33] audit: type=1804 audit(1623020498.314:304): pid=25874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353131392F48C7C060 dev="sda1" ino=16085 res=1 errno=0 [ 2751.801128][T25877] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 23:01:38 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x6, 0x0, 0x7, 0x276, 0x9, 0x7}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/59) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/175) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/224) 23:01:38 executing program 0: ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x2, 0x1, 0x1ff, 0x2, 0x4, 0x5, 0x5, 0x1, 0x4, 0x100, 0x8, 0x0, 0x3c21de33, 0x4}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x800, 0x101640) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/30) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x200, 0x218, 0x1, 0xffffffff, 0x1}) 23:01:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x124420) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/181) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:38 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/199) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x600800) r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x8440) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000140)={0x2, 0xffffffff, 0x0, 0x1, 0xfc42, 0x6}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x117201) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000001c0)=""/94) 23:01:38 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x301600) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x240300) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/230) 23:01:38 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2c502) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x401, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/239) 23:01:38 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x64, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000001040)=""/4103) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2751.970929][ T33] audit: type=1804 audit(1623020498.564:305): pid=25895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343834362F48C7C060 dev="sda1" ino=15827 res=1 errno=0 23:01:38 executing program 2 (fault-call:0 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2752.091539][ T33] audit: type=1804 audit(1623020498.564:306): pid=25895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343834362F48C7C060 dev="sda1" ino=15827 res=1 errno=0 [ 2752.101095][ T2686] usbhid 5-1:1.0: can't add hid device: -71 [ 2752.149308][ T2686] usbhid: probe of 5-1:1.0 failed with error -71 [ 2752.162164][T25915] FAULT_INJECTION: forcing a failure. [ 2752.162164][T25915] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.167677][ T2686] usb 5-1: USB disconnect, device number 6 [ 2752.174952][T25915] CPU: 0 PID: 25915 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2752.189682][T25915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2752.199758][T25915] Call Trace: [ 2752.203058][T25915] dump_stack+0x143/0x1db [ 2752.207411][T25915] should_fail.cold+0x5/0xa [ 2752.211971][T25915] ? __alloc_file+0x21/0x280 [ 2752.216561][T25915] should_failslab+0x5/0x10 [ 2752.221149][T25915] kmem_cache_alloc+0x5b/0x360 [ 2752.225908][T25915] __alloc_file+0x21/0x280 [ 2752.230316][T25915] alloc_empty_file+0x6d/0x170 [ 2752.235074][T25915] path_openat+0xe3/0x27e0 [ 2752.239483][T25915] ? __lock_acquire+0x16a7/0x5230 [ 2752.244510][T25915] ? path_lookupat+0x850/0x850 [ 2752.249279][T25915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2752.255254][T25915] do_filp_open+0x190/0x3d0 [ 2752.259749][T25915] ? may_open_dev+0xf0/0xf0 [ 2752.264334][T25915] ? alloc_fd+0x2e6/0x660 [ 2752.268671][T25915] ? lock_downgrade+0x6e0/0x6e0 [ 2752.273531][T25915] ? do_raw_spin_lock+0x120/0x2b0 [ 2752.278553][T25915] ? rwlock_bug.part.0+0x90/0x90 [ 2752.283487][T25915] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2752.289724][T25915] ? _find_next_bit+0x1e3/0x260 [ 2752.294573][T25915] ? _raw_spin_unlock+0x1a/0x30 [ 2752.299506][T25915] ? alloc_fd+0x2e6/0x660 [ 2752.303833][T25915] do_sys_openat2+0x16d/0x420 [ 2752.308507][T25915] ? build_open_flags+0x6f0/0x6f0 [ 2752.313643][T25915] ? __context_tracking_exit+0x9f/0xb0 [ 2752.319127][T25915] ? lock_downgrade+0x6e0/0x6e0 [ 2752.323993][T25915] __x64_sys_openat+0x13f/0x1f0 [ 2752.328849][T25915] ? __ia32_sys_open+0x1c0/0x1c0 [ 2752.333779][T25915] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2752.339759][T25915] ? syscall_enter_from_user_mode+0x27/0x70 [ 2752.345687][T25915] do_syscall_64+0x3a/0xb0 [ 2752.350097][T25915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2752.355985][T25915] RIP: 0033:0x4196c4 [ 2752.359871][T25915] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2752.379657][T25915] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2752.388194][T25915] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2752.396162][T25915] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2752.404126][T25915] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2752.412092][T25915] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2752.420057][T25915] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2752.439879][T20128] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 2752.451956][ T33] audit: type=1804 audit(1623020498.764:307): pid=25913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343932332F48C7C060 dev="sda1" ino=13906 res=1 errno=0 [ 2752.483978][ T33] audit: type=1804 audit(1623020498.774:308): pid=25913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343932332F48C7C060 dev="sda1" ino=13906 res=1 errno=0 [ 2752.830359][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2752.841382][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2752.853648][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2752.863796][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2753.030315][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2753.039402][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2753.047458][T20128] usb 2-1: Product: syz [ 2753.051705][T20128] usb 2-1: Manufacturer: syz [ 2753.056315][T20128] usb 2-1: SerialNumber: syz [ 2753.081195][T25879] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:40 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x10, 0x400}}}}}}]}}, 0x0) 23:01:40 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x402) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000140)=""/192) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000040)=""/171) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000340)={0x5, 0x1, 0x6, 0x7, 0x3, 0x3}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000200)=""/197) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000300)={0xde, 0xffff0000, 0x3b6, 0x8, 0x1, 0x7}) 23:01:40 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x684002) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x460181) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/27) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x4, 0x9, 0xff, 0x2, 0x101}) 23:01:40 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2c502) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x401, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/239) 23:01:40 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/43) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffb81, 0x305) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x5, 0x1e, &(0x7f0000000080)="2d4031402b7fec4274e10e049ed066141693c519281e7bece0c9f3bbf8b0"}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0xffffffff, 0x0, 0x9, 0x7, 0xf3, 0x80000000}) 23:01:40 executing program 2 (fault-call:0 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2753.349986][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2753.371765][ T33] audit: type=1804 audit(1623020500.054:309): pid=25933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343834382F48C7C060 dev="sda1" ino=15540 res=1 errno=0 [ 2753.382909][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2753.408482][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2753.482945][T25942] FAULT_INJECTION: forcing a failure. [ 2753.482945][T25942] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.495712][T25942] CPU: 1 PID: 25942 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2753.504507][T25942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.514643][T25942] Call Trace: [ 2753.517684][ T33] audit: type=1804 audit(1623020500.114:310): pid=25940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353132312F48C7C060 dev="sda1" ino=16098 res=1 errno=0 [ 2753.517939][T25942] dump_stack+0x143/0x1db [ 2753.552220][T25942] should_fail.cold+0x5/0xa [ 2753.556757][T25942] ? security_file_alloc+0x34/0x170 [ 2753.562001][T25942] should_failslab+0x5/0x10 [ 2753.566537][T25942] kmem_cache_alloc+0x5b/0x360 [ 2753.571329][T25942] security_file_alloc+0x34/0x170 [ 2753.576650][T25942] __alloc_file+0xd8/0x280 [ 2753.581094][T25942] alloc_empty_file+0x6d/0x170 [ 2753.585890][T25942] path_openat+0xe3/0x27e0 [ 2753.590336][T25942] ? __lock_acquire+0x16a7/0x5230 [ 2753.595395][T25942] ? path_lookupat+0x850/0x850 [ 2753.600194][T25942] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2753.606208][T25942] do_filp_open+0x190/0x3d0 [ 2753.610739][T25942] ? may_open_dev+0xf0/0xf0 [ 2753.615277][T25942] ? alloc_fd+0x2e6/0x660 [ 2753.619466][ T33] audit: type=1804 audit(1623020500.124:311): pid=25934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343930382F48C7C060 dev="sda1" ino=16088 res=1 errno=0 [ 2753.619626][T25942] ? lock_downgrade+0x6e0/0x6e0 [ 2753.619661][T25942] ? do_raw_spin_lock+0x120/0x2b0 [ 2753.659289][T25942] ? rwlock_bug.part.0+0x90/0x90 [ 2753.664369][T25942] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2753.670654][T25942] ? _find_next_bit+0x1e3/0x260 [ 2753.675536][T25942] ? _raw_spin_unlock+0x1a/0x30 [ 2753.680503][T25942] ? alloc_fd+0x2e6/0x660 [ 2753.684863][T25942] do_sys_openat2+0x16d/0x420 [ 2753.689667][T25942] ? build_open_flags+0x6f0/0x6f0 [ 2753.691637][ T33] audit: type=1804 audit(1623020500.124:312): pid=25933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343834382F48C7C060 dev="sda1" ino=15540 res=1 errno=0 [ 2753.694805][T25942] ? __context_tracking_exit+0x9f/0xb0 [ 2753.694839][T25942] ? lock_downgrade+0x6e0/0x6e0 [ 2753.727149][ T33] audit: type=1804 audit(1623020500.144:313): pid=25938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343930382F48C7C060 dev="sda1" ino=16088 res=1 errno=0 [ 2753.730269][T25942] __x64_sys_openat+0x13f/0x1f0 [ 2753.730302][T25942] ? __ia32_sys_open+0x1c0/0x1c0 [ 2753.730325][T25942] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 23:01:40 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000000)=""/250) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000100)={0x7fff, 0x1ff, 0xb5, 0x1f4, 0x6, 0x3f}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000140)=""/51) 23:01:40 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0xf, 0x400}}}}}}]}}, 0x0) 23:01:40 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:40 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/215) [ 2753.780781][T25942] ? syscall_enter_from_user_mode+0x27/0x70 [ 2753.786812][T25942] do_syscall_64+0x3a/0xb0 [ 2753.791257][T25942] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2753.797271][T25942] RIP: 0033:0x4196c4 [ 2753.801184][T25942] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2753.821004][T25942] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 23:01:40 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/180) [ 2753.829538][T25942] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2753.837545][T25942] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2753.845542][T25942] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2753.853629][T25942] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2753.861636][T25942] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 23:01:40 executing program 2 (fault-call:0 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2753.908849][T20128] usb 2-1: USB disconnect, device number 40 [ 2754.012563][T25973] FAULT_INJECTION: forcing a failure. [ 2754.012563][T25973] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.026173][T25973] CPU: 0 PID: 25973 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2754.034970][T25973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2754.045119][T25973] Call Trace: [ 2754.048489][T25973] dump_stack+0x143/0x1db [ 2754.052815][T25973] should_fail.cold+0x5/0xa [ 2754.057319][T25973] ? __d_alloc+0x2a/0x950 [ 2754.061644][T25973] should_failslab+0x5/0x10 [ 2754.066148][T25973] kmem_cache_alloc+0x5b/0x360 [ 2754.070922][T25973] __d_alloc+0x2a/0x950 [ 2754.075075][T25973] d_alloc+0x4a/0x230 [ 2754.079105][T25973] d_alloc_parallel+0xe9/0x1980 [ 2754.083952][T25973] ? __d_lookup+0x3ff/0x710 [ 2754.088471][T25973] ? lock_downgrade+0x6e0/0x6e0 [ 2754.093321][T25973] ? find_held_lock+0x2d/0x110 [ 2754.098084][T25973] ? __d_lookup_rcu+0x6c0/0x6c0 [ 2754.102938][T25973] ? __d_lookup+0x428/0x710 [ 2754.107453][T25973] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2754.113436][T25973] lookup_open.isra.0+0x86c/0x1300 [ 2754.118548][T25973] ? hashlen_string+0xf0/0xf0 [ 2754.123220][T25973] ? verify_cpu+0x100/0x100 [ 2754.127716][T25973] ? verify_cpu+0x100/0x100 [ 2754.132302][T25973] path_openat+0x9b4/0x27e0 [ 2754.136809][T25973] ? path_lookupat+0x850/0x850 [ 2754.141586][T25973] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2754.147566][T25973] do_filp_open+0x190/0x3d0 [ 2754.152066][T25973] ? may_open_dev+0xf0/0xf0 [ 2754.156560][T25973] ? do_raw_spin_lock+0x120/0x2b0 [ 2754.161579][T25973] ? rwlock_bug.part.0+0x90/0x90 [ 2754.166511][T25973] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2754.172748][T25973] ? _find_next_bit+0x1e3/0x260 [ 2754.177594][T25973] ? _raw_spin_unlock+0x1a/0x30 [ 2754.182442][T25973] ? alloc_fd+0x2e6/0x660 [ 2754.186767][T25973] do_sys_openat2+0x16d/0x420 [ 2754.191438][T25973] ? build_open_flags+0x6f0/0x6f0 [ 2754.196460][T25973] ? __context_tracking_exit+0x9f/0xb0 [ 2754.201985][T25973] ? lock_downgrade+0x6e0/0x6e0 [ 2754.206839][T25973] __x64_sys_openat+0x13f/0x1f0 [ 2754.211958][T25973] ? __ia32_sys_open+0x1c0/0x1c0 [ 2754.216893][T25973] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2754.223136][T25973] ? syscall_enter_from_user_mode+0x27/0x70 [ 2754.229031][T25973] do_syscall_64+0x3a/0xb0 [ 2754.233445][T25973] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2754.239340][T25973] RIP: 0033:0x4196c4 [ 2754.243238][T25973] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2754.262845][T25973] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2754.271257][T25973] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2754.279315][T25973] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2754.287295][T25973] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2754.295278][T25973] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2754.303280][T25973] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2754.320237][ T5] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 2754.509659][T20128] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 2754.709770][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2754.721612][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2754.732933][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2754.742762][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2754.879895][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2754.890872][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2754.900730][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2754.919902][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2754.929298][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.937512][ T5] usb 4-1: Product: syz [ 2754.941897][ T5] usb 4-1: Manufacturer: syz [ 2754.946531][ T5] usb 4-1: SerialNumber: syz [ 2754.971258][T25949] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2755.099781][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2755.109180][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.117233][T20128] usb 2-1: Product: syz [ 2755.121471][T20128] usb 2-1: Manufacturer: syz [ 2755.126069][T20128] usb 2-1: SerialNumber: syz [ 2755.249727][ T5] cdc_ncm 4-1:1.0: bind() failure [ 2755.259404][ T5] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2755.266524][ T5] cdc_ncm 4-1:1.1: bind() failure [ 2755.283599][ T5] usb 4-1: USB disconnect, device number 104 23:01:42 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x300}}}}}}]}}, 0x0) 23:01:42 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x200000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/100) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:42 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/206) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:42 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x8, 0x8, {0x8, 0x22, "a8e95a1c6179"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0x7, 0xea, "febdcb54c23e5072cb41a6f38d35e94d3b84fa62b760cd86e2c9ddbbe6535e892bde465e99e3ea86c5f5a9e6ab9fd31c552e2ce578de7b0fdcc36d195d3e86705ce7b630f7897542dd09c20e73101e9b78b5e0b578b108403fea1d5caf17059aa823f8cd5c5c6000a0185970e0b1226c0141b87588f4545f341052dba82644d3cad083435513739095e387a8271fe69dd3797f5d43e01e85e28ed1162d9ac960320d98df179e0a35b64657213e451512eee24e8e2dca42262f513345da018fa4508207f4399b2fbe680fb53848ea621c88940ea1af8e917a4ed361001f6a46cd887be8422019f3da63fd"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x3f, 0x81, 0x8, 0x5, 0x8, 0x20, 0x4, 0x3, 0x2, 0x400}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x8, 0xffffffff, 0x3, 0x7, 0x8000, 0x1}) r0 = syz_open_dev$hiddev(&(0x7f0000000440), 0x1ff, 0x186e1) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000480)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:42 executing program 2 (fault-call:0 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:42 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/180) [ 2755.451531][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2755.491421][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2755.498417][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2755.512932][T26010] FAULT_INJECTION: forcing a failure. [ 2755.512932][T26010] name failslab, interval 1, probability 0, space 0, times 0 [ 2755.526251][T26010] CPU: 0 PID: 26010 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2755.535054][T26010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2755.545320][T26010] Call Trace: [ 2755.548638][T26010] dump_stack+0x143/0x1db [ 2755.553004][T26010] should_fail.cold+0x5/0xa [ 2755.554857][T20128] usb 2-1: USB disconnect, device number 41 [ 2755.557652][T26010] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2755.569420][T26010] should_failslab+0x5/0x10 [ 2755.574072][T26010] __kmalloc+0x72/0x310 [ 2755.578266][T26010] tomoyo_realpath_from_path+0xc3/0x620 [ 2755.583852][T26010] ? tomoyo_profile+0x42/0x50 [ 2755.588582][T26010] tomoyo_path_number_perm+0x1d5/0x590 [ 2755.594094][T26010] ? tomoyo_path_number_perm+0x18d/0x590 [ 2755.599761][T26010] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2755.605687][T26010] ? find_held_lock+0x2d/0x110 [ 2755.610606][T26010] ? d_alloc_parallel+0x91f/0x1980 [ 2755.615756][T26010] ? lock_downgrade+0x6e0/0x6e0 [ 2755.620644][T26010] ? find_held_lock+0x2d/0x110 [ 2755.625480][T26010] tomoyo_path_mknod+0x10d/0x190 [ 2755.630459][T26010] ? tomoyo_path_chown+0x1b0/0x1b0 [ 2755.635647][T26010] security_path_mknod+0xf9/0x170 23:01:42 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/215) 23:01:42 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x6, 0x40) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x1) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x57, 0x4, 0x401, {0x200, 0xfffe}, {0x6, 0x3ff}, @ramp={0x5, 0x5, {0xfff, 0x5, 0x3, 0x1f}}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x410041) [ 2755.640807][T26010] lookup_open.isra.0+0x471/0x1300 [ 2755.645960][T26010] ? hashlen_string+0xf0/0xf0 [ 2755.650686][T26010] ? verify_cpu+0x100/0x100 [ 2755.655332][T26010] ? verify_cpu+0x100/0x100 [ 2755.659869][T26010] path_openat+0x9b4/0x27e0 [ 2755.664552][T26010] ? path_lookupat+0x850/0x850 [ 2755.669379][T26010] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2755.675409][T26010] do_filp_open+0x190/0x3d0 [ 2755.679946][T26010] ? may_open_dev+0xf0/0xf0 [ 2755.684491][T26010] ? do_raw_spin_lock+0x120/0x2b0 [ 2755.689552][T26010] ? rwlock_bug.part.0+0x90/0x90 [ 2755.694524][T26010] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2755.700807][T26010] ? _find_next_bit+0x1e3/0x260 [ 2755.705732][T26010] ? _raw_spin_unlock+0x1a/0x30 [ 2755.710704][T26010] ? alloc_fd+0x2e6/0x660 [ 2755.715069][T26010] do_sys_openat2+0x16d/0x420 [ 2755.719786][T26010] ? build_open_flags+0x6f0/0x6f0 [ 2755.724920][T26010] ? __context_tracking_exit+0x9f/0xb0 [ 2755.730447][T26010] ? lock_downgrade+0x6e0/0x6e0 [ 2755.735339][T26010] __x64_sys_openat+0x13f/0x1f0 23:01:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x876, 0x80000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000001700)=""/43) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000001740)=""/4096) [ 2755.740339][T26010] ? __ia32_sys_open+0x1c0/0x1c0 [ 2755.745317][T26010] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2755.751424][T26010] ? syscall_enter_from_user_mode+0x27/0x70 [ 2755.757370][T26010] do_syscall_64+0x3a/0xb0 [ 2755.761933][T26010] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2755.767861][T26010] RIP: 0033:0x4196c4 [ 2755.771779][T26010] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2755.791417][T26010] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2755.799860][T26010] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2755.807858][T26010] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2755.815869][T26010] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2755.823873][T26010] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2755.831884][T26010] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 23:01:42 executing program 4: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000000)=""/184) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x7e3902) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:42 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/215) [ 2755.840273][T26010] ERROR: Out of memory at tomoyo_realpath_from_path. 23:01:42 executing program 2 (fault-call:0 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2755.973810][T26040] FAULT_INJECTION: forcing a failure. [ 2755.973810][T26040] name failslab, interval 1, probability 0, space 0, times 0 [ 2755.986622][T26040] CPU: 1 PID: 26040 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2755.995427][T26040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2756.005515][T26040] Call Trace: [ 2756.008825][T26040] dump_stack+0x143/0x1db [ 2756.013280][T26040] should_fail.cold+0x5/0xa [ 2756.017855][T26040] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2756.023332][T26040] should_failslab+0x5/0x10 [ 2756.028032][T26040] __kmalloc+0x72/0x310 [ 2756.032215][T26040] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2756.037421][T26040] tomoyo_encode+0x28/0x50 [ 2756.041854][T26040] tomoyo_realpath_from_path+0x186/0x620 [ 2756.048016][T26040] tomoyo_path_number_perm+0x1d5/0x590 [ 2756.053487][T26040] ? tomoyo_path_number_perm+0x18d/0x590 [ 2756.059133][T26040] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2756.065027][T26040] ? find_held_lock+0x2d/0x110 [ 2756.069810][T26040] ? d_alloc_parallel+0x91f/0x1980 [ 2756.074916][T26040] ? lock_downgrade+0x6e0/0x6e0 [ 2756.079788][T26040] ? find_held_lock+0x2d/0x110 [ 2756.084562][T26040] tomoyo_path_mknod+0x10d/0x190 [ 2756.089511][T26040] ? tomoyo_path_chown+0x1b0/0x1b0 [ 2756.094636][T26040] security_path_mknod+0xf9/0x170 [ 2756.099690][T26040] lookup_open.isra.0+0x471/0x1300 [ 2756.104841][T26040] ? hashlen_string+0xf0/0xf0 [ 2756.109540][T26040] ? verify_cpu+0x100/0x100 [ 2756.114038][T26040] ? verify_cpu+0x100/0x100 [ 2756.118623][T26040] path_openat+0x9b4/0x27e0 [ 2756.123396][T26040] ? path_lookupat+0x850/0x850 [ 2756.128244][T26040] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2756.134261][T26040] do_filp_open+0x190/0x3d0 [ 2756.138780][T26040] ? may_open_dev+0xf0/0xf0 [ 2756.143282][T26040] ? do_raw_spin_lock+0x120/0x2b0 [ 2756.148409][T26040] ? rwlock_bug.part.0+0x90/0x90 [ 2756.153353][T26040] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2756.159735][T26040] ? _find_next_bit+0x1e3/0x260 [ 2756.164619][T26040] ? _raw_spin_unlock+0x1a/0x30 [ 2756.169527][T26040] ? alloc_fd+0x2e6/0x660 [ 2756.173879][T26040] do_sys_openat2+0x16d/0x420 [ 2756.178780][T26040] ? build_open_flags+0x6f0/0x6f0 [ 2756.183813][T26040] ? __context_tracking_exit+0x9f/0xb0 [ 2756.189364][T26040] ? lock_downgrade+0x6e0/0x6e0 [ 2756.194233][T26040] __x64_sys_openat+0x13f/0x1f0 [ 2756.199211][T26040] ? __ia32_sys_open+0x1c0/0x1c0 [ 2756.204168][T26040] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2756.210172][T26040] ? syscall_enter_from_user_mode+0x27/0x70 [ 2756.216075][T26040] do_syscall_64+0x3a/0xb0 [ 2756.220517][T26040] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2756.226519][T26040] RIP: 0033:0x4196c4 [ 2756.230581][T26040] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2756.250285][T26040] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2756.258907][T26040] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2756.266894][T26040] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2756.274870][T26040] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2756.282846][T26040] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2756.290825][T26040] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2756.299103][T26040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2756.519535][T20128] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 2756.880362][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2756.891482][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 768, setting to 64 [ 2756.902788][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2756.912620][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2757.090018][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2757.099147][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2757.107338][T20128] usb 2-1: Product: syz [ 2757.111696][T20128] usb 2-1: Manufacturer: syz [ 2757.116305][T20128] usb 2-1: SerialNumber: syz [ 2757.140993][T26019] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:44 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffa, 0x406) 23:01:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/71) 23:01:44 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/215) 23:01:44 executing program 2 (fault-call:0 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:44 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x402}}}}}}]}}, 0x0) 23:01:44 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000001c0)=[0x0, 0x5d9]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0xa0000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000140)=""/22) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000002740)=""/4115) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000180)=[0x2, 0xfffffff7]) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/230) [ 2757.399684][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2757.420701][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2757.427736][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:44 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/177) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2757.475360][T26059] FAULT_INJECTION: forcing a failure. [ 2757.475360][T26059] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.488200][T26059] CPU: 1 PID: 26059 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2757.496993][T26059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.507074][T26059] Call Trace: [ 2757.510371][T26059] dump_stack+0x143/0x1db [ 2757.514734][T26059] should_fail.cold+0x5/0xa [ 2757.519446][T26059] ? ext4_init_journal_params+0x350/0x350 23:01:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc0000005, 0x589340) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x400041) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x4a0100) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/149) [ 2757.525198][T26059] ? ext4_alloc_inode+0x1a/0x640 [ 2757.530258][T26059] should_failslab+0x5/0x10 [ 2757.534798][T26059] kmem_cache_alloc+0x5b/0x360 [ 2757.539597][T26059] ? ext4_init_journal_params+0x350/0x350 [ 2757.545357][T26059] ext4_alloc_inode+0x1a/0x640 [ 2757.550156][T26059] ? ext4_init_journal_params+0x350/0x350 [ 2757.555919][T26059] alloc_inode+0x61/0x230 [ 2757.560287][T26059] new_inode+0x27/0x2f0 [ 2757.564478][T26059] __ext4_new_inode+0x34f/0x5510 [ 2757.569445][T26059] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2757.575466][T26059] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2757.581309][T26059] ? trace_hardirqs_on+0x5b/0x1a0 [ 2757.586364][T26059] ? find_held_lock+0x2d/0x110 [ 2757.590166][ T33] kauditd_printk_skb: 15 callbacks suppressed [ 2757.590184][ T33] audit: type=1804 audit(1623020504.175:329): pid=26065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343931342F48C7C060 dev="sda1" ino=16194 res=1 errno=0 [ 2757.591155][T26059] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2757.591212][T26059] ? do_raw_spin_unlock+0x171/0x230 [ 2757.597327][ T33] audit: type=1804 audit(1623020504.175:330): pid=26066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343931342F48C7C060 dev="sda1" ino=16194 res=1 errno=0 [ 2757.627028][T26059] ? d_splice_alias+0x4c6/0xc60 23:01:44 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f0000000040)={{0x12, 0x1, 0xd8b51cebc2491585, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x5, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "21ad4c27"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x80, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x1000, 0x10}, [@country_functional={0xe, 0x24, 0x7, 0x4d, 0x3, [0xfeff, 0xd7ad, 0x4, 0x6]}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xd4, 0x4, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xb1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x81, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x6, 0x2}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xa1, 0x7, 0x40, 0xff, 0x9}, 0xd2, &(0x7f0000000140)={0x5, 0xf, 0xd2, 0x4, [@generic={0x9f, 0x10, 0x4, "e8b208b48029b582a4911285199069f4b5332dac411c800ea4b0f2858b8fcfdcb8c0fde6b06bf3b847f7eae67f0e8f7f1ef4d79b631643d7b34a42c58c7ec3ce3e1d4aa6667431393240f8a0374bb5a13681f6d69043326ab00879d64a3c042365987d88882a497ab02c79b1488113a8cfcd9842c312173f9fd4f6cd95ba6124f24f974201580741145809786a8b2286161a678fa2a70d4fcc21c371"}, @ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0xfff, 0xf, 0x4, [0xfe8000]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d4f222203166ab012465309ec83ed423"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x1, 0x1, 0x5}]}, 0x7, [{0x70, &(0x7f0000000240)=@string={0x70, 0x3, "cec56a314c12ad708eb06877777ed633593f8dceed970ed399159b53e8900d72e6deb3e38f2ffccc0beabbfb16518e931cfd221ac79ec756069902356e8ea1fb7c3652e3219850f85b24765f224ed0ae70d96de63e34dfe1aff943e95ba891321b8040c37ba0d3455cef8f86f6f3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x34}}, {0xdb, &(0x7f0000000300)=@string={0xdb, 0x3, "5e643b9d58e982013516baef0f3a9d97a64178a5fac8e00eafc3b0a94b06b689ce8240a73eb98a3545aab14256532af27502692921d115f128f4d0131b47508114bfe89087ea5b74a99bbb7cc3548816c30a738ff8ec7ef50aa8bd461b9984d18c15cde3d369f481fcc022812f1dbb63afb3598d2b4c1d160a880af338b58366f578400eb63200a80a9ee78f26d0fd6eeeddfc962aa094cb8e4f0c402f7b01c42b07858ea957a9e6fcdf6fec532a74c1d646022faf869363b628e33939658e7c3a51fa6da55e26b6fbc16d789174b01c230fd68196264328ab"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x439}}, {0x28, &(0x7f0000000580)=ANY=[@ANYBLOB="28fba2b83410a99e31d401f19d0b0f959aa47bfc9d90ec1df3ebd56ad4109b91000200000000000033"]}]}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x4, 0x20000]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2757.627063][T26059] ? ext4_create+0x447/0x4d0 [ 2757.627085][T26059] ext4_create+0x2d6/0x4d0 [ 2757.627107][T26059] ? ext4_mknod+0x4e0/0x4e0 [ 2757.686040][T26059] ? generic_permission+0x126/0x5b0 [ 2757.691281][T26059] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2757.697692][T26059] ? security_inode_permission+0xc5/0xf0 [ 2757.703365][T26059] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2757.709648][T26059] ? ext4_mknod+0x4e0/0x4e0 [ 2757.714183][T26059] lookup_open.isra.0+0xf23/0x1300 [ 2757.719328][T26059] ? hashlen_string+0xf0/0xf0 [ 2757.723700][ T33] audit: type=1804 audit(1623020504.175:331): pid=26060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343835332F48C7C060 dev="sda1" ino=14695 res=1 errno=0 [ 2757.724032][T26059] ? verify_cpu+0x100/0x100 [ 2757.755246][ T33] audit: type=1800 audit(1623020504.175:332): pid=26062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14654 res=0 errno=0 [ 2757.758442][T26059] ? verify_cpu+0x100/0x100 [ 2757.758475][T26059] path_openat+0x9b4/0x27e0 [ 2757.758505][T26059] ? path_lookupat+0x850/0x850 [ 2757.785813][ T33] audit: type=1804 audit(1623020504.175:333): pid=26060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343835332F48C7C060 dev="sda1" ino=14695 res=1 errno=0 23:01:44 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x88805) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/177) [ 2757.788792][T26059] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2757.788834][T26059] do_filp_open+0x190/0x3d0 [ 2757.788859][T26059] ? may_open_dev+0xf0/0xf0 [ 2757.788881][T26059] ? do_raw_spin_lock+0x120/0x2b0 [ 2757.817642][ T33] audit: type=1804 audit(1623020504.175:334): pid=26062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353132362F48C7C060 dev="sda1" ino=14654 res=1 errno=0 23:01:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/132) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)) [ 2757.823935][T26059] ? rwlock_bug.part.0+0x90/0x90 [ 2757.823970][T26059] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2757.824000][T26059] ? _find_next_bit+0x1e3/0x260 [ 2757.824030][T26059] ? _raw_spin_unlock+0x1a/0x30 [ 2757.824051][T26059] ? alloc_fd+0x2e6/0x660 [ 2757.899517][T26059] do_sys_openat2+0x16d/0x420 [ 2757.904350][T26059] ? build_open_flags+0x6f0/0x6f0 [ 2757.909407][T26059] ? __context_tracking_exit+0x9f/0xb0 [ 2757.914967][T26059] ? lock_downgrade+0x6e0/0x6e0 [ 2757.919949][T26059] __x64_sys_openat+0x13f/0x1f0 [ 2757.924853][T26059] ? __ia32_sys_open+0x1c0/0x1c0 [ 2757.929851][T26059] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2757.935876][T26059] ? syscall_enter_from_user_mode+0x27/0x70 [ 2757.941807][T26059] do_syscall_64+0x3a/0xb0 [ 2757.946255][T26059] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2757.951568][ T33] audit: type=1804 audit(1623020504.175:335): pid=26078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343931372F48C7C060 dev="sda1" ino=16194 res=1 errno=0 [ 2757.952172][T26059] RIP: 0033:0x4196c4 [ 2757.952195][T26059] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2757.952220][T26059] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2757.952246][T26059] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 23:01:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x40005) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000000)=""/152) [ 2758.023179][T26059] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2758.031152][T26059] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2758.039119][T26059] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2758.047672][T26059] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2758.060178][T20128] usb 2-1: USB disconnect, device number 42 23:01:44 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000, 0x101640) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/122) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) 23:01:44 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) [ 2758.137371][ T33] audit: type=1804 audit(1623020504.815:336): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343931382F48C7C060 dev="sda1" ino=14666 res=1 errno=0 [ 2758.170877][ T33] audit: type=1804 audit(1623020504.825:337): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343931382F48C7C060 dev="sda1" ino=14666 res=1 errno=0 [ 2758.226956][ T33] audit: type=1800 audit(1623020504.885:338): pid=26095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14677 res=0 errno=0 [ 2758.250830][ T5] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2758.419409][T20128] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 2758.499974][ T5] usb 1-1: Invalid ep0 maxpacket: 512 [ 2758.650126][ T5] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2758.779971][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2758.791339][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1026, setting to 64 [ 2758.803571][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2758.813542][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2758.909409][ T5] usb 1-1: Invalid ep0 maxpacket: 512 [ 2758.915298][ T5] usb usb1-port1: attempt power cycle [ 2758.989905][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2758.999032][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2759.007117][T20128] usb 2-1: Product: syz [ 2759.011363][T20128] usb 2-1: Manufacturer: syz [ 2759.016015][T20128] usb 2-1: SerialNumber: syz [ 2759.040839][T26063] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:45 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x403}}}}}}]}}, 0x0) 23:01:45 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xfffffffffffffc01, 0x645babbb11ba4834) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x20000004, 0x5) 23:01:45 executing program 2 (fault-call:0 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:45 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) 23:01:45 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x20, 0x408000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5000000, 0x208000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/4096) [ 2759.301159][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2759.326337][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2759.333302][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2759.339705][ T5] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2759.365708][T26111] FAULT_INJECTION: forcing a failure. [ 2759.365708][T26111] name failslab, interval 1, probability 0, space 0, times 0 [ 2759.378632][T26111] CPU: 0 PID: 26111 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2759.387428][T26111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2759.387632][T20128] usb 2-1: USB disconnect, device number 43 [ 2759.397588][T26111] Call Trace: [ 2759.397606][T26111] dump_stack+0x143/0x1db [ 2759.397636][T26111] should_fail.cold+0x5/0xa [ 2759.397662][T26111] ? security_inode_alloc+0x34/0x160 [ 2759.397689][T26111] should_failslab+0x5/0x10 [ 2759.397711][T26111] kmem_cache_alloc+0x5b/0x360 [ 2759.397737][T26111] security_inode_alloc+0x34/0x160 [ 2759.435777][T26111] inode_init_always+0x52e/0xc40 [ 2759.440757][T26111] alloc_inode+0x82/0x230 [ 2759.445120][T26111] new_inode+0x27/0x2f0 [ 2759.449308][T26111] __ext4_new_inode+0x34f/0x5510 [ 2759.454277][T26111] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2759.460294][T26111] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2759.466231][T26111] ? trace_hardirqs_on+0x5b/0x1a0 [ 2759.471291][T26111] ? find_held_lock+0x2d/0x110 23:01:46 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/8) [ 2759.476089][T26111] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2759.481661][T26111] ? do_raw_spin_unlock+0x171/0x230 [ 2759.486894][T26111] ? d_splice_alias+0x4c6/0xc60 [ 2759.491791][T26111] ? ext4_create+0x447/0x4d0 [ 2759.496411][T26111] ext4_create+0x2d6/0x4d0 [ 2759.500861][T26111] ? ext4_mknod+0x4e0/0x4e0 [ 2759.505402][T26111] ? generic_permission+0x126/0x5b0 [ 2759.510637][T26111] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2759.516917][T26111] ? security_inode_permission+0xc5/0xf0 [ 2759.522588][T26111] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2759.528867][T26111] ? ext4_mknod+0x4e0/0x4e0 [ 2759.533399][T26111] lookup_open.isra.0+0xf23/0x1300 [ 2759.538554][T26111] ? hashlen_string+0xf0/0xf0 [ 2759.543361][T26111] ? verify_cpu+0x100/0x100 [ 2759.547897][T26111] ? verify_cpu+0x100/0x100 [ 2759.552433][T26111] path_openat+0x9b4/0x27e0 [ 2759.556997][T26111] ? path_lookupat+0x850/0x850 [ 2759.561884][T26111] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2759.567898][T26111] do_filp_open+0x190/0x3d0 [ 2759.572426][T26111] ? may_open_dev+0xf0/0xf0 [ 2759.576954][T26111] ? do_raw_spin_lock+0x120/0x2b0 [ 2759.582004][T26111] ? rwlock_bug.part.0+0x90/0x90 [ 2759.586966][T26111] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2759.593236][T26111] ? _find_next_bit+0x1e3/0x260 [ 2759.598209][T26111] ? _raw_spin_unlock+0x1a/0x30 [ 2759.603096][T26111] ? alloc_fd+0x2e6/0x660 [ 2759.607456][T26111] do_sys_openat2+0x16d/0x420 [ 2759.612144][T26111] ? build_open_flags+0x6f0/0x6f0 [ 2759.617165][T26111] ? __context_tracking_exit+0x9f/0xb0 [ 2759.622796][T26111] ? lock_downgrade+0x6e0/0x6e0 [ 2759.627745][T26111] __x64_sys_openat+0x13f/0x1f0 [ 2759.632677][T26111] ? __ia32_sys_open+0x1c0/0x1c0 [ 2759.637634][T26111] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2759.643627][T26111] ? syscall_enter_from_user_mode+0x27/0x70 [ 2759.649528][T26111] do_syscall_64+0x3a/0xb0 [ 2759.653969][T26111] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2759.660012][T26111] RIP: 0033:0x4196c4 [ 2759.663899][T26111] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2759.683630][T26111] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2759.692156][T26111] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2759.700152][T26111] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2759.708117][T26111] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2759.716078][T26111] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2759.724042][T26111] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2759.809424][ T5] usb 1-1: Invalid ep0 maxpacket: 512 [ 2759.819493][T20128] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2759.959335][ T5] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2760.049899][ T5] usb 1-1: Invalid ep0 maxpacket: 512 [ 2760.055563][ T5] usb usb1-port1: unable to enumerate USB device [ 2760.189844][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2760.201140][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1027, setting to 64 [ 2760.212586][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2760.222664][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2760.390045][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2760.399390][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2760.407715][T20128] usb 2-1: Product: syz [ 2760.411913][T20128] usb 2-1: Manufacturer: syz [ 2760.416769][T20128] usb 2-1: SerialNumber: syz [ 2760.450459][T26116] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0x6) 23:01:47 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x400, 0x101640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x2000) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000140)=""/184) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x240883) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000240)=""/18) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/232) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/36) 23:01:47 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x84000) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:47 executing program 2 (fault-call:0 fault-nth:9): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:47 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) 23:01:47 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x404}}}}}}]}}, 0x0) [ 2760.709393][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2760.717986][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2760.725174][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2760.825490][T20128] usb 2-1: USB disconnect, device number 44 [ 2760.833652][T26144] FAULT_INJECTION: forcing a failure. [ 2760.833652][T26144] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.846410][T26144] CPU: 0 PID: 26144 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2760.855203][T26144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2760.865367][T26144] Call Trace: [ 2760.868667][T26144] dump_stack+0x143/0x1db [ 2760.873026][T26144] should_fail.cold+0x5/0xa [ 2760.877565][T26144] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2760.883325][T26144] should_failslab+0x5/0x10 [ 2760.887867][T26144] __kmalloc+0x72/0x310 [ 2760.892056][T26144] ? lock_chain_count+0x20/0x20 [ 2760.896952][T26144] tomoyo_realpath_from_path+0xc3/0x620 [ 2760.902544][T26144] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2760.909092][T26144] tomoyo_check_open_permission+0x272/0x380 [ 2760.915020][T26144] ? tomoyo_path_number_perm+0x590/0x590 23:01:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x191041) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x1) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x803, 0x200000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001040)=""/114) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x1, 0x4081) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001740)=0x1) [ 2760.920685][T26144] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2760.926701][T26144] ? path_get+0x5d/0x80 [ 2760.930898][T26144] ? lock_downgrade+0x6e0/0x6e0 [ 2760.935787][T26144] ? do_raw_spin_lock+0x120/0x2b0 [ 2760.940942][T26144] tomoyo_file_open+0xa3/0xd0 [ 2760.945652][T26144] security_file_open+0x52/0x4f0 [ 2760.950626][T26144] do_dentry_open+0x353/0x1090 [ 2760.955520][T26144] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2760.961798][T26144] ? may_open+0x1f6/0x420 [ 2760.966173][T26144] path_openat+0x1c0e/0x27e0 [ 2760.970793][T26144] ? path_lookupat+0x850/0x850 23:01:47 executing program 4: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1294, 0x1320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x0, 0x38, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x400, 0x7, 0x1, {0x22, 0x40c}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x46, 0xd1}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0x4, 0x1, 0xff, 0x1b}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x64, 0x3, 0x47, 0x7, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x6, 0x5, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x95, 0x9, 0x4000}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x4, 0xfff}]}, 0x1, [{0xf6, &(0x7f00000000c0)=@string={0xf6, 0x3, "4ee6baff5906098057bb45119590f152f4b9f80259f324ae17f43b17bb437d77984510be009fadf1b92537651b14d5f3dc6faa13ce761e3eb742fc3cc1403ff5ff9561bb3447f5ba14fb40229f791ddf158c245c916165771e1387da1225c5f6deb61707fa7a15f5757cdeadb811b2c013e5a6ada7a01307d9e857afd4929ec3c0ee61df9a7433337543390788a01751f82accc7dfaf896bf7a104166b047f8a62b57c33970aa05a380ac3b06a9dd90d7d2a621ef1db3ff5eb5bbd52c52f60dbc66797eef9a1e126e53ced1f768f21e9cf493050b1cc3b63cd3c5548a663375f2e16a2df2285ade26b9bfb50e4f520f61f68f76c"}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2760.975595][T26144] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2760.981611][T26144] do_filp_open+0x190/0x3d0 [ 2760.986139][T26144] ? may_open_dev+0xf0/0xf0 [ 2760.990665][T26144] ? do_raw_spin_lock+0x120/0x2b0 [ 2760.995722][T26144] ? rwlock_bug.part.0+0x90/0x90 [ 2761.000804][T26144] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2761.007083][T26144] ? _find_next_bit+0x1e3/0x260 [ 2761.011962][T26144] ? _raw_spin_unlock+0x1a/0x30 [ 2761.016856][T26144] ? alloc_fd+0x2e6/0x660 [ 2761.021310][T26144] do_sys_openat2+0x16d/0x420 [ 2761.026016][T26144] ? build_open_flags+0x6f0/0x6f0 [ 2761.031068][T26144] ? __context_tracking_exit+0x9f/0xb0 [ 2761.036554][T26144] ? lock_downgrade+0x6e0/0x6e0 [ 2761.041440][T26144] __x64_sys_openat+0x13f/0x1f0 [ 2761.046409][T26144] ? __ia32_sys_open+0x1c0/0x1c0 [ 2761.051473][T26144] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2761.057588][T26144] ? syscall_enter_from_user_mode+0x27/0x70 [ 2761.063595][T26144] do_syscall_64+0x3a/0xb0 [ 2761.068022][T26144] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2761.073911][T26144] RIP: 0033:0x4196c4 [ 2761.077798][T26144] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2761.097432][T26144] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2761.105849][T26144] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2761.113817][T26144] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2761.121781][T26144] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2761.133862][T26144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2761.141848][T26144] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2761.150205][T26144] ERROR: Out of memory at tomoyo_realpath_from_path. 23:01:47 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) 23:01:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x44000) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x0, 0x1]) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/11) 23:01:47 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3fd, 0x60b8723eed8eba0f) 23:01:47 executing program 2 (fault-call:0 fault-nth:10): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:48 executing program 0: read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/229, 0xe5) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2761.315049][ T32] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 2761.331131][T26177] FAULT_INJECTION: forcing a failure. [ 2761.331131][T26177] name failslab, interval 1, probability 0, space 0, times 0 [ 2761.344006][T26177] CPU: 0 PID: 26177 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2761.352806][T26177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.362887][T26177] Call Trace: [ 2761.366195][T26177] dump_stack+0x143/0x1db [ 2761.370559][T26177] should_fail.cold+0x5/0xa [ 2761.375090][T26177] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2761.380466][T26177] should_failslab+0x5/0x10 [ 2761.384995][T26177] __kmalloc+0x72/0x310 [ 2761.389150][T26177] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2761.394349][T26177] tomoyo_encode+0x28/0x50 [ 2761.398801][T26177] tomoyo_realpath_from_path+0x186/0x620 [ 2761.404459][T26177] tomoyo_check_open_permission+0x272/0x380 [ 2761.410369][T26177] ? tomoyo_path_number_perm+0x590/0x590 [ 2761.415999][T26177] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2761.421981][T26177] ? path_get+0x5d/0x80 [ 2761.426136][T26177] ? lock_downgrade+0x6e0/0x6e0 [ 2761.430981][T26177] ? do_raw_spin_lock+0x120/0x2b0 [ 2761.436008][T26177] tomoyo_file_open+0xa3/0xd0 [ 2761.440692][T26177] security_file_open+0x52/0x4f0 [ 2761.445626][T26177] do_dentry_open+0x353/0x1090 [ 2761.450382][T26177] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2761.456617][T26177] ? may_open+0x1f6/0x420 [ 2761.460944][T26177] path_openat+0x1c0e/0x27e0 [ 2761.465535][T26177] ? path_lookupat+0x850/0x850 [ 2761.470300][T26177] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2761.476280][T26177] do_filp_open+0x190/0x3d0 [ 2761.480788][T26177] ? may_open_dev+0xf0/0xf0 [ 2761.485283][T26177] ? do_raw_spin_lock+0x120/0x2b0 [ 2761.490302][T26177] ? rwlock_bug.part.0+0x90/0x90 [ 2761.495231][T26177] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2761.501467][T26177] ? _find_next_bit+0x1e3/0x260 [ 2761.506312][T26177] ? _raw_spin_unlock+0x1a/0x30 [ 2761.511156][T26177] ? alloc_fd+0x2e6/0x660 [ 2761.515476][T26177] do_sys_openat2+0x16d/0x420 [ 2761.520147][T26177] ? build_open_flags+0x6f0/0x6f0 [ 2761.525165][T26177] ? __context_tracking_exit+0x9f/0xb0 [ 2761.530650][T26177] ? lock_downgrade+0x6e0/0x6e0 [ 2761.535501][T26177] __x64_sys_openat+0x13f/0x1f0 [ 2761.540372][T26177] ? __ia32_sys_open+0x1c0/0x1c0 [ 2761.545329][T26177] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2761.551306][T26177] ? syscall_enter_from_user_mode+0x27/0x70 [ 2761.557210][T26177] do_syscall_64+0x3a/0xb0 [ 2761.561804][T26177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2761.567697][T26177] RIP: 0033:0x4196c4 [ 2761.571582][T26177] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2761.591185][T26177] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2761.599596][T26177] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2761.607560][T26177] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c 23:01:48 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2761.615536][T26177] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2761.623498][T26177] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2761.631460][T26177] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2761.639630][T26177] ERROR: Out of memory at tomoyo_realpath_from_path. 23:01:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/102) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/142) 23:01:48 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x51, 0x1, 0x1, {0x200, 0x68b}, {0x401, 0x4}, @ramp={0x8, 0x3, {0x6, 0x8, 0x5, 0x80}}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x8000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x100) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/104) 23:01:48 executing program 2 (fault-call:0 fault-nth:11): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2761.718087][T20128] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 2761.817196][T26193] FAULT_INJECTION: forcing a failure. [ 2761.817196][T26193] name failslab, interval 1, probability 0, space 0, times 0 [ 2761.830061][T26193] CPU: 1 PID: 26193 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2761.838848][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.848902][T26193] Call Trace: [ 2761.852417][T26193] dump_stack+0x143/0x1db [ 2761.856892][T26193] should_fail.cold+0x5/0xa [ 2761.861402][T26193] ? integrity_inode_get+0x5a/0x270 [ 2761.866668][T26193] should_failslab+0x5/0x10 [ 2761.871376][T26193] kmem_cache_alloc+0x5b/0x360 [ 2761.876146][T26193] ? ima_get_action+0x7a/0xa0 [ 2761.880838][T26193] integrity_inode_get+0x5a/0x270 [ 2761.886128][T26193] process_measurement+0x33d/0x17e0 [ 2761.891324][T26193] ? mmap_violation_check+0x1e0/0x1e0 [ 2761.896725][T26193] ? tomoyo_path_number_perm+0x590/0x590 [ 2761.902359][T26193] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2761.908365][T26193] ? find_held_lock+0x2d/0x110 [ 2761.913247][T26193] ? aa_get_task_label+0x25f/0x540 [ 2761.918386][T26193] ? lock_downgrade+0x6e0/0x6e0 [ 2761.923241][T26193] ? fsnotify+0x1070/0x1070 [ 2761.927744][T26193] ? ext4_file_write_iter+0x1980/0x1980 [ 2761.933284][T26193] ? path_get+0x5d/0x80 [ 2761.937436][T26193] ? aa_get_task_label+0x288/0x540 [ 2761.942571][T26193] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2761.948816][T26193] ? apparmor_task_getsecid+0xc2/0x110 [ 2761.954478][T26193] ima_file_check+0xb9/0x100 [ 2761.959070][T26193] ? process_measurement+0x17e0/0x17e0 [ 2761.964543][T26193] ? may_open+0x1f6/0x420 [ 2761.968867][T26193] path_openat+0x15b5/0x27e0 [ 2761.973456][T26193] ? path_lookupat+0x850/0x850 [ 2761.978217][T26193] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2761.984469][T26193] do_filp_open+0x190/0x3d0 [ 2761.988973][T26193] ? may_open_dev+0xf0/0xf0 [ 2761.993470][T26193] ? do_raw_spin_lock+0x120/0x2b0 [ 2761.998517][T26193] ? rwlock_bug.part.0+0x90/0x90 [ 2762.003556][T26193] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2762.009799][T26193] ? _find_next_bit+0x1e3/0x260 [ 2762.014650][T26193] ? _raw_spin_unlock+0x1a/0x30 [ 2762.019514][T26193] ? alloc_fd+0x2e6/0x660 [ 2762.023931][T26193] do_sys_openat2+0x16d/0x420 [ 2762.028608][T26193] ? build_open_flags+0x6f0/0x6f0 [ 2762.033734][T26193] ? __context_tracking_exit+0x9f/0xb0 [ 2762.039196][T26193] ? lock_downgrade+0x6e0/0x6e0 [ 2762.044072][T26193] __x64_sys_openat+0x13f/0x1f0 [ 2762.049023][T26193] ? __ia32_sys_open+0x1c0/0x1c0 [ 2762.054081][T26193] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2762.060069][T26193] ? syscall_enter_from_user_mode+0x27/0x70 [ 2762.066049][T26193] do_syscall_64+0x3a/0xb0 [ 2762.070486][T26193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2762.076380][T26193] RIP: 0033:0x4196c4 [ 2762.080307][T26193] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2762.099933][T26193] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2762.108368][T26193] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2762.116338][T26193] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2762.124314][T26193] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2762.132290][T26193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2762.140270][T26193] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2762.159181][ T32] usb 5-1: Invalid ep0 maxpacket: 32 [ 2762.309186][ T32] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 2762.419310][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2762.430892][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1028, setting to 64 [ 2762.442506][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2762.452353][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2762.559228][ T32] usb 5-1: Invalid ep0 maxpacket: 32 [ 2762.564777][ T32] usb usb5-port1: attempt power cycle [ 2762.619379][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2762.628475][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2762.636658][T20128] usb 2-1: Product: syz [ 2762.640890][T20128] usb 2-1: Manufacturer: syz [ 2762.645576][T20128] usb 2-1: SerialNumber: syz [ 2762.670559][T26145] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:49 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x405}}}}}}]}}, 0x0) 23:01:49 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2762.929286][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2762.947689][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2762.954659][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2762.979308][ T32] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 2762.990786][T20128] usb 2-1: USB disconnect, device number 45 [ 2763.079195][ T32] usb 5-1: Invalid ep0 maxpacket: 32 [ 2763.239168][ T32] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 2763.329718][ T32] usb 5-1: Invalid ep0 maxpacket: 32 [ 2763.335342][ T32] usb usb5-port1: unable to enumerate USB device [ 2763.349207][T20128] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 2763.719204][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2763.730553][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1029, setting to 64 [ 2763.742104][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2763.752020][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2763.919625][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2763.928868][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2763.936951][T20128] usb 2-1: Product: syz [ 2763.941390][T20128] usb 2-1: Manufacturer: syz [ 2763.946089][T20128] usb 2-1: SerialNumber: syz 23:01:50 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/28) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000080)={0x3, 0x8000, 0x8ec, 0x1000, 0x8, 0xff}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/85) 23:01:50 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/49) 23:01:50 executing program 5: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x200) 23:01:50 executing program 2 (fault-call:0 fault-nth:12): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:50 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2763.970536][T26204] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2764.054237][T26226] FAULT_INJECTION: forcing a failure. [ 2764.054237][T26226] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.067598][T26226] CPU: 1 PID: 26226 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2764.076392][T26226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2764.086561][T26226] Call Trace: [ 2764.090035][T26226] dump_stack+0x143/0x1db [ 2764.094482][T26226] should_fail.cold+0x5/0xa [ 2764.099019][T26226] should_failslab+0x5/0x10 [ 2764.103562][T26226] __kmalloc_track_caller+0x79/0x300 [ 2764.108887][T26226] ? ima_collect_measurement+0x342/0x570 [ 2764.115003][T26226] krealloc+0x7e/0xd0 [ 2764.119102][T26226] ima_collect_measurement+0x342/0x570 [ 2764.124604][T26226] ? ima_get_action+0xa0/0xa0 [ 2764.129399][T26226] ? ima_get_cache_status+0x1d0/0x1d0 [ 2764.134808][T26226] process_measurement+0xd1c/0x17e0 [ 2764.140042][T26226] ? mmap_violation_check+0x1e0/0x1e0 [ 2764.145448][T26226] ? tomoyo_path_number_perm+0x590/0x590 [ 2764.151294][T26226] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2764.157322][T26226] ? find_held_lock+0x2d/0x110 [ 2764.162122][T26226] ? aa_get_task_label+0x25f/0x540 [ 2764.167268][T26226] ? lock_downgrade+0x6e0/0x6e0 [ 2764.172160][T26226] ? fsnotify+0x1070/0x1070 [ 2764.176696][T26226] ? ext4_file_write_iter+0x1980/0x1980 [ 2764.182269][T26226] ? path_get+0x5d/0x80 [ 2764.186486][T26226] ? aa_get_task_label+0x288/0x540 [ 2764.191634][T26226] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2764.197907][T26226] ? apparmor_task_getsecid+0xc2/0x110 [ 2764.203418][T26226] ima_file_check+0xb9/0x100 [ 2764.208041][T26226] ? process_measurement+0x17e0/0x17e0 [ 2764.213634][T26226] ? may_open+0x1f6/0x420 [ 2764.218004][T26226] path_openat+0x15b5/0x27e0 [ 2764.222636][T26226] ? path_lookupat+0x850/0x850 [ 2764.227435][T26226] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2764.233454][T26226] do_filp_open+0x190/0x3d0 [ 2764.237990][T26226] ? may_open_dev+0xf0/0xf0 [ 2764.242390][ T33] kauditd_printk_skb: 19 callbacks suppressed [ 2764.242409][ T33] audit: type=1804 audit(1623020510.755:358): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343836302F48C7C060 dev="sda1" ino=16375 res=1 errno=0 [ 2764.242625][T26226] ? do_raw_spin_lock+0x120/0x2b0 [ 2764.248855][ T33] audit: type=1804 audit(1623020510.755:359): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343932332F48C7C060 dev="sda1" ino=16380 res=1 errno=0 [ 2764.278750][T26226] ? rwlock_bug.part.0+0x90/0x90 [ 2764.278781][T26226] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2764.278806][T26226] ? _find_next_bit+0x1e3/0x260 [ 2764.278829][T26226] ? _raw_spin_unlock+0x1a/0x30 [ 2764.334647][T26226] ? alloc_fd+0x2e6/0x660 [ 2764.339016][T26226] do_sys_openat2+0x16d/0x420 [ 2764.343749][T26226] ? build_open_flags+0x6f0/0x6f0 [ 2764.348809][T26226] ? __context_tracking_exit+0x9f/0xb0 [ 2764.354302][T26226] ? lock_downgrade+0x6e0/0x6e0 [ 2764.355028][ T33] audit: type=1804 audit(1623020510.755:360): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343932332F48C7C060 dev="sda1" ino=16380 res=1 errno=0 [ 2764.359183][T26226] __x64_sys_openat+0x13f/0x1f0 [ 2764.359214][T26226] ? __ia32_sys_open+0x1c0/0x1c0 [ 2764.359240][T26226] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 23:01:50 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x406}}}}}}]}}, 0x0) 23:01:50 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000140)={0x55, 0x3, 0x6, {0xff, 0x7}, {0x29ba, 0x9}, @const={0x9, {0xfff9, 0x5, 0x5, 0x1c18}}}) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/57) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x105040) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/171) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:50 executing program 5: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x200) 23:01:50 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:51 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:51 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2764.359269][T26226] ? syscall_enter_from_user_mode+0x27/0x70 [ 2764.410999][T26226] do_syscall_64+0x3a/0xb0 [ 2764.415452][T26226] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2764.421388][T26226] RIP: 0033:0x4196c4 [ 2764.425320][T26226] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2764.444957][T26226] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2764.453409][T26226] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2764.461530][T26226] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2764.469531][T26226] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2764.477703][T26226] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2764.485698][T26226] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2764.502301][ T33] audit: type=1804 audit(1623020511.185:361): pid=26245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353138382F48C7C060 dev="sda1" ino=14719 res=1 errno=0 [ 2764.509166][T20128] cdc_ncm 2-1:1.0: bind() failure 23:01:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffc8, 0x4200) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/252) 23:01:51 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/102) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/142) [ 2764.536196][ T33] audit: type=1804 audit(1623020511.215:362): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343836302F48C7C060 dev="sda1" ino=16375 res=1 errno=0 23:01:51 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={{0x1, 0x3, 0xfff, 0x80000001, 0x5, 0x7}, 0x176, [0x80, 0x6, 0x5, 0x8, 0x6, 0x7fff, 0x3cbcc9c5, 0x0, 0xff, 0xffff, 0x7177, 0x401, 0x80000000, 0xf8000, 0x200, 0x72f, 0x80, 0x2, 0x4, 0xfffff2fb, 0x7f, 0x7, 0x81, 0x892, 0x14, 0x1, 0x7, 0x3ff, 0x8, 0x5, 0x3, 0x4c38, 0x4, 0x1000, 0x1ff, 0x3e00000, 0x1ff, 0x0, 0x3, 0x7dc4, 0xffffffff, 0xd6, 0x73e, 0xffff, 0x7, 0x111, 0xd70, 0x7fffffff, 0x1, 0x9, 0x2, 0x8, 0x200, 0x0, 0x7, 0x3ff, 0x81, 0x3a6, 0x7ff, 0x3f, 0x3ff, 0x5, 0x8, 0x9d8, 0x9, 0x5998, 0x3, 0x4, 0x5, 0x74e, 0x6, 0xcc, 0x9, 0x8, 0x0, 0x9, 0x1000, 0xfffffff7, 0x0, 0x8, 0x7, 0x8, 0x1000, 0x8, 0x584e, 0x5, 0x0, 0x0, 0x4, 0x5, 0x2eec, 0x4, 0x4, 0x100, 0x892, 0xb7, 0xa4, 0x7fff, 0x6, 0xe06, 0x8, 0x1, 0x2, 0x2, 0x0, 0x0, 0x9, 0x200, 0x2, 0x100, 0xffff, 0x5, 0x80000000, 0x8001, 0x4, 0x2, 0x7, 0x2, 0x80, 0x7ff, 0x30e, 0x1, 0x1, 0x1000, 0xffffffff, 0x9, 0xe9bb, 0x650e, 0x13366352, 0x20, 0x400, 0x6, 0x8, 0x1, 0x5, 0xf4c, 0x8001, 0x4, 0x80000001, 0x200, 0x7, 0x3, 0x10000, 0x4, 0x2, 0x7fff, 0x1000, 0x0, 0x1ff, 0x3e0000, 0x3, 0x7, 0x6, 0x1, 0x8, 0x5, 0xdcf, 0x77b5db4c, 0x1, 0x3b94, 0x8, 0x8, 0x0, 0x0, 0x7, 0x80, 0x3, 0x400, 0x8d, 0x6, 0xfffffffc, 0x1, 0x81, 0x7, 0x1, 0x2, 0x7, 0xffff, 0x3c, 0x5, 0x8, 0xc2ee, 0x2, 0xfffffbff, 0x7, 0x0, 0x25a1, 0x200, 0xce, 0x664, 0x6, 0x7, 0x6, 0x0, 0x400, 0x1, 0xfb, 0x2, 0x800, 0xfffffff8, 0x2, 0xfff, 0x4735, 0xb00, 0x4, 0xfff, 0x6, 0x7f, 0x7ff, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1f, 0x5, 0x10001, 0x8000, 0x7, 0x3, 0x1, 0x4, 0x2d36af98, 0x2, 0x8001, 0x7f, 0x6, 0x5, 0x2, 0x2, 0x80, 0x3, 0x4, 0x0, 0x9, 0x1, 0x8, 0xfffffffc, 0x9, 0x101, 0xfffffff9, 0x9, 0x7, 0xfffffff9, 0x40, 0x2, 0x1, 0xfff, 0xed0, 0x200, 0x80, 0x401, 0xfffffff9, 0x1, 0x8000, 0x7, 0x10000000, 0x5, 0x3, 0x1, 0x3, 0x0, 0x1, 0xccab, 0x1, 0x4, 0x1, 0x3, 0x80000001, 0x87, 0x1, 0x37b0, 0x80000000, 0x81, 0x1, 0x80, 0x9, 0xfffffffb, 0x754, 0x0, 0x4, 0x20, 0x0, 0x0, 0x2, 0x1, 0x1ff, 0x9, 0x2, 0x3f, 0x2, 0x7, 0x5, 0xffffffff, 0x3, 0x1000, 0xd50, 0x7996, 0x0, 0x2, 0x7, 0x8, 0x7fffffff, 0x2, 0x6, 0x3, 0x7fff, 0x11b, 0x4, 0x7, 0x1, 0x9, 0x0, 0x81, 0x8c, 0x1f, 0xbc, 0x5, 0x40, 0x8, 0x7, 0x4, 0x1, 0xc8f, 0x2, 0x9dbd, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xde51, 0x5, 0x8, 0x4, 0x7fffffff, 0x7cb, 0x200, 0x8, 0x8, 0x8, 0x5, 0xfffffffe, 0x4, 0xce1, 0x80, 0x1000, 0x5, 0xdae5, 0x8, 0x6172, 0x467, 0x5, 0xfffffffc, 0x7f, 0x401, 0x10000, 0x0, 0x8, 0x3, 0x80000000, 0x0, 0x1000, 0x0, 0x2, 0x96, 0x80, 0x6, 0xffffffff, 0x3, 0x80000000, 0x9, 0x7, 0x8000, 0xe33f, 0x3, 0x6, 0x6, 0xffffffff, 0xb9, 0x6df, 0x8, 0x7, 0x4, 0x6, 0x81, 0x4, 0x65, 0xd119, 0xffff6d2c, 0x4, 0xfffffc00, 0x6, 0x0, 0xffff, 0x7, 0x8, 0x8000, 0x1, 0x3ff, 0x3ff, 0x2, 0x3, 0x2, 0x9, 0xfff, 0x6, 0x10000, 0x8, 0x1f25, 0x95, 0x9, 0x1000, 0x227d, 0x0, 0x6, 0x36, 0x6, 0xc, 0xfffff287, 0xfffffffa, 0x800, 0x1, 0xd647, 0xfff, 0x0, 0x1f, 0x2, 0x8, 0x3, 0x1f, 0x6, 0x8, 0xfffffffa, 0x0, 0x8, 0x9, 0x6, 0x3ff, 0xda72, 0x1, 0x7, 0x80000000, 0x2, 0x0, 0x9, 0x4, 0x8, 0x7f, 0x70000000, 0x0, 0x0, 0x3, 0x1, 0x8, 0x0, 0x3ff, 0x84aa, 0xa1a, 0x2, 0x9, 0x1, 0xda, 0x9, 0x7, 0x0, 0x5, 0x20, 0x4, 0x81, 0x9bc, 0x6, 0x6, 0x1, 0x8, 0x7fffffff, 0x0, 0x400, 0x1, 0x4, 0xffff7fff, 0x8, 0x7fffffff, 0x4, 0x3ff, 0x0, 0x2f34, 0xffffffc0, 0x3, 0x401, 0x2, 0x6, 0x5, 0x9, 0x1f, 0x3, 0x10000, 0x4, 0x3f7, 0x3, 0x5, 0x8, 0x7f, 0xa1, 0x7fffffff, 0x80, 0x40, 0x10001, 0x1, 0x20, 0xfffffd58, 0x0, 0x4, 0x80000001, 0x200, 0xfffffc00, 0x4, 0x6, 0x3, 0xfffffc00, 0x81, 0x8, 0x6, 0x8, 0x0, 0x3, 0x1, 0x6, 0x3f, 0x2, 0xee, 0xc95, 0x1, 0x64, 0x1, 0xf20, 0x5, 0x3, 0x3, 0x7, 0x2, 0x80000000, 0x81, 0x7fffffff, 0x1ff, 0x8, 0x401, 0x400, 0x1, 0x8, 0x1, 0xff, 0x81, 0x9, 0x40, 0x9, 0x9, 0x0, 0x20, 0x72, 0x7fff, 0x1, 0x80, 0x9fca, 0x3, 0x6, 0x1000, 0x1f, 0x8, 0x80, 0x6, 0x10001, 0xffff8000, 0x7fff, 0x40, 0x8, 0x0, 0x4, 0x6, 0x1ff, 0xec, 0x4aa, 0x2, 0xff, 0x0, 0x3, 0x4, 0x401, 0x5, 0x7, 0x5, 0x101, 0x248d, 0x7, 0x3ff, 0x8, 0x2, 0x80000001, 0x8, 0x62d, 0x8000, 0x1, 0x40, 0x8000, 0x81, 0x6, 0x3f, 0x0, 0x9, 0x6, 0x2, 0x5, 0x5, 0x4, 0x4, 0x1ff, 0x2, 0x8, 0x1, 0x4, 0x1, 0xc43b, 0x6, 0x3, 0x0, 0x4, 0x6, 0x40, 0xffffffe1, 0x3, 0xa95, 0x7ff, 0x223, 0x0, 0x7c0, 0x3, 0x6, 0xba, 0x9, 0x1, 0xfffff7f6, 0x8, 0x9c0, 0x80, 0xffff, 0xc4, 0x80000000, 0x3f, 0x8001, 0xf76, 0x4, 0x4, 0x9, 0x16f44106, 0x7, 0x3, 0x40, 0x3, 0x3ff, 0x6, 0x7fffffff, 0x9, 0x5, 0x3, 0x80000, 0x9, 0x7, 0x9, 0x6, 0x40, 0x4, 0x7ff, 0x3, 0x3f, 0x8001, 0x200, 0x8, 0xc0, 0xdc, 0x80000001, 0x7ff, 0x0, 0x1, 0x68, 0x6, 0xfe6, 0x2, 0x3ff, 0x40, 0xb6, 0x8, 0xb40, 0x3, 0x7fff, 0xb28, 0x9, 0xcceb, 0x4, 0x5d26, 0x3, 0x2, 0x7ff, 0x7, 0x5, 0x103a, 0x24, 0x6, 0xfffffffb, 0x1, 0x0, 0x20, 0x9b0, 0x7ff, 0x5, 0xffff, 0x6, 0xfffff1df, 0xcb07, 0x0, 0x0, 0xff, 0x3, 0x7, 0x5, 0x3, 0x98fa, 0x1, 0x5, 0x3, 0x7ff, 0x9, 0x5, 0x1d9d, 0x7f, 0x1f3, 0xffff7092, 0x9, 0x7, 0x3, 0x9, 0x2, 0x8000, 0x8001, 0x1, 0x3, 0x0, 0xa9, 0x200, 0x6, 0x100, 0x5, 0x200, 0x8000, 0x0, 0x5, 0x1000, 0x892d, 0x1, 0x2, 0x0, 0x9, 0x2, 0xffff, 0x7, 0xb71, 0x70000, 0xffff8000, 0x0, 0x0, 0x1f, 0xa5, 0xb2698000, 0x8, 0x20, 0x9, 0x80, 0xef86, 0x0, 0x3bd, 0xfffffff9, 0xfffffffd, 0xffff, 0x2, 0x6, 0x0, 0x3f, 0xffffffff, 0xe2, 0x8, 0x200, 0x80000000, 0x84c, 0x401, 0x8, 0x7, 0x6, 0x94f0, 0x86, 0xa4, 0x1, 0x0, 0x7, 0x8, 0xb19, 0x81, 0xfffffff9, 0x40, 0x5, 0x40000000, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x7, 0x9, 0x20, 0x6, 0x2, 0x4, 0xfffffffb, 0xffffffff, 0x101, 0x1, 0x0, 0x8, 0x7, 0x8001, 0xfe80ab8, 0x40, 0x1, 0x7, 0x3, 0x8, 0x0, 0x336, 0x0, 0x1, 0x6, 0x7, 0x2, 0x1, 0x497, 0x998f, 0x1, 0x0, 0xffffffff, 0x4, 0x0, 0xcc, 0x2, 0x29263da9, 0x7, 0x675, 0x80000000, 0xff, 0x8001, 0x7, 0x7, 0x2, 0x2, 0xffffff00, 0x10000, 0x20, 0x3, 0x81, 0x2, 0x10001, 0x90, 0x1, 0x166d1f1d, 0x3ff, 0x3f, 0x0, 0x8000, 0x9, 0x31, 0x8, 0x8001, 0xdf7, 0xfffffffa, 0x9, 0x7db, 0xff, 0x0, 0x1, 0x5, 0x80000000, 0x9, 0xfffff106, 0x5, 0x20, 0xe00000, 0x4, 0x5, 0x3ff, 0x100, 0x5, 0x4, 0x1, 0x5, 0xfffffffe, 0xaf3e, 0x0, 0xf232, 0x80000000, 0x1000, 0x8, 0x6, 0x5, 0x200, 0x3, 0x400, 0xffff, 0x6, 0x4, 0x4, 0x2, 0xfb, 0x101, 0x3f, 0x2, 0x80000001, 0x6, 0x6c5a, 0x1, 0x101, 0x0, 0x7, 0x1, 0xfffffffe, 0x0, 0x6, 0x80000000, 0x10000, 0x2, 0x1ff, 0x0, 0x4, 0x559, 0x80000000, 0x8, 0x7fffffff, 0x7, 0x5, 0x1, 0xffffff01, 0x7fffffff, 0x49, 0x2, 0x5, 0x3, 0x3, 0x2, 0x6, 0x1, 0x6, 0x8, 0x8, 0x7, 0x1, 0x40, 0x2, 0x7, 0x400, 0x8001, 0x9, 0x1000, 0x3, 0x200, 0x4, 0x3, 0x78d, 0x8, 0x2, 0x0, 0x3, 0x4, 0x8, 0x40, 0x4, 0x9, 0x81, 0x8, 0x6, 0xc3e, 0x5, 0x20, 0xe9f, 0x8001, 0x45, 0x3, 0x9, 0x2ce, 0x1e, 0x4, 0x4, 0x4b1378df, 0x8bd, 0x0, 0xfb, 0x6, 0x401, 0x7, 0x9ca29fe, 0xe439, 0x1f, 0x80000001, 0x6, 0xda98, 0x800, 0x7fff, 0xac5a, 0x397, 0x804e, 0x4, 0x8da, 0x401, 0x0, 0x401, 0x2, 0x1, 0x7a2200, 0x3]}) 23:01:51 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2764.633061][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2764.640100][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2764.691595][T20128] usb 2-1: USB disconnect, device number 46 [ 2764.714947][ T33] audit: type=1804 audit(1623020511.375:363): pid=26256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343932352F48C7C060 dev="sda1" ino=14717 res=1 errno=0 [ 2764.810483][ T33] audit: type=1804 audit(1623020511.385:364): pid=26256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343932352F48C7C060 dev="sda1" ino=14717 res=1 errno=0 23:01:51 executing program 2 (fault-call:0 fault-nth:13): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x127381) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2764.843151][ T33] audit: type=1804 audit(1623020511.455:365): pid=26262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343836312F48C7C060 dev="sda1" ino=16382 res=1 errno=0 [ 2764.878502][ T33] audit: type=1804 audit(1623020511.465:366): pid=26259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343933352F48C7C060 dev="sda1" ino=16104 res=1 errno=0 [ 2764.918642][ T33] audit: type=1804 audit(1623020511.465:367): pid=26262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343836312F48C7C060 dev="sda1" ino=16382 res=1 errno=0 [ 2764.943907][T26272] FAULT_INJECTION: forcing a failure. [ 2764.943907][T26272] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.961348][T26272] CPU: 0 PID: 26272 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2764.970143][T26272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2764.980366][T26272] Call Trace: [ 2764.983669][T26272] dump_stack+0x143/0x1db [ 2764.988027][T26272] should_fail.cold+0x5/0xa [ 2764.992703][T26272] ? ima_d_path+0x4d/0x1f0 [ 2764.997166][T26272] should_failslab+0x5/0x10 [ 2765.001689][T26272] kmem_cache_alloc+0x5b/0x360 [ 2765.006605][T26272] ima_d_path+0x4d/0x1f0 [ 2765.010844][T26272] process_measurement+0x137d/0x17e0 [ 2765.016296][T26272] ? mmap_violation_check+0x1e0/0x1e0 [ 2765.021670][T26272] ? tomoyo_path_number_perm+0x590/0x590 [ 2765.027307][T26272] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2765.033293][T26272] ? find_held_lock+0x2d/0x110 [ 2765.038057][T26272] ? aa_get_task_label+0x25f/0x540 [ 2765.043168][T26272] ? lock_downgrade+0x6e0/0x6e0 [ 2765.048538][T26272] ? fsnotify+0x1070/0x1070 [ 2765.053039][T26272] ? ext4_file_write_iter+0x1980/0x1980 [ 2765.058579][T26272] ? path_get+0x5d/0x80 [ 2765.062730][T26272] ? aa_get_task_label+0x288/0x540 [ 2765.068117][T26272] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2765.074398][T26272] ? apparmor_task_getsecid+0xc2/0x110 [ 2765.079857][T26272] ima_file_check+0xb9/0x100 [ 2765.084449][T26272] ? process_measurement+0x17e0/0x17e0 [ 2765.089907][T26272] ? may_open+0x1f6/0x420 [ 2765.094253][T26272] path_openat+0x15b5/0x27e0 [ 2765.098935][T26272] ? path_lookupat+0x850/0x850 [ 2765.103734][T26272] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2765.109746][T26272] do_filp_open+0x190/0x3d0 [ 2765.114246][T26272] ? may_open_dev+0xf0/0xf0 [ 2765.118742][T26272] ? do_raw_spin_lock+0x120/0x2b0 [ 2765.123762][T26272] ? rwlock_bug.part.0+0x90/0x90 [ 2765.128716][T26272] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2765.134968][T26272] ? _find_next_bit+0x1e3/0x260 [ 2765.139025][T20128] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 2765.139835][T26272] ? _raw_spin_unlock+0x1a/0x30 [ 2765.139863][T26272] ? alloc_fd+0x2e6/0x660 [ 2765.156581][T26272] do_sys_openat2+0x16d/0x420 [ 2765.161279][T26272] ? build_open_flags+0x6f0/0x6f0 [ 2765.166329][T26272] ? __context_tracking_exit+0x9f/0xb0 [ 2765.171790][T26272] ? lock_downgrade+0x6e0/0x6e0 [ 2765.176731][T26272] __x64_sys_openat+0x13f/0x1f0 [ 2765.181590][T26272] ? __ia32_sys_open+0x1c0/0x1c0 [ 2765.186671][T26272] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2765.192675][T26272] ? syscall_enter_from_user_mode+0x27/0x70 [ 2765.198712][T26272] do_syscall_64+0x3a/0xb0 [ 2765.203290][T26272] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2765.209274][T26272] RIP: 0033:0x4196c4 [ 2765.213257][T26272] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2765.233245][T26272] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2765.241696][T26272] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2765.249664][T26272] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2765.257625][T26272] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2765.265597][T26272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2765.273559][T26272] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2765.499104][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2765.510231][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1030, setting to 64 [ 2765.522278][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2765.532126][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2765.699531][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2765.709134][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2765.717360][T20128] usb 2-1: Product: syz [ 2765.721584][T20128] usb 2-1: Manufacturer: syz [ 2765.726216][T20128] usb 2-1: SerialNumber: syz [ 2765.750439][T26248] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:52 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x407}}}}}}]}}, 0x0) 23:01:52 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:52 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x3f5e40) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x408200) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)=""/149) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000000c0)={0x20, 0x3, 0x2, 0x2b, 0x5, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x69cdc4) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000002700)=""/4096) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0xa4081) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000280)=""/15) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x8) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x6c60904f, 0xa1, 0x2, 0x45f1, 0x9e, 0xa3}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000000)={0x57, 0x2, 0x3, {0xfff, 0x2}, {0x7, 0xfffd}, @const={0x7fff, {0xc38, 0x5d6, 0xc, 0x9}}}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/35) 23:01:52 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={{0x1, 0x3, 0xfff, 0x80000001, 0x5, 0x7}, 0x176, [0x80, 0x6, 0x5, 0x8, 0x6, 0x7fff, 0x3cbcc9c5, 0x0, 0xff, 0xffff, 0x7177, 0x401, 0x80000000, 0xf8000, 0x200, 0x72f, 0x80, 0x2, 0x4, 0xfffff2fb, 0x7f, 0x7, 0x81, 0x892, 0x14, 0x1, 0x7, 0x3ff, 0x8, 0x5, 0x3, 0x4c38, 0x4, 0x1000, 0x1ff, 0x3e00000, 0x1ff, 0x0, 0x3, 0x7dc4, 0xffffffff, 0xd6, 0x73e, 0xffff, 0x7, 0x111, 0xd70, 0x7fffffff, 0x1, 0x9, 0x2, 0x8, 0x200, 0x0, 0x7, 0x3ff, 0x81, 0x3a6, 0x7ff, 0x3f, 0x3ff, 0x5, 0x8, 0x9d8, 0x9, 0x5998, 0x3, 0x4, 0x5, 0x74e, 0x6, 0xcc, 0x9, 0x8, 0x0, 0x9, 0x1000, 0xfffffff7, 0x0, 0x8, 0x7, 0x8, 0x1000, 0x8, 0x584e, 0x5, 0x0, 0x0, 0x4, 0x5, 0x2eec, 0x4, 0x4, 0x100, 0x892, 0xb7, 0xa4, 0x7fff, 0x6, 0xe06, 0x8, 0x1, 0x2, 0x2, 0x0, 0x0, 0x9, 0x200, 0x2, 0x100, 0xffff, 0x5, 0x80000000, 0x8001, 0x4, 0x2, 0x7, 0x2, 0x80, 0x7ff, 0x30e, 0x1, 0x1, 0x1000, 0xffffffff, 0x9, 0xe9bb, 0x650e, 0x13366352, 0x20, 0x400, 0x6, 0x8, 0x1, 0x5, 0xf4c, 0x8001, 0x4, 0x80000001, 0x200, 0x7, 0x3, 0x10000, 0x4, 0x2, 0x7fff, 0x1000, 0x0, 0x1ff, 0x3e0000, 0x3, 0x7, 0x6, 0x1, 0x8, 0x5, 0xdcf, 0x77b5db4c, 0x1, 0x3b94, 0x8, 0x8, 0x0, 0x0, 0x7, 0x80, 0x3, 0x400, 0x8d, 0x6, 0xfffffffc, 0x1, 0x81, 0x7, 0x1, 0x2, 0x7, 0xffff, 0x3c, 0x5, 0x8, 0xc2ee, 0x2, 0xfffffbff, 0x7, 0x0, 0x25a1, 0x200, 0xce, 0x664, 0x6, 0x7, 0x6, 0x0, 0x400, 0x1, 0xfb, 0x2, 0x800, 0xfffffff8, 0x2, 0xfff, 0x4735, 0xb00, 0x4, 0xfff, 0x6, 0x7f, 0x7ff, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1f, 0x5, 0x10001, 0x8000, 0x7, 0x3, 0x1, 0x4, 0x2d36af98, 0x2, 0x8001, 0x7f, 0x6, 0x5, 0x2, 0x2, 0x80, 0x3, 0x4, 0x0, 0x9, 0x1, 0x8, 0xfffffffc, 0x9, 0x101, 0xfffffff9, 0x9, 0x7, 0xfffffff9, 0x40, 0x2, 0x1, 0xfff, 0xed0, 0x200, 0x80, 0x401, 0xfffffff9, 0x1, 0x8000, 0x7, 0x10000000, 0x5, 0x3, 0x1, 0x3, 0x0, 0x1, 0xccab, 0x1, 0x4, 0x1, 0x3, 0x80000001, 0x87, 0x1, 0x37b0, 0x80000000, 0x81, 0x1, 0x80, 0x9, 0xfffffffb, 0x754, 0x0, 0x4, 0x20, 0x0, 0x0, 0x2, 0x1, 0x1ff, 0x9, 0x2, 0x3f, 0x2, 0x7, 0x5, 0xffffffff, 0x3, 0x1000, 0xd50, 0x7996, 0x0, 0x2, 0x7, 0x8, 0x7fffffff, 0x2, 0x6, 0x3, 0x7fff, 0x11b, 0x4, 0x7, 0x1, 0x9, 0x0, 0x81, 0x8c, 0x1f, 0xbc, 0x5, 0x40, 0x8, 0x7, 0x4, 0x1, 0xc8f, 0x2, 0x9dbd, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xde51, 0x5, 0x8, 0x4, 0x7fffffff, 0x7cb, 0x200, 0x8, 0x8, 0x8, 0x5, 0xfffffffe, 0x4, 0xce1, 0x80, 0x1000, 0x5, 0xdae5, 0x8, 0x6172, 0x467, 0x5, 0xfffffffc, 0x7f, 0x401, 0x10000, 0x0, 0x8, 0x3, 0x80000000, 0x0, 0x1000, 0x0, 0x2, 0x96, 0x80, 0x6, 0xffffffff, 0x3, 0x80000000, 0x9, 0x7, 0x8000, 0xe33f, 0x3, 0x6, 0x6, 0xffffffff, 0xb9, 0x6df, 0x8, 0x7, 0x4, 0x6, 0x81, 0x4, 0x65, 0xd119, 0xffff6d2c, 0x4, 0xfffffc00, 0x6, 0x0, 0xffff, 0x7, 0x8, 0x8000, 0x1, 0x3ff, 0x3ff, 0x2, 0x3, 0x2, 0x9, 0xfff, 0x6, 0x10000, 0x8, 0x1f25, 0x95, 0x9, 0x1000, 0x227d, 0x0, 0x6, 0x36, 0x6, 0xc, 0xfffff287, 0xfffffffa, 0x800, 0x1, 0xd647, 0xfff, 0x0, 0x1f, 0x2, 0x8, 0x3, 0x1f, 0x6, 0x8, 0xfffffffa, 0x0, 0x8, 0x9, 0x6, 0x3ff, 0xda72, 0x1, 0x7, 0x80000000, 0x2, 0x0, 0x9, 0x4, 0x8, 0x7f, 0x70000000, 0x0, 0x0, 0x3, 0x1, 0x8, 0x0, 0x3ff, 0x84aa, 0xa1a, 0x2, 0x9, 0x1, 0xda, 0x9, 0x7, 0x0, 0x5, 0x20, 0x4, 0x81, 0x9bc, 0x6, 0x6, 0x1, 0x8, 0x7fffffff, 0x0, 0x400, 0x1, 0x4, 0xffff7fff, 0x8, 0x7fffffff, 0x4, 0x3ff, 0x0, 0x2f34, 0xffffffc0, 0x3, 0x401, 0x2, 0x6, 0x5, 0x9, 0x1f, 0x3, 0x10000, 0x4, 0x3f7, 0x3, 0x5, 0x8, 0x7f, 0xa1, 0x7fffffff, 0x80, 0x40, 0x10001, 0x1, 0x20, 0xfffffd58, 0x0, 0x4, 0x80000001, 0x200, 0xfffffc00, 0x4, 0x6, 0x3, 0xfffffc00, 0x81, 0x8, 0x6, 0x8, 0x0, 0x3, 0x1, 0x6, 0x3f, 0x2, 0xee, 0xc95, 0x1, 0x64, 0x1, 0xf20, 0x5, 0x3, 0x3, 0x7, 0x2, 0x80000000, 0x81, 0x7fffffff, 0x1ff, 0x8, 0x401, 0x400, 0x1, 0x8, 0x1, 0xff, 0x81, 0x9, 0x40, 0x9, 0x9, 0x0, 0x20, 0x72, 0x7fff, 0x1, 0x80, 0x9fca, 0x3, 0x6, 0x1000, 0x1f, 0x8, 0x80, 0x6, 0x10001, 0xffff8000, 0x7fff, 0x40, 0x8, 0x0, 0x4, 0x6, 0x1ff, 0xec, 0x4aa, 0x2, 0xff, 0x0, 0x3, 0x4, 0x401, 0x5, 0x7, 0x5, 0x101, 0x248d, 0x7, 0x3ff, 0x8, 0x2, 0x80000001, 0x8, 0x62d, 0x8000, 0x1, 0x40, 0x8000, 0x81, 0x6, 0x3f, 0x0, 0x9, 0x6, 0x2, 0x5, 0x5, 0x4, 0x4, 0x1ff, 0x2, 0x8, 0x1, 0x4, 0x1, 0xc43b, 0x6, 0x3, 0x0, 0x4, 0x6, 0x40, 0xffffffe1, 0x3, 0xa95, 0x7ff, 0x223, 0x0, 0x7c0, 0x3, 0x6, 0xba, 0x9, 0x1, 0xfffff7f6, 0x8, 0x9c0, 0x80, 0xffff, 0xc4, 0x80000000, 0x3f, 0x8001, 0xf76, 0x4, 0x4, 0x9, 0x16f44106, 0x7, 0x3, 0x40, 0x3, 0x3ff, 0x6, 0x7fffffff, 0x9, 0x5, 0x3, 0x80000, 0x9, 0x7, 0x9, 0x6, 0x40, 0x4, 0x7ff, 0x3, 0x3f, 0x8001, 0x200, 0x8, 0xc0, 0xdc, 0x80000001, 0x7ff, 0x0, 0x1, 0x68, 0x6, 0xfe6, 0x2, 0x3ff, 0x40, 0xb6, 0x8, 0xb40, 0x3, 0x7fff, 0xb28, 0x9, 0xcceb, 0x4, 0x5d26, 0x3, 0x2, 0x7ff, 0x7, 0x5, 0x103a, 0x24, 0x6, 0xfffffffb, 0x1, 0x0, 0x20, 0x9b0, 0x7ff, 0x5, 0xffff, 0x6, 0xfffff1df, 0xcb07, 0x0, 0x0, 0xff, 0x3, 0x7, 0x5, 0x3, 0x98fa, 0x1, 0x5, 0x3, 0x7ff, 0x9, 0x5, 0x1d9d, 0x7f, 0x1f3, 0xffff7092, 0x9, 0x7, 0x3, 0x9, 0x2, 0x8000, 0x8001, 0x1, 0x3, 0x0, 0xa9, 0x200, 0x6, 0x100, 0x5, 0x200, 0x8000, 0x0, 0x5, 0x1000, 0x892d, 0x1, 0x2, 0x0, 0x9, 0x2, 0xffff, 0x7, 0xb71, 0x70000, 0xffff8000, 0x0, 0x0, 0x1f, 0xa5, 0xb2698000, 0x8, 0x20, 0x9, 0x80, 0xef86, 0x0, 0x3bd, 0xfffffff9, 0xfffffffd, 0xffff, 0x2, 0x6, 0x0, 0x3f, 0xffffffff, 0xe2, 0x8, 0x200, 0x80000000, 0x84c, 0x401, 0x8, 0x7, 0x6, 0x94f0, 0x86, 0xa4, 0x1, 0x0, 0x7, 0x8, 0xb19, 0x81, 0xfffffff9, 0x40, 0x5, 0x40000000, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x7, 0x9, 0x20, 0x6, 0x2, 0x4, 0xfffffffb, 0xffffffff, 0x101, 0x1, 0x0, 0x8, 0x7, 0x8001, 0xfe80ab8, 0x40, 0x1, 0x7, 0x3, 0x8, 0x0, 0x336, 0x0, 0x1, 0x6, 0x7, 0x2, 0x1, 0x497, 0x998f, 0x1, 0x0, 0xffffffff, 0x4, 0x0, 0xcc, 0x2, 0x29263da9, 0x7, 0x675, 0x80000000, 0xff, 0x8001, 0x7, 0x7, 0x2, 0x2, 0xffffff00, 0x10000, 0x20, 0x3, 0x81, 0x2, 0x10001, 0x90, 0x1, 0x166d1f1d, 0x3ff, 0x3f, 0x0, 0x8000, 0x9, 0x31, 0x8, 0x8001, 0xdf7, 0xfffffffa, 0x9, 0x7db, 0xff, 0x0, 0x1, 0x5, 0x80000000, 0x9, 0xfffff106, 0x5, 0x20, 0xe00000, 0x4, 0x5, 0x3ff, 0x100, 0x5, 0x4, 0x1, 0x5, 0xfffffffe, 0xaf3e, 0x0, 0xf232, 0x80000000, 0x1000, 0x8, 0x6, 0x5, 0x200, 0x3, 0x400, 0xffff, 0x6, 0x4, 0x4, 0x2, 0xfb, 0x101, 0x3f, 0x2, 0x80000001, 0x6, 0x6c5a, 0x1, 0x101, 0x0, 0x7, 0x1, 0xfffffffe, 0x0, 0x6, 0x80000000, 0x10000, 0x2, 0x1ff, 0x0, 0x4, 0x559, 0x80000000, 0x8, 0x7fffffff, 0x7, 0x5, 0x1, 0xffffff01, 0x7fffffff, 0x49, 0x2, 0x5, 0x3, 0x3, 0x2, 0x6, 0x1, 0x6, 0x8, 0x8, 0x7, 0x1, 0x40, 0x2, 0x7, 0x400, 0x8001, 0x9, 0x1000, 0x3, 0x200, 0x4, 0x3, 0x78d, 0x8, 0x2, 0x0, 0x3, 0x4, 0x8, 0x40, 0x4, 0x9, 0x81, 0x8, 0x6, 0xc3e, 0x5, 0x20, 0xe9f, 0x8001, 0x45, 0x3, 0x9, 0x2ce, 0x1e, 0x4, 0x4, 0x4b1378df, 0x8bd, 0x0, 0xfb, 0x6, 0x401, 0x7, 0x9ca29fe, 0xe439, 0x1f, 0x80000001, 0x6, 0xda98, 0x800, 0x7fff, 0xac5a, 0x397, 0x804e, 0x4, 0x8da, 0x401, 0x0, 0x401, 0x2, 0x1, 0x7a2200, 0x3]}) 23:01:52 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x7ff, 0x200000) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x8000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000001c0)=""/177) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/78) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/70) r3 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000140)={0x7, 0x9, 0x7b7452e4, 0x57, 0xab, 0x2}) 23:01:52 executing program 2 (fault-call:0 fault-nth:14): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2766.011527][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2766.063694][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2766.070648][T20128] cdc_ncm 2-1:1.1: bind() failure 23:01:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x50000, 0x20000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000000c0)=""/11) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x400, 0x9]) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1}) 23:01:52 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xdb2e3e7124687f0) [ 2766.116615][T20128] usb 2-1: USB disconnect, device number 47 [ 2766.173850][T26297] FAULT_INJECTION: forcing a failure. [ 2766.173850][T26297] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.186644][T26297] CPU: 0 PID: 26297 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2766.195561][T26297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.205951][T26297] Call Trace: [ 2766.209251][T26297] dump_stack+0x143/0x1db [ 2766.213612][T26297] should_fail.cold+0x5/0xa [ 2766.218156][T26297] ? ima_alloc_init_template+0xb4/0x750 [ 2766.223834][T26297] should_failslab+0x5/0x10 [ 2766.228393][T26297] __kmalloc+0x72/0x310 [ 2766.232598][T26297] ima_alloc_init_template+0xb4/0x750 [ 2766.238003][T26297] ? dentry_path_raw+0x30/0x30 [ 2766.242797][T26297] ima_store_measurement+0x1d7/0x5a0 [ 2766.248115][T26297] ? ima_collect_measurement+0x570/0x570 [ 2766.253781][T26297] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2766.260065][T26297] ? d_absolute_path+0x12e/0x180 [ 2766.265044][T26297] ? __d_path+0x160/0x160 [ 2766.269409][T26297] ? kmem_cache_alloc+0x32c/0x360 [ 2766.274557][T26297] process_measurement+0x11fb/0x17e0 [ 2766.279874][T26297] ? mmap_violation_check+0x1e0/0x1e0 [ 2766.285403][T26297] ? tomoyo_path_number_perm+0x590/0x590 [ 2766.291071][T26297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2766.297089][T26297] ? find_held_lock+0x2d/0x110 [ 2766.301980][T26297] ? aa_get_task_label+0x25f/0x540 [ 2766.307123][T26297] ? lock_downgrade+0x6e0/0x6e0 [ 2766.312009][T26297] ? fsnotify+0x1070/0x1070 [ 2766.316552][T26297] ? ext4_file_write_iter+0x1980/0x1980 [ 2766.322224][T26297] ? path_get+0x5d/0x80 [ 2766.326606][T26297] ? aa_get_task_label+0x288/0x540 [ 2766.331756][T26297] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2766.338042][T26297] ? apparmor_task_getsecid+0xc2/0x110 [ 2766.343624][T26297] ima_file_check+0xb9/0x100 [ 2766.348309][T26297] ? process_measurement+0x17e0/0x17e0 [ 2766.353803][T26297] ? may_open+0x1f6/0x420 [ 2766.358168][T26297] path_openat+0x15b5/0x27e0 [ 2766.362793][T26297] ? path_lookupat+0x850/0x850 [ 2766.367682][T26297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2766.373701][T26297] do_filp_open+0x190/0x3d0 [ 2766.378337][T26297] ? may_open_dev+0xf0/0xf0 [ 2766.382876][T26297] ? do_raw_spin_lock+0x120/0x2b0 [ 2766.388068][T26297] ? rwlock_bug.part.0+0x90/0x90 [ 2766.393155][T26297] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2766.399440][T26297] ? _find_next_bit+0x1e3/0x260 [ 2766.404331][T26297] ? _raw_spin_unlock+0x1a/0x30 [ 2766.409218][T26297] ? alloc_fd+0x2e6/0x660 [ 2766.413585][T26297] do_sys_openat2+0x16d/0x420 [ 2766.418295][T26297] ? build_open_flags+0x6f0/0x6f0 23:01:53 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x50381) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x203402) 23:01:53 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:53 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3fd, 0x60b8723eed8eba0f) 23:01:53 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x191041) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x1) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x803, 0x200000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001040)=""/114) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x1, 0x4081) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001740)=0x1) [ 2766.423355][T26297] ? __context_tracking_exit+0x9f/0xb0 [ 2766.428848][T26297] ? lock_downgrade+0x6e0/0x6e0 [ 2766.433740][T26297] __x64_sys_openat+0x13f/0x1f0 [ 2766.438653][T26297] ? __ia32_sys_open+0x1c0/0x1c0 [ 2766.443624][T26297] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2766.449814][T26297] ? syscall_enter_from_user_mode+0x27/0x70 [ 2766.455750][T26297] do_syscall_64+0x3a/0xb0 [ 2766.460197][T26297] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2766.466128][T26297] RIP: 0033:0x4196c4 [ 2766.470040][T26297] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2766.489681][T26297] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2766.498358][T26297] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2766.506557][T26297] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2766.514782][T26297] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2766.522872][T26297] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2766.529881][T20128] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 2766.530867][T26297] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2766.908999][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2766.920247][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1031, setting to 64 [ 2766.931171][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2766.940989][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2767.119428][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2767.128491][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.136600][T20128] usb 2-1: Product: syz [ 2767.140837][T20128] usb 2-1: Manufacturer: syz [ 2767.145545][T20128] usb 2-1: SerialNumber: syz [ 2767.170370][T26296] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:54 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x408}}}}}}]}}, 0x0) 23:01:54 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:54 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(&(0x7f0000000000), 0xf260, 0x301002) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x400006) 23:01:54 executing program 2 (fault-call:0 fault-nth:15): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) 23:01:54 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x191041) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x1) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x803, 0x200000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001040)=""/114) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x1, 0x4081) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001740)=0x1) [ 2767.439131][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2767.441849][T26335] FAULT_INJECTION: forcing a failure. [ 2767.441849][T26335] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.451764][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2767.456955][T26335] CPU: 0 PID: 26335 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2767.463877][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2767.472550][T26335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.472566][T26335] Call Trace: [ 2767.472575][T26335] dump_stack+0x143/0x1db [ 2767.472601][T26335] should_fail.cold+0x5/0xa [ 2767.499808][T26335] ? ima_alloc_init_template+0x199/0x750 [ 2767.505565][T26335] should_failslab+0x5/0x10 [ 2767.510104][T26335] __kmalloc+0x72/0x310 [ 2767.514293][T26335] ima_alloc_init_template+0x199/0x750 [ 2767.519785][T26335] ? dentry_path_raw+0x30/0x30 [ 2767.524582][T26335] ? ___slab_alloc+0x3bf/0x820 [ 2767.529388][T26335] ima_store_measurement+0x1d7/0x5a0 23:01:54 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x3fffd, 0x47440) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x9, 0xffff8000, 0x2, 0x0, 0x3, 0x6}) [ 2767.534708][T26335] ? ima_collect_measurement+0x570/0x570 [ 2767.540374][T26335] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2767.546669][T26335] ? d_absolute_path+0x12e/0x180 [ 2767.551642][T26335] ? __d_path+0x160/0x160 [ 2767.556003][T26335] ? __slab_alloc+0x70/0x80 [ 2767.560543][T26335] ? kmem_cache_alloc+0x32c/0x360 [ 2767.565598][T26335] process_measurement+0x11fb/0x17e0 [ 2767.570330][T20128] usb 2-1: USB disconnect, device number 48 [ 2767.570999][T26335] ? mmap_violation_check+0x1e0/0x1e0 [ 2767.582392][T26335] ? tomoyo_path_number_perm+0x590/0x590 [ 2767.588064][T26335] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2767.594090][T26335] ? find_held_lock+0x2d/0x110 [ 2767.598892][T26335] ? aa_get_task_label+0x25f/0x540 [ 2767.604041][T26335] ? lock_downgrade+0x6e0/0x6e0 [ 2767.609021][T26335] ? fsnotify+0x1070/0x1070 [ 2767.613559][T26335] ? ext4_file_write_iter+0x1980/0x1980 [ 2767.619136][T26335] ? path_get+0x5d/0x80 [ 2767.623323][T26335] ? aa_get_task_label+0x288/0x540 [ 2767.628595][T26335] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 23:01:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x442005) [ 2767.634871][T26335] ? apparmor_task_getsecid+0xc2/0x110 [ 2767.640366][T26335] ima_file_check+0xb9/0x100 [ 2767.645077][T26335] ? process_measurement+0x17e0/0x17e0 [ 2767.650577][T26335] ? may_open+0x1f6/0x420 [ 2767.654955][T26335] path_openat+0x15b5/0x27e0 [ 2767.659575][T26335] ? path_lookupat+0x850/0x850 [ 2767.664381][T26335] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2767.670400][T26335] do_filp_open+0x190/0x3d0 [ 2767.674935][T26335] ? may_open_dev+0xf0/0xf0 [ 2767.679474][T26335] ? do_raw_spin_lock+0x120/0x2b0 [ 2767.684623][T26335] ? rwlock_bug.part.0+0x90/0x90 23:01:54 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001020000ff2505a1a44000010203010902630002010010000904000001020d00000524060001052400f8ff0d240f0106000000020039010906241a05002407240a0004817f09058103b0500604000904010000020d00000904010102020d00000905820210001f02000000c8787dd9fb07da09050302ff03801f00eeefe034b79763c02dad01b8aff426b47f81ffd036ed6b98b6eec0e82ef4281c3078381f960d026be7bfe4ebad1742faf113596cb5b661736e6bb9ea997bd3bd6cb40e272797befdf813100cd204cf5d4a8d7242d4d998552d3e5c771d6ba2caa1"], &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x111, 0x40, 0x80, 0x6, 0xff, 0x8}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xdf, 0x80, 0x1}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x403}}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "c4aa048f", {0x3, 0x105, 0x0, 0x80, 0x8000, 0x1f, 0x5}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xd3, &(0x7f00000000c0)=@generic={0x8, 0x2, 0xcb, "1ad3e78c", "3f6f9c7a118c1890e78ce265f1716ffabd2f63706e3514d95d1e742b4a4783f437c0de786111809ef288a6f53b10eaafb6963b7e1cdfbd6f5c22f8c07faea0be34919a68da7954fa615d16400119e7b21ede94003719f6e72603607d0eebb64989bcac13913f6f9c0bf2f3d46125d7f950be770d84a1103fbbbc36543bccff525d184bf7b19aada11238d8e542fec0a9b66c99d7a92324aa08cadb92e94010338e9f7e47c7f19011f9a4947653859d74b3ea51ba07ffffd6e6d7fc4f338f49702cdaeff43e2cc95e22216e"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2767.689602][T26335] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2767.695880][T26335] ? _find_next_bit+0x1e3/0x260 [ 2767.700762][T26335] ? _raw_spin_unlock+0x1a/0x30 [ 2767.705737][T26335] ? alloc_fd+0x2e6/0x660 [ 2767.710205][T26335] do_sys_openat2+0x16d/0x420 [ 2767.714922][T26335] ? build_open_flags+0x6f0/0x6f0 [ 2767.719985][T26335] ? __context_tracking_exit+0x9f/0xb0 [ 2767.725577][T26335] ? lock_downgrade+0x6e0/0x6e0 [ 2767.730471][T26335] __x64_sys_openat+0x13f/0x1f0 [ 2767.735357][T26335] ? __ia32_sys_open+0x1c0/0x1c0 [ 2767.740332][T26335] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2767.746352][T26335] ? syscall_enter_from_user_mode+0x27/0x70 [ 2767.752275][T26335] do_syscall_64+0x3a/0xb0 [ 2767.756729][T26335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2767.762678][T26335] RIP: 0033:0x4196c4 [ 2767.766597][T26335] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 23:01:54 executing program 0: syz_open_dev$evdev(&(0x7f0000000540), 0x80000000, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x80003) 23:01:54 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x442005) [ 2767.786237][T26335] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2767.794689][T26335] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2767.802692][T26335] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2767.810694][T26335] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2767.819128][T26335] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2767.827301][T26335] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 23:01:54 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2767.998853][ T32] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2768.148868][T20128] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 2768.518978][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2768.530267][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 64 [ 2768.541938][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2768.552081][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2768.578940][ T32] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2768.588036][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2768.596390][ T32] usb 5-1: Product: syz [ 2768.600793][ T32] usb 5-1: Manufacturer: syz [ 2768.605718][ T32] usb 5-1: SerialNumber: syz [ 2768.659822][ T32] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2768.748931][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2768.758033][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2768.766119][T20128] usb 2-1: Product: syz [ 2768.770393][T20128] usb 2-1: Manufacturer: syz [ 2768.774992][T20128] usb 2-1: SerialNumber: syz [ 2768.800228][T26343] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:55 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x418}}}}}}]}}, 0x0) 23:01:55 executing program 2 (fault-call:0 fault-nth:16): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:55 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x208, 0x101100) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/4) syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x6) 23:01:55 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) 23:01:55 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2769.072826][ T33] kauditd_printk_skb: 17 callbacks suppressed [ 2769.072854][ T33] audit: type=1800 audit(1623020515.755:385): pid=26386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14354 res=0 errno=0 [ 2769.085551][T26390] FAULT_INJECTION: forcing a failure. [ 2769.085551][T26390] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.103336][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2769.113279][T26390] CPU: 0 PID: 26390 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2769.113305][T26390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.113320][T26390] Call Trace: [ 2769.113328][T26390] dump_stack+0x143/0x1db [ 2769.113360][T26390] should_fail.cold+0x5/0xa [ 2769.113387][T26390] ? ima_write_template_field_data+0x47/0x1c0 [ 2769.113415][T26390] should_failslab+0x5/0x10 [ 2769.113441][T26390] __kmalloc+0x72/0x310 [ 2769.113467][T26390] ? ima_alloc_init_template+0x199/0x750 [ 2769.147128][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2769.149449][T26390] ima_write_template_field_data+0x47/0x1c0 [ 2769.149486][T26390] ima_eventdigest_init_common+0xed/0x250 [ 2769.149512][T26390] ? ima_write_template_field_data+0x1c0/0x1c0 [ 2769.155631][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2769.160212][T26390] ? lock_acquire+0x19d/0x700 [ 2769.160242][T26390] ? fs_reclaim_acquire+0xb2/0x160 [ 2769.160268][T26390] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2769.160295][T26390] ima_alloc_init_template+0x39e/0x750 [ 2769.190404][ T33] audit: type=1800 audit(1623020515.795:386): pid=26389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14386 res=0 errno=0 [ 2769.194689][T26390] ima_store_measurement+0x1d7/0x5a0 [ 2769.194723][T26390] ? ima_collect_measurement+0x570/0x570 [ 2769.194749][T26390] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2769.204508][T20128] usb 2-1: USB disconnect, device number 49 [ 2769.209549][T26390] ? d_absolute_path+0x12e/0x180 [ 2769.209584][T26390] ? __d_path+0x160/0x160 [ 2769.209608][T26390] ? kmem_cache_alloc+0x32c/0x360 [ 2769.209632][T26390] process_measurement+0x11fb/0x17e0 [ 2769.209658][T26390] ? mmap_violation_check+0x1e0/0x1e0 [ 2769.264179][ T33] audit: type=1804 audit(1623020515.795:387): pid=26391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353134322F48C7C060 dev="sda1" ino=14386 res=1 errno=0 [ 2769.265385][T26390] ? tomoyo_path_number_perm+0x590/0x590 [ 2769.265423][T26390] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2769.265455][T26390] ? find_held_lock+0x2d/0x110 [ 2769.312922][ T33] audit: type=1804 audit(1623020515.795:388): pid=26392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353139322F48C7C060 dev="sda1" ino=14370 res=1 errno=0 [ 2769.320185][T26390] ? aa_get_task_label+0x25f/0x540 [ 2769.320220][T26390] ? lock_downgrade+0x6e0/0x6e0 [ 2769.320249][T26390] ? fsnotify+0x1070/0x1070 [ 2769.380791][T26390] ? ext4_file_write_iter+0x1980/0x1980 [ 2769.386338][T26390] ? path_get+0x5d/0x80 [ 2769.390492][T26390] ? aa_get_task_label+0x288/0x540 [ 2769.395598][T26390] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2769.401939][T26390] ? apparmor_task_getsecid+0xc2/0x110 [ 2769.407584][T26390] ima_file_check+0xb9/0x100 [ 2769.412194][T26390] ? process_measurement+0x17e0/0x17e0 [ 2769.417650][T26390] ? may_open+0x1f6/0x420 [ 2769.422066][T26390] path_openat+0x15b5/0x27e0 [ 2769.426657][T26390] ? path_lookupat+0x850/0x850 [ 2769.431505][T26390] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2769.437486][T26390] do_filp_open+0x190/0x3d0 [ 2769.441987][T26390] ? may_open_dev+0xf0/0xf0 [ 2769.446483][T26390] ? do_raw_spin_lock+0x120/0x2b0 [ 2769.451511][T26390] ? rwlock_bug.part.0+0x90/0x90 [ 2769.456570][T26390] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2769.462903][T26390] ? _find_next_bit+0x1e3/0x260 [ 2769.467760][T26390] ? _raw_spin_unlock+0x1a/0x30 [ 2769.472609][T26390] ? alloc_fd+0x2e6/0x660 [ 2769.476932][T26390] do_sys_openat2+0x16d/0x420 [ 2769.481603][T26390] ? build_open_flags+0x6f0/0x6f0 [ 2769.486624][T26390] ? __context_tracking_exit+0x9f/0xb0 [ 2769.492080][T26390] ? lock_downgrade+0x6e0/0x6e0 [ 2769.496929][T26390] __x64_sys_openat+0x13f/0x1f0 [ 2769.501773][T26390] ? __ia32_sys_open+0x1c0/0x1c0 [ 2769.506702][T26390] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2769.512685][T26390] ? syscall_enter_from_user_mode+0x27/0x70 [ 2769.518574][T26390] do_syscall_64+0x3a/0xb0 [ 2769.522986][T26390] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2769.528876][T26390] RIP: 0033:0x4196c4 [ 2769.532762][T26390] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2769.552363][T26390] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2769.560771][T26390] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 23:01:56 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:56 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/204) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000000)=""/112) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x800, 0x100, 0x1, 0x0, 0xd62a, 0x8000}) 23:01:56 executing program 3: syz_open_dev$evdev(&(0x7f0000000540), 0x80000000, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x80003) [ 2769.568825][T26390] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2769.576787][T26390] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2769.584853][T26390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2769.592839][T26390] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2769.661913][ T33] audit: type=1800 audit(1623020516.345:389): pid=26408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14242 res=0 errno=0 [ 2769.742020][ T33] audit: type=1804 audit(1623020516.345:390): pid=26407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343836392F48C7C060 dev="sda1" ino=14290 res=1 errno=0 [ 2769.776422][ T33] audit: type=1804 audit(1623020516.365:391): pid=26407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343836392F48C7C060 dev="sda1" ino=14290 res=1 errno=0 [ 2769.807730][ T33] audit: type=1804 audit(1623020516.425:392): pid=26390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353139322F48C7C060 dev="sda1" ino=14370 res=0 errno=0 [ 2769.878835][ T32] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2769.928698][T20128] usb 2-1: new full-speed USB device number 50 using dummy_hcd 23:01:56 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x408081) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xdfffffffffffeffc, 0x402a86) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x3f, 0xf, 0x400, 0xffffffff, "95e1b20b2bc60b763e82b2f0afdc2f12148a3c8272f5a96dbe34464f726e7c70"}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000040)) 23:01:56 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x8, 0x8, {0x8, 0x22, "a8e95a1c6179"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0x7, 0xea, "febdcb54c23e5072cb41a6f38d35e94d3b84fa62b760cd86e2c9ddbbe6535e892bde465e99e3ea86c5f5a9e6ab9fd31c552e2ce578de7b0fdcc36d195d3e86705ce7b630f7897542dd09c20e73101e9b78b5e0b578b108403fea1d5caf17059aa823f8cd5c5c6000a0185970e0b1226c0141b87588f4545f341052dba82644d3cad083435513739095e387a8271fe69dd3797f5d43e01e85e28ed1162d9ac960320d98df179e0a35b64657213e451512eee24e8e2dca42262f513345da018fa4508207f4399b2fbe680fb53848ea621c88940ea1af8e917a4ed361001f6a46cd887be8422019f3da63fd"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x3f, 0x81, 0x8, 0x5, 0x8, 0x20, 0x4, 0x3, 0x2, 0x400}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x8, 0xffffffff, 0x3, 0x7, 0x8000, 0x1}) r0 = syz_open_dev$hiddev(&(0x7f0000000440), 0x1ff, 0x186e1) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000480)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:01:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x876, 0x80000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000001700)=""/43) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000001740)=""/4096) 23:01:56 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x40100) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/161) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/23) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40086602, &(0x7f0000000080)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000000)=""/197) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000280)={0x5, 0xfffffff9, 0x100, 0x10001, 0x400, 0x5}) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000240)=""/31) [ 2770.090778][ T2686] usb 5-1: USB disconnect, device number 11 [ 2770.161515][ T33] audit: type=1804 audit(1623020516.845:393): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343837302F48C7C060 dev="sda1" ino=14370 res=1 errno=0 [ 2770.202463][ T33] audit: type=1804 audit(1623020516.885:394): pid=26423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343837302F48C7C060 dev="sda1" ino=14370 res=1 errno=0 [ 2770.308814][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2770.319975][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1048, setting to 64 [ 2770.332289][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2770.342351][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2770.509231][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2770.518408][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.526564][T20128] usb 2-1: Product: syz [ 2770.530797][T20128] usb 2-1: Manufacturer: syz [ 2770.535398][T20128] usb 2-1: SerialNumber: syz [ 2770.560132][T26394] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:57 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x500}}}}}}]}}, 0x0) 23:01:57 executing program 2 (fault-call:0 fault-nth:17): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x400) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x800, 0x40) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x6d1e, 0x0, 0x5, 0x0, 0x0, 0x101}) 23:01:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x200000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/100) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:57 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/244) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x7) 23:01:57 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/215) [ 2770.828857][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2770.850725][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2770.857711][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2770.902214][T26442] FAULT_INJECTION: forcing a failure. [ 2770.902214][T26442] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.915022][T26442] CPU: 0 PID: 26442 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2770.923811][T26442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.926894][T20128] usb 2-1: USB disconnect, device number 50 [ 2770.933888][T26442] Call Trace: [ 2770.933905][T26442] dump_stack+0x143/0x1db [ 2770.933934][T26442] should_fail.cold+0x5/0xa [ 2770.933962][T26442] ? ima_write_template_field_data+0xeb/0x1c0 [ 2770.933990][T26442] should_failslab+0x5/0x10 [ 2770.962879][T26442] __kmalloc+0x72/0x310 [ 2770.967037][T26442] ima_write_template_field_data+0xeb/0x1c0 [ 2770.972927][T26442] ima_alloc_init_template+0x39e/0x750 [ 2770.978382][T26442] ima_store_measurement+0x1d7/0x5a0 [ 2770.983706][T26442] ? ima_collect_measurement+0x570/0x570 [ 2770.989333][T26442] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2770.995696][T26442] ? d_absolute_path+0x12e/0x180 [ 2771.000632][T26442] ? __d_path+0x160/0x160 [ 2771.004957][T26442] ? kmem_cache_alloc+0x32c/0x360 [ 2771.009976][T26442] process_measurement+0x11fb/0x17e0 [ 2771.015254][T26442] ? mmap_violation_check+0x1e0/0x1e0 [ 2771.020621][T26442] ? tomoyo_path_number_perm+0x590/0x590 [ 2771.026258][T26442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2771.032238][T26442] ? find_held_lock+0x2d/0x110 [ 2771.036995][T26442] ? aa_get_task_label+0x25f/0x540 [ 2771.042103][T26442] ? lock_downgrade+0x6e0/0x6e0 [ 2771.046959][T26442] ? fsnotify+0x1070/0x1070 [ 2771.051456][T26442] ? ext4_file_write_iter+0x1980/0x1980 [ 2771.056994][T26442] ? path_get+0x5d/0x80 [ 2771.061148][T26442] ? aa_get_task_label+0x288/0x540 [ 2771.066360][T26442] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2771.072601][T26442] ? apparmor_task_getsecid+0xc2/0x110 [ 2771.078242][T26442] ima_file_check+0xb9/0x100 [ 2771.082835][T26442] ? process_measurement+0x17e0/0x17e0 [ 2771.088286][T26442] ? may_open+0x1f6/0x420 [ 2771.092612][T26442] path_openat+0x15b5/0x27e0 [ 2771.097198][T26442] ? path_lookupat+0x850/0x850 [ 2771.101966][T26442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2771.108048][T26442] do_filp_open+0x190/0x3d0 [ 2771.112545][T26442] ? may_open_dev+0xf0/0xf0 [ 2771.117044][T26442] ? do_raw_spin_lock+0x120/0x2b0 [ 2771.122063][T26442] ? rwlock_bug.part.0+0x90/0x90 [ 2771.127019][T26442] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2771.133263][T26442] ? _find_next_bit+0x1e3/0x260 [ 2771.138288][T26442] ? _raw_spin_unlock+0x1a/0x30 [ 2771.143133][T26442] ? alloc_fd+0x2e6/0x660 [ 2771.147892][T26442] do_sys_openat2+0x16d/0x420 [ 2771.152564][T26442] ? build_open_flags+0x6f0/0x6f0 [ 2771.157581][T26442] ? __context_tracking_exit+0x9f/0xb0 [ 2771.163033][T26442] ? lock_downgrade+0x6e0/0x6e0 [ 2771.167882][T26442] __x64_sys_openat+0x13f/0x1f0 [ 2771.172746][T26442] ? __ia32_sys_open+0x1c0/0x1c0 [ 2771.177677][T26442] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2771.183660][T26442] ? syscall_enter_from_user_mode+0x27/0x70 [ 2771.189563][T26442] do_syscall_64+0x3a/0xb0 [ 2771.194008][T26442] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2771.199921][T26442] RIP: 0033:0x4196c4 [ 2771.203815][T26442] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2771.223769][T26442] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2771.232264][T26442] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2771.240228][T26442] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c 23:01:58 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x80, 0x101, 0x8c, 0x800, 0x39e6, 0x8}) [ 2771.248192][T26442] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2771.256158][T26442] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 [ 2771.264124][T26442] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2771.278740][ T32] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2771.285735][ T32] ath9k_htc: Failed to initialize the device 23:01:58 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x20, 0x640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/121) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000180)=""/195) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000080)=""/206) 23:01:58 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:01:58 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/215) [ 2771.328202][ T2686] usb 5-1: ath9k_htc: USB layer deinitialized 23:01:58 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x393144) 23:01:58 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x80, 0x101, 0x8c, 0x800, 0x39e6, 0x8}) [ 2771.768625][T20128] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 2772.128644][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2772.139714][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 64 [ 2772.151070][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2772.161258][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2772.329041][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2772.338206][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.346267][T20128] usb 2-1: Product: syz [ 2772.350526][T20128] usb 2-1: Manufacturer: syz [ 2772.355273][T20128] usb 2-1: SerialNumber: syz [ 2772.380063][T26448] raw-gadget gadget: fail, usb_ep_enable returned -22 23:01:59 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x600}}}}}}]}}, 0x0) 23:01:59 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:59 executing program 5: ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x2, 0x1, 0x1ff, 0x2, 0x4, 0x5, 0x5, 0x1, 0x4, 0x100, 0x8, 0x0, 0x3c21de33, 0x4}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x800, 0x101640) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/30) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x200, 0x218, 0x1, 0xffffffff, 0x1}) 23:01:59 executing program 2 (fault-call:0 fault-nth:18): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:59 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/4096) 23:01:59 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/54) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x1, 0x3, 0x9, 0x7fff, 0x2, 0x8}) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/110) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x56, 0x0, 0x7f, {0xfd8, 0xff}, {0xff}, @period={0x58, 0x31fe, 0x1c00, 0x3, 0x9, {0x4, 0x2, 0x8, 0x3}, 0x5, &(0x7f0000000140)=[0x0, 0x1, 0x4, 0x6, 0x5]}}) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000001c0)=0x1) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000100)={0x1, 0x0, 0x6, 0x1f, 0x5, 0x7}) [ 2772.649119][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2772.678152][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2772.685339][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2772.690082][T26488] FAULT_INJECTION: forcing a failure. [ 2772.690082][T26488] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.704032][T26488] CPU: 0 PID: 26488 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2772.712835][T26488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.722057][T20128] usb 2-1: USB disconnect, device number 51 [ 2772.722901][T26488] Call Trace: [ 2772.722912][T26488] dump_stack+0x143/0x1db [ 2772.722940][T26488] should_fail.cold+0x5/0xa [ 2772.722967][T26488] ? ima_add_digest_entry+0x4e/0x510 [ 2772.746315][T26488] should_failslab+0x5/0x10 [ 2772.750849][T26488] kmem_cache_alloc_trace+0x55/0x2a0 [ 2772.756166][T26488] ima_add_digest_entry+0x4e/0x510 [ 2772.761310][T26488] ima_add_template_entry+0x446/0x790 [ 2772.766712][T26488] ? ima_get_binary_runtime_size+0x40/0x40 [ 2772.772559][T26488] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2772.778309][T26488] ? ima_calc_field_array_hash+0x377/0x430 [ 2772.784180][T26488] ima_store_template+0xdb/0x140 [ 2772.789234][T26488] ima_store_measurement+0x208/0x5a0 [ 2772.794552][T26488] ? ima_collect_measurement+0x570/0x570 [ 2772.800219][T26488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2772.806492][T26488] ? d_absolute_path+0x12e/0x180 [ 2772.811459][T26488] ? __d_path+0x160/0x160 [ 2772.815816][T26488] ? kmem_cache_alloc+0x32c/0x360 [ 2772.820878][T26488] process_measurement+0x11fb/0x17e0 [ 2772.826194][T26488] ? mmap_violation_check+0x1e0/0x1e0 [ 2772.831598][T26488] ? tomoyo_path_number_perm+0x590/0x590 [ 2772.837260][T26488] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2772.843276][T26488] ? find_held_lock+0x2d/0x110 [ 2772.848190][T26488] ? aa_get_task_label+0x25f/0x540 [ 2772.853309][T26488] ? lock_downgrade+0x6e0/0x6e0 [ 2772.858348][T26488] ? fsnotify+0x1070/0x1070 [ 2772.862979][T26488] ? ext4_file_write_iter+0x1980/0x1980 [ 2772.868669][T26488] ? path_get+0x5d/0x80 [ 2772.872844][T26488] ? aa_get_task_label+0x288/0x540 [ 2772.877947][T26488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2772.884186][T26488] ? apparmor_task_getsecid+0xc2/0x110 [ 2772.889655][T26488] ima_file_check+0xb9/0x100 [ 2772.894381][T26488] ? process_measurement+0x17e0/0x17e0 [ 2772.899862][T26488] ? may_open+0x1f6/0x420 [ 2772.904221][T26488] path_openat+0x15b5/0x27e0 [ 2772.908942][T26488] ? path_lookupat+0x850/0x850 [ 2772.913732][T26488] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2772.919833][T26488] do_filp_open+0x190/0x3d0 [ 2772.924353][T26488] ? may_open_dev+0xf0/0xf0 [ 2772.928870][T26488] ? do_raw_spin_lock+0x120/0x2b0 [ 2772.933917][T26488] ? rwlock_bug.part.0+0x90/0x90 [ 2772.938855][T26488] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2772.945142][T26488] ? _find_next_bit+0x1e3/0x260 [ 2772.949995][T26488] ? _raw_spin_unlock+0x1a/0x30 [ 2772.955038][T26488] ? alloc_fd+0x2e6/0x660 [ 2772.959364][T26488] do_sys_openat2+0x16d/0x420 [ 2772.964046][T26488] ? build_open_flags+0x6f0/0x6f0 [ 2772.969093][T26488] ? __context_tracking_exit+0x9f/0xb0 [ 2772.974659][T26488] ? lock_downgrade+0x6e0/0x6e0 [ 2772.979617][T26488] __x64_sys_openat+0x13f/0x1f0 [ 2772.984470][T26488] ? __ia32_sys_open+0x1c0/0x1c0 [ 2772.989442][T26488] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2772.995423][T26488] ? syscall_enter_from_user_mode+0x27/0x70 [ 2773.001323][T26488] do_syscall_64+0x3a/0xb0 [ 2773.005766][T26488] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2773.011694][T26488] RIP: 0033:0x4196c4 [ 2773.015585][T26488] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2773.035210][T26488] RSP: 002b:00007fa7a064dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2773.043636][T26488] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2773.051690][T26488] RDX: 0000000000101640 RSI: 00007fa7a064dd60 RDI: 00000000ffffff9c [ 2773.059660][T26488] RBP: 00007fa7a064dd60 R08: 0000000000000000 R09: 0000000000000000 [ 2773.067641][T26488] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000101640 23:01:59 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xe40) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x9, 0x2, 0xd430, 0xff, 0x5, 0x7fff}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/130) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x105003) [ 2773.075610][T26488] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2773.083703][T26488] ima: OUT OF MEMORY ERROR creating queue entry 23:01:59 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x401, 0x7]) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000001700)=""/4096) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/11) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4077) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000040)={0x52, 0x8, 0x1, {0x1f, 0xd7}, {0x30, 0x101}, @const={0xfffc, {0x1, 0x3, 0x100, 0x3}}}) 23:01:59 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x8485) 23:01:59 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:59 executing program 2 (fault-call:0 fault-nth:19): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:01:59 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/4096) [ 2773.178630][T20128] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 2773.276607][T26520] FAULT_INJECTION: forcing a failure. [ 2773.276607][T26520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2773.289930][T26520] CPU: 1 PID: 26520 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2773.298730][T26520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.308901][T26520] Call Trace: [ 2773.312200][T26520] dump_stack+0x143/0x1db [ 2773.316553][T26520] should_fail.cold+0x5/0xa [ 2773.321086][T26520] _copy_to_user+0x2c/0x150 [ 2773.325620][T26520] simple_read_from_buffer+0xcc/0x160 [ 2773.331030][T26520] proc_fail_nth_read+0x187/0x220 [ 2773.336094][T26520] ? proc_sessionid_read+0x220/0x220 [ 2773.341506][T26520] ? security_file_permission+0x248/0x560 [ 2773.347263][T26520] ? proc_sessionid_read+0x220/0x220 [ 2773.352595][T26520] vfs_read+0x1b5/0x570 [ 2773.356778][T26520] ksys_read+0x12d/0x250 [ 2773.361048][T26520] ? vfs_write+0x9e0/0x9e0 [ 2773.365494][T26520] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2773.371524][T26520] ? syscall_enter_from_user_mode+0x27/0x70 [ 2773.377464][T26520] do_syscall_64+0x3a/0xb0 [ 2773.381951][T26520] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2773.387990][T26520] RIP: 0033:0x41935c [ 2773.391908][T26520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2773.412104][T26520] RSP: 002b:00007fa7a064e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2773.420782][T26520] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000041935c [ 2773.428751][T26520] RDX: 000000000000000f RSI: 00007fa7a064e1e0 RDI: 0000000000000003 [ 2773.437031][T26520] RBP: 00007fa7a064e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.445115][T26520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2773.453104][T26520] R13: 00007ffd0d60868f R14: 00007fa7a064e300 R15: 0000000000022000 [ 2773.698590][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2773.709706][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 2773.721193][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2773.731016][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2773.908970][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2773.918453][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.926545][T20128] usb 2-1: Product: syz [ 2773.930743][T20128] usb 2-1: Manufacturer: syz [ 2773.935545][T20128] usb 2-1: SerialNumber: syz [ 2773.960045][T26505] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:00 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x700}}}}}}]}}, 0x0) 23:02:00 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/54) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x1, 0x3, 0x9, 0x7fff, 0x2, 0x8}) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/110) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x56, 0x0, 0x7f, {0xfd8, 0xff}, {0xff}, @period={0x58, 0x31fe, 0x1c00, 0x3, 0x9, {0x4, 0x2, 0x8, 0x3}, 0x5, &(0x7f0000000140)=[0x0, 0x1, 0x4, 0x6, 0x5]}}) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000001c0)=0x1) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000100)={0x1, 0x0, 0x6, 0x1f, 0x5, 0x7}) 23:02:00 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/35) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:00 executing program 5 (fault-call:1 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:00 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1, 0x8b, &(0x7f0000000040)="e320f9856dc78fb61d79e5c7eeb7d18d9178d32888c7e918207cd9a8edce3cc730181631253b0c915ecfacb8689a04d99277104d73f69a4150cec00bc28435d736afdfd128e5c14f7e57e82528fdec1a950ae1ad2f82988045a429da2a9b262fff8dbb808ebb942f0af81fae96f17236074d43ccd3e49c55b66af20436c2fb0f633eab048265cbeea73d95"}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000000)=""/59) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xbb0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000001c0)=[0x8e, 0x6]) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x3, 0x1000, &(0x7f0000001700)="14ad427383e36ddac6b60bb799c44af2cb4ac5db6c91789856fd8d2a87945fdfa6e5839aa65e24f2113746b021846b3eb643d5f9e369eb1a644802423b3201c022b729fb9d5c69e59917f059ea67d14cc6379e02fbf0b35ffb5ef69713cb1aeb0c090644ac4155f5e1486bbddcf07da3e39605682c0d7eee33d40d6184333598bbe10d3f1bec86f4a5c796a3463ab42df53cb88d637d424ae0f90992474ce23fd25637f173d35289df6cbe9e3585e5b2cf7d519e277aa416fb7d5b3f302780c6183ff9018684c0b81fc8d9df2c35ef61c480a6b19fe465729a276db28370698ed3a5e5d2f1409f6d3b1c8c3c7d1d304fe8d43643ee7eb3e5cabf76d11b650f01983a1f67a836a7bed99076ae97414c6eb0eca13cf02d9f8d7086caad23d6f6a930ec208e035ae658b6917d3fdbb92b0fc48aa5f50c9d4287d124e7814737333d5f37ff1dd3cf0130f4d8c149bde499639b9ae6ea31d0b2b508e7ff56be7c026e4b4ccd04f5cb581776e72c22776187f52fcfc984f7e1aaf13d35b98ea660cf7c48e20b19e11958881ee1588147ee23b3ece8def5c9b2a11ea693507d87ea76816058838045d1de9d4562b80fde74f1ae9897082cb70c0a309e34b1640c021a593db39e4b23954234cd18f740061ede5254aab7cc290f4ca9d13f44b3881a042c29f598bde2c41f7203f8f6196bec0a6d67651df62064363aaf8ceb4d4740a166271e8415151663743549175ff74463fb1c2e440015d7b83f3f1f34a089c2dd739db0795dbd7ee933bc7a7fea5cbac869e03739645ad63f82ae6cfc7043117b261e28c951f98f020d7679627df1df6823420c340a27e47981443c76be0d1fd0ae11de0e6acd9eab786c149e981a096eceb8102739966e64af150311b3b7d6412edbb26970e21bd3bc2983e5da13119e86bf1edcef82cc34bcd0202493b348af456b16e47b5133983b3597ec3be559363cb9ff5b7e71f831d9fb3cfacbdbf85ffeb89fdbb56e0c02eb790af18d5489a5fdef431bca58a1847509da7a7c733bb7993362ead3b8b003f27167e38aee3c48f969e283fc3a240e006b0d8a3e664d2bddc49f5790c973ee16a76d2b20d22cf271e478bdab90ba2d5ff290894886770b7c3a152fca85d590d80718fe61d57924a1f34461184122f1835a292c035ac5489c0fc60a2ba5fa447b9f3ba9798d736164fa546bb7cfad74cdcdec4b7ee300e0005d6173dc40cfa35211bbeb0d005a8d809ab21bff986c2b1cff36c1c16f11b39fbbd99e2b947dc61a409243ed6ce2e606b981a7750e24a3a4e011042c12464ffebdbe3bafbf84fc28959269e1784dab4ae05200154c04e9a12235edabb8e8c8828986045049c910a7c0275f712d63ee8ecd8123d29618fe3f20329997ed2405eee0fa5dfce4b12aa256615bc16a96efa3821257b3865acea985c2e56b7464bda952ed62c8cd19c15463231d69b257fbc475cccc0e9cd3a48c4a58d13723ec85302482c3e141d2eefa77e9d0906764ca5f26f2e259d9d27f61174bcc877cd9a54d968c0143dd6194f57b514397ef6533b0022cbc2a8fdb35f3078a88f0ba2fda88837e6a80ce3321a917e44c42c246fbfd2ea16289b4f90ee271465b74d0ddce2a301410d87d81a0e7967e201d7c377a94d6f53ef901d3ff75873d0386ffe809042e82d2a1051132191e438ff50b7b69910af2c96394380541650b50770048fbbc28efbcceb4f87c55b5c1ce08b526b78093b0bf9abeae7925abd2db16486e91ca4137f206ee69d427c3060daca98caac50cbdeadfc9186efbc27bf50f0a19dc5bb9678ea9e61e96044172fecbc5aba076a8ad6bd4c0fff2bd915eeff8621156b36450823a1a9ebf1d973ce626c1c9ea75743f4d1b83c547f7d5f16544cc1efefdc110c59b09dcc4f1c9fbd6bac3c4d30f2f1a883c67ec6200020690a9e51b43f74f59bc859e7df2dc6032ab5a1daca0be00402afa3bfc92143aa02dd3b9cdc236125e6ce85f45d115fb70a830edf47ec26e922d51fb6e04fb10c3827be3c4d3895ae020e3f4464e9fb030b791fa604c03599a3aa24e79de000669c172f6ec7bc6f37ecf0a32378b17fc501950d18ec9966f43ee543bdf147c8b77833d1968c5725a32dc531785c8bab8eebf47f92e744a4be9ad002b910eb539c7331ff2f98a6884476ca964c641038d2c5c6e5cb564bdadba7cdaaed0bfb9392f1db6b48d2d29fdacfeb59dd1a7b3e4f0d01c5c51a023348723195318dee04f30d4d34bc7b7ca70d13c31ccad689e5931b3d0dbbbc1800f19c44bf6d8864ab4af664a1e816d25fc92e256552940c624206f4201e0e0b8c41b675958420a3d35326acf46a3dcc440c3226ccc29f60afd0b309437842ce928f5b745badfa7e960c7f8240a9341154f70d50ab39063804d545b71e11675d5b6160bb0be2939562a382171c1d4e8d082c41b08d67023f6e552ab84b9f1e9aa6855078403401afd5e57c4e92ea0b8faaa801c6bd6dbc6abfbac95ff7594fc9c67982cdd2717fb50f7bc75bf300233a3cd1e8ab2115dab2cf8c8bd3f9a5c8a945a4dab01e16907a60edea35db758728dac698830d32b25757a0737d3dd6b0ec0dabc47bd6316f75386bf07188bed1be15b278e12832740a1e65cdd7e60f68dc4875ab106493aa92a194f40bdeab7177be79dc2ab698cdcc7bcb27b2bf5bff816d36866a35648e6d2241319d25457934509465682f8185fa27a1b592c98301850048ddfa5321421ccfc634ffcb23682edf9ee91c1227fd071e43682bbe8dea27130d7ac3df615906686ddfd408d250dc42e729ba92eb0069a89d5933e1d6192e911adbf560468845d96122565517c28fc09d43e66c9d556166d0688b1ddad62278dd7d217dadbd7d76f7d2879c4491e567d887b202475b6ab81ae4d6f1f7d058d3d07c0d92bf05db196ba3ab32c16227e132958dd386d8104f6272f74eb81eee2d19abec310e7a7b1edfd45513ba2de68f2b6105e432cd0b04246070047003867cb0827b9a492dd79691a7cd078ea5e120cf40315cc8a3e365676be9d734f75c4366478717b294516f7da6930b923e9f5c2d11e0475fdfbcbc2f4307523f57bc8cc2d60a99bd6f8afd34eefa4f350fb882241beac539ab27bfdaf342ab874b79206be398799a8c985214b81a03d56039e03122e026637dbb587f620fe216eddd1e096ccf4eb39ee3bccf3a5d9e2fa26d3ac33198c7ffb738268c7a65de97e6550f2c019f94571beb7dd652b92451fc2b19862e285a73e5b242bcaef098f391ed46d88383a4a5dcce0e4a21f0e43084d88525810964a4fe64203413ef4a516c18ad41aad5b1e536adf5bba115d15a47b9962ed06959fd793a25d83fdbae6383f46001f9437753e7cc76cb70537027ba3058555ba38174fbed6412659172c037fb860b7f6e57fd4304c15f9d375f5e6dc212ebe954c9ca09ec01e2ead469bc7e3c3b1098f811b6c50828bca0dbb623fd7d6ef5b3fe4d1db78de0bb0cd4f9a801483e2d34808e7fcc5ccca3d6d1ee2d0f09f2fc969a314757086379d777760356cd6076ab6844a4d09ffc9a0c87556b4b3e7183718c40c4bdb6857261f3d0afa4b2b608cd84ca0a1c76fe6b8c459936b6c5f3f83813b7816e2a3ee60211470e790f28944a0d89b38a5e202290b7d2e9dfe4d47093267eb50f855b677e13c70d6f15e3511af14ffcfad7d5529a69070cd13ca5e128176307469d8e6e36cef0a77cb08703405e17076af022085fcc103048fbcce7c3fb8ad2ceafd76ba2724b40809e10d462fe628750054907cda852e4e8192e1b8942f5200d82774446ebef6e4c9aebced82a53343518cbd6380e9e97a2fd67ac268d2aeeb1c92c892ca54bc9ba7a2de1614e476ae55e1f98880453af9922078e6e9149325331c4288dae06e57942603a83ae4cd598b6760a1cd309a492a2fa8256e2b824618ccf4f915eb6ad17c801478e0b39b05faafb747ca138e06826d6d1f382be6531cc51f1ae37dce4bfd731d780a1ae4429b04ef6f005e6a74869405b747071077ed2cd822282ceb0c6edfe413fd1ea0d98cc5485b51c33697a99e914f9d2e1072511544fb86900fd61e058b780bc7e7ef2b473d1176b10ecd29636b52baac20cb9bdbcc0f8f8bfb22d9fd4507b68a16790ccea095c86b2d02905b3a1ddc7a350fb80496cf707f9befd955ad8e13b382bce034e185a18362727d2b9cc282217dc7e6af0fba1e662128c030f60ff9dd102bb3894acdcacdd05fa12df8994f2c3435849708529fac48bab1f2d86ecc68e9c472481615fed0c74b79c3e599f4d7856b19a9960de769f87e0ddc3937a78997d2c8a39601b5782b42a86cdb545db28f13e4066084976594a28a6540b5282028ab1fe7038c39c64dbeea2d3c871c1e9055c8d3a166e76094d74b8dfebb3c92541977b6cca0977ee19ef38716fcd80a697c41e4eb68995cbe82c20a2a6a9b3ed0d7e238ce09551afc7b355d880db484ddca9219a75f26e7989fc0b3a80c2b56e5c5ad9d04d88cbe28f9702106776ea1db0ecec34682d138411e60c66ce932db49e38c0d2d3d5fe14daeba38672e054427eb94c6184e74abfb2e7bee60a1a4f2982cc907340b7c226bb1e58eac36c8a709fa29294371f27fd5d941ae73277f77a1358a1513e2d8cdfbca4c93ab6d9d1e69c2ebe68c84d4f4b490f935b0683f281bd6f7d70d16f6d0e32855879ea10a5575b465903661567113d2e48682f038d360e4f5dd8ee0cad15e26c3024c29cabb455bc76170dd6da81ee2e5eed6776bea781cbd28746e9781aabe06f3b26de7bed86de66bb0e28c02505d1f0700f7b07410632bf82bb57b276340ef2f2963968291ec9d0153b1872366faee53d6932899c679ce8189a7be905b1f34c56aef133bcdd3f285c02c0578ca97d9543504960f7b68d3171f984508d0ebbcf2160a18424e9bf8d109b4ce6fb76cb446b073f5ed345232d2d88eff83782591e7411b4ec4be34079617c497774445ae2a9663c0de2016c9c9bf0cdc1f8166357bcc4fa2b586593920e4846274bdd51ff922be2020db49f6cd6c2d08366732bc96f8338abcef018507922b7d18f9a3584b97987f1a80293eb05e012e26d1b5ffdc20d11c6d08e57cfd2f2d8d138b10199b711892b37fb8a4dd776eae34f397a5cb87cb4ef05592c654365cd78f00b79a3f2b59f67f91a1107d6c665ab744f8c9fa5c5da94087f4698b7dc31b0fcaeda630e55183be2db0d3a08d8d77d5e250282bdaf3b2b8ee8f4c6fe870085267a6ad3381a7826855448abf2658abe617be1ef0510d0fff8cbc4dbe80b9f4038a92f5e75db248e81a30d3c7db5ecfcaeaedc93d5365f7d3b8c76cda32fe75982338d83af36c7134896bd20b6ea382c071b566b5a105059bedefda104c90451e3ee22da264fe2beb981366675e4466af23770d86282703470b70100f1be0d90464e3201c379c2522e8b909ba120e4ee9cade3205815f3f8915aa53812151800300136372049f49bea293fa8fe008fb89ddd8a3c4080f37fb766a9e30624b6363c4edcd5633c6f469c74d69d36b2c2cbbb7553f39e135af6c34f63147dec2d76e8a297f4ceb95300a247dd1f86c47947a368ef0f35aaf0dc91af512437efa3595b7c83efea346dd2bd4acb8c1de7ff1b2116e9a5fa068655ad53bb03aa1b35bfb4436c61ee802811f63b8b57974fbe1574479c21e4af434d9d4b7322678628235c5d941a0d17bfebd4c8648f581f08fd1b757fe432a07a83f077cf19238731c4d574a0a9bb937148004c107faa891991509fad543"}) syz_open_dev$evdev(0xfffffffffffffffc, 0xfb, 0x414006) 23:02:00 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2774.228586][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2774.237130][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2774.244074][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2774.286923][ T33] kauditd_printk_skb: 26 callbacks suppressed [ 2774.286940][ T33] audit: type=1804 audit(1623020520.966:421): pid=26540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353139362F48C7C060 dev="sda1" ino=14745 res=1 errno=0 [ 2774.299521][T26544] FAULT_INJECTION: forcing a failure. [ 2774.299521][T26544] name failslab, interval 1, probability 0, space 0, times 0 [ 2774.335963][T26544] CPU: 1 PID: 26544 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2774.344751][T26544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.354824][T26544] Call Trace: [ 2774.358126][T26544] dump_stack+0x143/0x1db [ 2774.359364][ T33] audit: type=1800 audit(1623020520.976:422): pid=26544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14748 res=0 errno=0 [ 2774.362468][T26544] should_fail.cold+0x5/0xa [ 2774.362501][T26544] ? getname_flags.part.0+0x50/0x4f0 [ 2774.385001][ T33] audit: type=1804 audit(1623020521.026:423): pid=26541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353135302F48C7C060 dev="sda1" ino=14740 res=1 errno=0 [ 2774.388346][T26544] should_failslab+0x5/0x10 [ 2774.388379][T26544] kmem_cache_alloc+0x5b/0x360 [ 2774.388405][T26544] getname_flags.part.0+0x50/0x4f0 [ 2774.388433][T26544] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2774.444057][T26544] getname+0x8e/0xd0 [ 2774.447943][ T33] audit: type=1804 audit(1623020521.026:424): pid=26546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343933372F48C7C060 dev="sda1" ino=14761 res=1 errno=0 [ 2774.479641][T26544] do_sys_openat2+0xf5/0x420 23:02:01 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2774.479674][T26544] ? build_open_flags+0x6f0/0x6f0 [ 2774.479697][T26544] ? __context_tracking_exit+0x9f/0xb0 [ 2774.494746][T26544] ? lock_downgrade+0x6e0/0x6e0 [ 2774.499630][T26544] __x64_sys_openat+0x13f/0x1f0 [ 2774.504509][T26544] ? __ia32_sys_open+0x1c0/0x1c0 [ 2774.509521][T26544] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2774.515536][T26544] ? syscall_enter_from_user_mode+0x27/0x70 [ 2774.521502][T26544] do_syscall_64+0x3a/0xb0 [ 2774.526134][T26544] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2774.532243][T26544] RIP: 0033:0x4196c4 23:02:01 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x82801) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x60, 0xa, 0x7, 0x86, "8ffd5e7ec33b19b059c458e9d5119cb7975f140e2e84e4e4005d5d1183cd1608"}) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/246) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000001c0)=0x1) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2774.536158][T26544] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2774.555827][T26544] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2774.564362][T26544] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2774.570078][ T33] audit: type=1804 audit(1623020521.026:425): pid=26551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353139372F48C7C060 dev="sda1" ino=14745 res=1 errno=0 [ 2774.572349][T26544] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2774.572369][T26544] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2774.572386][T26544] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2774.572403][T26544] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 23:02:01 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2774.578955][T20128] usb 2-1: USB disconnect, device number 52 23:02:01 executing program 3 (fault-call:1 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:02:01 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x202040) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000080)={0xdd, 0x2, 0x0, 0x300000, 0x40, 0x6}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000100)=""/101) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x4) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2774.681905][ T33] audit: type=1804 audit(1623020521.366:426): pid=26554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343933382F48C7C060 dev="sda1" ino=14729 res=1 errno=0 23:02:01 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2774.788957][ T33] audit: type=1804 audit(1623020521.416:427): pid=26566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353139382F48C7C060 dev="sda1" ino=14732 res=1 errno=0 [ 2774.832349][T26569] FAULT_INJECTION: forcing a failure. [ 2774.832349][T26569] name failslab, interval 1, probability 0, space 0, times 0 [ 2774.839476][ T33] audit: type=1800 audit(1623020521.476:428): pid=26569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14732 res=0 errno=0 [ 2774.845073][T26569] CPU: 1 PID: 26569 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0 [ 2774.875034][T26569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.878045][ T33] audit: type=1804 audit(1623020521.496:429): pid=26570 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343837382F48C7C060 dev="sda1" ino=14740 res=1 errno=0 [ 2774.885099][T26569] Call Trace: [ 2774.885110][T26569] dump_stack+0x143/0x1db [ 2774.885136][T26569] should_fail.cold+0x5/0xa [ 2774.885162][T26569] ? getname_flags.part.0+0x50/0x4f0 [ 2774.885191][T26569] should_failslab+0x5/0x10 [ 2774.916169][ T33] audit: type=1804 audit(1623020521.516:430): pid=26573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353139392F48C7C060 dev="sda1" ino=14746 res=1 errno=0 [ 2774.918243][T26569] kmem_cache_alloc+0x5b/0x360 [ 2774.918276][T26569] getname_flags.part.0+0x50/0x4f0 [ 2774.976443][T26569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2774.982422][T26569] getname+0x8e/0xd0 [ 2774.986442][T26569] do_sys_openat2+0xf5/0x420 [ 2774.991355][T26569] ? build_open_flags+0x6f0/0x6f0 [ 2774.996393][T26569] ? __context_tracking_exit+0x9f/0xb0 [ 2775.002132][T26569] ? lock_downgrade+0x6e0/0x6e0 [ 2775.006986][T26569] __x64_sys_openat+0x13f/0x1f0 [ 2775.011837][T26569] ? __ia32_sys_open+0x1c0/0x1c0 [ 2775.016791][T26569] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2775.022771][T26569] ? syscall_enter_from_user_mode+0x27/0x70 [ 2775.028662][T26569] do_syscall_64+0x3a/0xb0 [ 2775.033079][T26569] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2775.038968][T26569] RIP: 0033:0x4196c4 [ 2775.042855][T26569] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2775.062668][T26569] RSP: 002b:00007f5beace6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2775.071076][T26569] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2775.079046][T26569] RDX: 0000000000105400 RSI: 00007f5beace6d60 RDI: 00000000ffffff9c [ 2775.087055][T26569] RBP: 00007f5beace6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2775.095018][T26569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000105400 [ 2775.102981][T26569] R13: 00007ffda92e561f R14: 00007f5beace7300 R15: 0000000000022000 [ 2775.308385][T20128] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 2775.668848][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2775.680173][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 64 [ 2775.691595][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2775.701422][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2775.869165][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2775.878320][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2775.886330][T20128] usb 2-1: Product: syz [ 2775.890527][T20128] usb 2-1: Manufacturer: syz [ 2775.895136][T20128] usb 2-1: SerialNumber: syz [ 2775.929499][T26547] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:02 executing program 5 (fault-call:1 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:02 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x3, 0xf35, 0xbbaf, 0x4, 0xa2, 0x7fffffff}) 23:02:02 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:02 executing program 3 (fault-call:1 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:02:02 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0xf00}}}}}}]}}, 0x0) 23:02:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x40000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x12, 0x16, &(0x7f0000000000)="94128a30e44506ee4616b7acbf51080d6ef3ebf07a71"}) [ 2776.210270][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2776.233640][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2776.240820][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2776.258057][T26595] FAULT_INJECTION: forcing a failure. [ 2776.258057][T26595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2776.271314][T26595] CPU: 1 PID: 26595 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0 [ 2776.280105][T26595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.290349][T26595] Call Trace: [ 2776.293644][T26595] dump_stack+0x143/0x1db [ 2776.298003][T26595] should_fail.cold+0x5/0xa [ 2776.302543][T26595] strncpy_from_user+0x34/0x3e0 [ 2776.307426][T26595] getname_flags.part.0+0x95/0x4f0 [ 2776.312571][T26595] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2776.318591][T26595] getname+0x8e/0xd0 [ 2776.322512][T26595] do_sys_openat2+0xf5/0x420 [ 2776.327133][T26595] ? build_open_flags+0x6f0/0x6f0 [ 2776.331031][T26589] FAULT_INJECTION: forcing a failure. [ 2776.331031][T26589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2776.332187][T26595] ? __context_tracking_exit+0x9f/0xb0 [ 2776.332223][T26595] ? lock_downgrade+0x6e0/0x6e0 [ 2776.332252][T26595] __x64_sys_openat+0x13f/0x1f0 [ 2776.360414][T26595] ? __ia32_sys_open+0x1c0/0x1c0 [ 2776.365358][T26595] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2776.371338][T26595] ? syscall_enter_from_user_mode+0x27/0x70 [ 2776.377510][T26595] do_syscall_64+0x3a/0xb0 [ 2776.381957][T26595] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2776.387860][T26595] RIP: 0033:0x4196c4 [ 2776.391847][T26595] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2776.411547][T26595] RSP: 002b:00007f5beacc5cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2776.419957][T26595] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2776.427927][T26595] RDX: 0000000000105400 RSI: 00007f5beacc5d60 RDI: 00000000ffffff9c [ 2776.435899][T26595] RBP: 00007f5beacc5d60 R08: 0000000000000000 R09: 0000000000000000 [ 2776.443888][T26595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000105400 [ 2776.451853][T26595] R13: 00007ffda92e561f R14: 00007f5beacc6300 R15: 0000000000022000 [ 2776.459826][T26589] CPU: 0 PID: 26589 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2776.468614][T26589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.478695][T26589] Call Trace: [ 2776.481994][T26589] dump_stack+0x143/0x1db [ 2776.482783][T20128] usb 2-1: USB disconnect, device number 53 [ 2776.486341][T26589] should_fail.cold+0x5/0xa [ 2776.486376][T26589] strncpy_from_user+0x34/0x3e0 [ 2776.486405][T26589] getname_flags.part.0+0x95/0x4f0 [ 2776.506731][T26589] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2776.512751][T26589] getname+0x8e/0xd0 [ 2776.516672][T26589] do_sys_openat2+0xf5/0x420 [ 2776.521332][T26589] ? build_open_flags+0x6f0/0x6f0 [ 2776.526386][T26589] ? __context_tracking_exit+0x9f/0xb0 [ 2776.531878][T26589] ? lock_downgrade+0x6e0/0x6e0 [ 2776.536762][T26589] __x64_sys_openat+0x13f/0x1f0 [ 2776.541649][T26589] ? __ia32_sys_open+0x1c0/0x1c0 [ 2776.546612][T26589] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2776.552626][T26589] ? syscall_enter_from_user_mode+0x27/0x70 [ 2776.558555][T26589] do_syscall_64+0x3a/0xb0 [ 2776.563115][T26589] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2776.569044][T26589] RIP: 0033:0x4196c4 23:02:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2776.572967][T26589] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2776.592637][T26589] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2776.601082][T26589] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2776.609082][T26589] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2776.617078][T26589] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2776.625077][T26589] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 23:02:03 executing program 3 (fault-call:1 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2776.633075][T26589] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 23:02:03 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf2, 0x4000) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:03 executing program 0: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x6) [ 2776.729522][T26610] FAULT_INJECTION: forcing a failure. [ 2776.729522][T26610] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.742278][T26610] CPU: 1 PID: 26610 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0 [ 2776.751120][T26610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.761197][T26610] Call Trace: [ 2776.764494][T26610] dump_stack+0x143/0x1db [ 2776.768850][T26610] should_fail.cold+0x5/0xa [ 2776.773419][T26610] ? __alloc_file+0x21/0x280 23:02:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:03 executing program 5 (fault-call:1 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2776.778043][T26610] should_failslab+0x5/0x10 [ 2776.782584][T26610] kmem_cache_alloc+0x5b/0x360 [ 2776.787383][T26610] __alloc_file+0x21/0x280 [ 2776.791849][T26610] alloc_empty_file+0x6d/0x170 [ 2776.796671][T26610] path_openat+0xe3/0x27e0 [ 2776.801158][T26610] ? __lock_acquire+0x16a7/0x5230 [ 2776.806214][T26610] ? path_lookupat+0x850/0x850 [ 2776.811015][T26610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2776.817034][T26610] do_filp_open+0x190/0x3d0 [ 2776.821593][T26610] ? may_open_dev+0xf0/0xf0 23:02:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2776.826120][T26610] ? alloc_fd+0x2e6/0x660 [ 2776.830482][T26610] ? lock_downgrade+0x6e0/0x6e0 [ 2776.835365][T26610] ? do_raw_spin_lock+0x120/0x2b0 [ 2776.840450][T26610] ? rwlock_bug.part.0+0x90/0x90 [ 2776.845412][T26610] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2776.851689][T26610] ? _find_next_bit+0x1e3/0x260 [ 2776.856576][T26610] ? _raw_spin_unlock+0x1a/0x30 [ 2776.861456][T26610] ? alloc_fd+0x2e6/0x660 [ 2776.865909][T26610] do_sys_openat2+0x16d/0x420 [ 2776.870661][T26610] ? build_open_flags+0x6f0/0x6f0 23:02:03 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2776.875721][T26610] ? __context_tracking_exit+0x9f/0xb0 [ 2776.881206][T26610] ? lock_downgrade+0x6e0/0x6e0 [ 2776.886187][T26610] __x64_sys_openat+0x13f/0x1f0 [ 2776.891074][T26610] ? __ia32_sys_open+0x1c0/0x1c0 [ 2776.896044][T26610] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2776.902058][T26610] ? syscall_enter_from_user_mode+0x27/0x70 [ 2776.908002][T26610] do_syscall_64+0x3a/0xb0 [ 2776.912447][T26610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2776.918378][T26610] RIP: 0033:0x4196c4 23:02:03 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/74) [ 2776.922304][T26610] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2776.942124][T26610] RSP: 002b:00007f5beace6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2776.950571][T26610] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2776.958568][T26610] RDX: 0000000000105400 RSI: 00007f5beace6d60 RDI: 00000000ffffff9c [ 2776.966596][T26610] RBP: 00007f5beace6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2776.974682][T26610] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000105400 [ 2776.982682][T26610] R13: 00007ffda92e561f R14: 00007f5beace7300 R15: 0000000000022000 [ 2777.002239][T26624] FAULT_INJECTION: forcing a failure. [ 2777.002239][T26624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2777.015451][T26624] CPU: 1 PID: 26624 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2777.024240][T26624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.034316][T26624] Call Trace: [ 2777.037644][T26624] dump_stack+0x143/0x1db [ 2777.042003][T26624] should_fail.cold+0x5/0xa [ 2777.046541][T26624] strncpy_from_user+0x34/0x3e0 [ 2777.051430][T26624] getname_flags.part.0+0x95/0x4f0 [ 2777.056580][T26624] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2777.062599][T26624] getname+0x8e/0xd0 [ 2777.066523][T26624] do_sys_openat2+0xf5/0x420 [ 2777.071140][T26624] ? build_open_flags+0x6f0/0x6f0 [ 2777.076323][T26624] ? __context_tracking_exit+0x9f/0xb0 [ 2777.081820][T26624] ? lock_downgrade+0x6e0/0x6e0 [ 2777.086713][T26624] __x64_sys_openat+0x13f/0x1f0 [ 2777.091597][T26624] ? __ia32_sys_open+0x1c0/0x1c0 [ 2777.096570][T26624] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2777.102599][T26624] ? syscall_enter_from_user_mode+0x27/0x70 [ 2777.108530][T26624] do_syscall_64+0x3a/0xb0 [ 2777.112985][T26624] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2777.118918][T26624] RIP: 0033:0x4196c4 [ 2777.122832][T26624] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2777.142597][T26624] RSP: 002b:00007f7086064cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2777.151022][T26624] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2777.159154][T26624] RDX: 0000000000000006 RSI: 00007f7086064d60 RDI: 00000000ffffff9c [ 2777.167138][T26624] RBP: 00007f7086064d60 R08: 0000000000000000 R09: 0000000000000000 [ 2777.175254][T26624] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2777.183223][T26624] R13: 00007ffc69ffb2ff R14: 00007f7086065300 R15: 0000000000022000 [ 2777.338331][T20128] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 2777.718692][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2777.729894][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 64 [ 2777.741444][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2777.751290][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2777.918771][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2777.927974][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2777.936014][T20128] usb 2-1: Product: syz [ 2777.940361][T20128] usb 2-1: Manufacturer: syz [ 2777.944966][T20128] usb 2-1: SerialNumber: syz [ 2777.969646][T26597] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:04 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0xff00}}}}}}]}}, 0x0) 23:02:04 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/119) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x410e42) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:04 executing program 3 (fault-call:1 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:02:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/243) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:04 executing program 5 (fault-call:1 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2778.228343][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2778.236493][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2778.243431][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2778.294884][T26645] FAULT_INJECTION: forcing a failure. [ 2778.294884][T26645] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.307874][T26645] CPU: 0 PID: 26645 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2778.316869][T26645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.326949][T26645] Call Trace: [ 2778.328644][T20128] usb 2-1: USB disconnect, device number 54 [ 2778.330236][T26645] dump_stack+0x143/0x1db [ 2778.330265][T26645] should_fail.cold+0x5/0xa [ 2778.344985][T26645] ? security_file_alloc+0x34/0x170 [ 2778.350222][T26645] should_failslab+0x5/0x10 [ 2778.354867][T26645] kmem_cache_alloc+0x5b/0x360 [ 2778.359794][T26645] security_file_alloc+0x34/0x170 [ 2778.364857][T26645] __alloc_file+0xd8/0x280 [ 2778.369312][T26645] alloc_empty_file+0x6d/0x170 [ 2778.374163][T26645] path_openat+0xe3/0x27e0 [ 2778.378611][T26645] ? __lock_acquire+0x16a7/0x5230 [ 2778.383671][T26645] ? path_lookupat+0x850/0x850 [ 2778.388649][T26645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2778.394661][T26645] do_filp_open+0x190/0x3d0 [ 2778.399194][T26645] ? may_open_dev+0xf0/0xf0 [ 2778.403724][T26645] ? alloc_fd+0x2e6/0x660 [ 2778.408081][T26645] ? lock_downgrade+0x6e0/0x6e0 [ 2778.411585][T26646] FAULT_INJECTION: forcing a failure. [ 2778.411585][T26646] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.412945][T26645] ? do_raw_spin_lock+0x120/0x2b0 [ 2778.430730][T26645] ? rwlock_bug.part.0+0x90/0x90 [ 2778.435767][T26645] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2778.442040][T26645] ? _find_next_bit+0x1e3/0x260 [ 2778.446891][T26645] ? _raw_spin_unlock+0x1a/0x30 [ 2778.451734][T26645] ? alloc_fd+0x2e6/0x660 [ 2778.456149][T26645] do_sys_openat2+0x16d/0x420 [ 2778.460820][T26645] ? build_open_flags+0x6f0/0x6f0 [ 2778.465837][T26645] ? __context_tracking_exit+0x9f/0xb0 [ 2778.471290][T26645] ? lock_downgrade+0x6e0/0x6e0 [ 2778.476150][T26645] __x64_sys_openat+0x13f/0x1f0 [ 2778.480994][T26645] ? __ia32_sys_open+0x1c0/0x1c0 [ 2778.486013][T26645] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2778.491993][T26645] ? syscall_enter_from_user_mode+0x27/0x70 [ 2778.497985][T26645] do_syscall_64+0x3a/0xb0 [ 2778.502425][T26645] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2778.508413][T26645] RIP: 0033:0x4196c4 [ 2778.512307][T26645] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2778.531905][T26645] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2778.540314][T26645] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2778.548280][T26645] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2778.556246][T26645] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2778.564210][T26645] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2778.572174][T26645] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2778.580138][T26646] CPU: 1 PID: 26646 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0 [ 2778.589009][T26646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.599093][T26646] Call Trace: [ 2778.602388][T26646] dump_stack+0x143/0x1db [ 2778.606832][T26646] should_fail.cold+0x5/0xa [ 2778.611576][T26646] ? security_file_alloc+0x34/0x170 [ 2778.616836][T26646] should_failslab+0x5/0x10 [ 2778.621371][T26646] kmem_cache_alloc+0x5b/0x360 [ 2778.626167][T26646] security_file_alloc+0x34/0x170 [ 2778.631227][T26646] __alloc_file+0xd8/0x280 [ 2778.635682][T26646] alloc_empty_file+0x6d/0x170 [ 2778.640481][T26646] path_openat+0xe3/0x27e0 23:02:05 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x40000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/49) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0xfffffffffffffffe) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40006) 23:02:05 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2778.644930][T26646] ? __lock_acquire+0x16a7/0x5230 [ 2778.649986][T26646] ? path_lookupat+0x850/0x850 [ 2778.654779][T26646] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2778.660796][T26646] do_filp_open+0x190/0x3d0 [ 2778.665325][T26646] ? may_open_dev+0xf0/0xf0 [ 2778.669851][T26646] ? alloc_fd+0x2e6/0x660 [ 2778.674207][T26646] ? lock_downgrade+0x6e0/0x6e0 [ 2778.679186][T26646] ? do_raw_spin_lock+0x120/0x2b0 [ 2778.684403][T26646] ? rwlock_bug.part.0+0x90/0x90 [ 2778.689364][T26646] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 23:02:05 executing program 5 (fault-call:1 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2778.695735][T26646] ? _find_next_bit+0x1e3/0x260 [ 2778.700651][T26646] ? _raw_spin_unlock+0x1a/0x30 [ 2778.705614][T26646] ? alloc_fd+0x2e6/0x660 [ 2778.709972][T26646] do_sys_openat2+0x16d/0x420 [ 2778.714675][T26646] ? build_open_flags+0x6f0/0x6f0 [ 2778.719734][T26646] ? __context_tracking_exit+0x9f/0xb0 [ 2778.725232][T26646] ? lock_downgrade+0x6e0/0x6e0 [ 2778.730111][T26646] __x64_sys_openat+0x13f/0x1f0 [ 2778.734987][T26646] ? __ia32_sys_open+0x1c0/0x1c0 [ 2778.740038][T26646] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2778.744420][T26664] FAULT_INJECTION: forcing a failure. [ 2778.744420][T26664] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.746073][T26646] ? syscall_enter_from_user_mode+0x27/0x70 [ 2778.746108][T26646] do_syscall_64+0x3a/0xb0 [ 2778.746133][T26646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2778.746160][T26646] RIP: 0033:0x4196c4 [ 2778.779317][T26646] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2778.799104][T26646] RSP: 002b:00007f5beace6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2778.807533][T26646] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2778.815606][T26646] RDX: 0000000000105400 RSI: 00007f5beace6d60 RDI: 00000000ffffff9c [ 2778.823920][T26646] RBP: 00007f5beace6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2778.831885][T26646] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000105400 [ 2778.839851][T26646] R13: 00007ffda92e561f R14: 00007f5beace7300 R15: 0000000000022000 [ 2778.847829][T26664] CPU: 0 PID: 26664 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2778.856710][T26664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.866796][T26664] Call Trace: [ 2778.870178][T26664] dump_stack+0x143/0x1db [ 2778.874533][T26664] should_fail.cold+0x5/0xa [ 2778.879065][T26664] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2778.884819][T26664] should_failslab+0x5/0x10 [ 2778.889360][T26664] __kmalloc+0x72/0x310 [ 2778.893556][T26664] tomoyo_realpath_from_path+0xc3/0x620 [ 2778.899231][T26664] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2778.905502][T26664] tomoyo_check_open_permission+0x272/0x380 [ 2778.911426][T26664] ? tomoyo_path_number_perm+0x590/0x590 [ 2778.917111][T26664] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2778.923131][T26664] ? path_get+0x5d/0x80 [ 2778.927419][T26664] ? lock_downgrade+0x6e0/0x6e0 [ 2778.932303][T26664] ? do_raw_spin_lock+0x120/0x2b0 [ 2778.937359][T26664] tomoyo_file_open+0xa3/0xd0 [ 2778.942062][T26664] security_file_open+0x52/0x4f0 [ 2778.947038][T26664] ? __mnt_want_write+0x196/0x270 [ 2778.949580][T26670] FAULT_INJECTION: forcing a failure. [ 2778.949580][T26670] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.952081][T26664] do_dentry_open+0x353/0x1090 [ 2778.952112][T26664] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2778.952144][T26664] ? may_open+0x1f6/0x420 [ 2778.952170][T26664] path_openat+0x1c0e/0x27e0 [ 2778.984610][T26664] ? path_lookupat+0x850/0x850 [ 2778.989391][T26664] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2778.995392][T26664] do_filp_open+0x190/0x3d0 [ 2778.999907][T26664] ? may_open_dev+0xf0/0xf0 [ 2779.004404][T26664] ? do_raw_spin_lock+0x120/0x2b0 [ 2779.009425][T26664] ? rwlock_bug.part.0+0x90/0x90 [ 2779.014379][T26664] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2779.020615][T26664] ? _find_next_bit+0x1e3/0x260 [ 2779.025474][T26664] ? _raw_spin_unlock+0x1a/0x30 [ 2779.030405][T26664] ? alloc_fd+0x2e6/0x660 [ 2779.034840][T26664] do_sys_openat2+0x16d/0x420 [ 2779.039524][T26664] ? build_open_flags+0x6f0/0x6f0 [ 2779.044540][T26664] ? __context_tracking_exit+0x9f/0xb0 [ 2779.049994][T26664] ? lock_downgrade+0x6e0/0x6e0 [ 2779.054852][T26664] __x64_sys_openat+0x13f/0x1f0 [ 2779.059715][T26664] ? __ia32_sys_open+0x1c0/0x1c0 [ 2779.064757][T26664] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2779.070860][T26664] ? syscall_enter_from_user_mode+0x27/0x70 [ 2779.076751][T26664] do_syscall_64+0x3a/0xb0 [ 2779.081162][T26664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2779.087052][T26664] RIP: 0033:0x4196c4 [ 2779.090938][T26664] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2779.110694][T26664] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2779.119128][T26664] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2779.127213][T26664] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2779.135302][T26664] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 23:02:05 executing program 3 (fault-call:1 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2779.143278][T26664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2779.151458][T26664] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2779.159515][T26670] CPU: 1 PID: 26670 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0 [ 2779.159712][T26664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2779.168293][T26670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2779.168308][T26670] Call Trace: [ 2779.168320][T26670] dump_stack+0x143/0x1db [ 2779.192898][T26670] should_fail.cold+0x5/0xa [ 2779.197441][T26670] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2779.203329][T26670] should_failslab+0x5/0x10 [ 2779.207865][T26670] __kmalloc+0x72/0x310 [ 2779.212051][T26670] tomoyo_realpath_from_path+0xc3/0x620 [ 2779.217640][T26670] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2779.223912][T26670] tomoyo_check_open_permission+0x272/0x380 [ 2779.229843][T26670] ? tomoyo_path_number_perm+0x590/0x590 [ 2779.235508][T26670] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2779.241535][T26670] ? path_get+0x5d/0x80 23:02:05 executing program 5 (fault-call:1 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:05 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2779.245730][T26670] ? lock_downgrade+0x6e0/0x6e0 [ 2779.250613][T26670] ? do_raw_spin_lock+0x120/0x2b0 [ 2779.255667][T26670] tomoyo_file_open+0xa3/0xd0 [ 2779.260369][T26670] security_file_open+0x52/0x4f0 [ 2779.265341][T26670] do_dentry_open+0x353/0x1090 [ 2779.270134][T26670] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2779.276422][T26670] ? may_open+0x1f6/0x420 [ 2779.280826][T26670] path_openat+0x1c0e/0x27e0 [ 2779.285452][T26670] ? path_lookupat+0x850/0x850 [ 2779.290341][T26670] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2779.296362][T26670] do_filp_open+0x190/0x3d0 [ 2779.300897][T26670] ? may_open_dev+0xf0/0xf0 [ 2779.305440][T26670] ? do_raw_spin_lock+0x120/0x2b0 [ 2779.310582][T26670] ? rwlock_bug.part.0+0x90/0x90 [ 2779.315545][T26670] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2779.321827][T26670] ? _find_next_bit+0x1e3/0x260 [ 2779.326703][T26670] ? _raw_spin_unlock+0x1a/0x30 [ 2779.331594][T26670] ? alloc_fd+0x2e6/0x660 [ 2779.335947][T26670] do_sys_openat2+0x16d/0x420 [ 2779.340741][T26670] ? build_open_flags+0x6f0/0x6f0 [ 2779.345926][T26670] ? __context_tracking_exit+0x9f/0xb0 [ 2779.351422][T26670] ? lock_downgrade+0x6e0/0x6e0 [ 2779.356309][T26670] __x64_sys_openat+0x13f/0x1f0 [ 2779.361283][T26670] ? __ia32_sys_open+0x1c0/0x1c0 [ 2779.366251][T26670] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2779.372263][T26670] ? syscall_enter_from_user_mode+0x27/0x70 [ 2779.376935][T26675] FAULT_INJECTION: forcing a failure. [ 2779.376935][T26675] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.378205][T26670] do_syscall_64+0x3a/0xb0 [ 2779.378237][T26670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2779.378267][T26670] RIP: 0033:0x4196c4 [ 2779.378284][T26670] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2779.425001][T26670] RSP: 002b:00007f5beace6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2779.433512][T26670] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2779.441480][T26670] RDX: 0000000000105400 RSI: 00007f5beace6d60 RDI: 00000000ffffff9c [ 2779.449533][T26670] RBP: 00007f5beace6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2779.457599][T26670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000105400 [ 2779.465656][T26670] R13: 00007ffda92e561f R14: 00007f5beace7300 R15: 0000000000022000 [ 2779.473636][T26675] CPU: 0 PID: 26675 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2779.473763][T26670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2779.482589][T26675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2779.482605][T26675] Call Trace: [ 2779.482616][T26675] dump_stack+0x143/0x1db [ 2779.506973][T26675] should_fail.cold+0x5/0xa [ 2779.511510][T26675] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2779.516913][T26675] should_failslab+0x5/0x10 [ 2779.521452][T26675] __kmalloc+0x72/0x310 [ 2779.525637][T26675] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2779.530876][T26675] tomoyo_encode+0x28/0x50 [ 2779.535426][T26675] tomoyo_realpath_from_path+0x186/0x620 [ 2779.541194][T26675] tomoyo_check_open_permission+0x272/0x380 [ 2779.547127][T26675] ? tomoyo_path_number_perm+0x590/0x590 [ 2779.552796][T26675] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2779.558430][T20128] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 2779.558818][T26675] ? path_get+0x5d/0x80 [ 2779.570509][T26675] ? lock_downgrade+0x6e0/0x6e0 [ 2779.573020][ T33] kauditd_printk_skb: 26 callbacks suppressed [ 2779.573037][ T33] audit: type=1800 audit(1623020526.186:457): pid=26670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15345 res=0 errno=0 [ 2779.575385][T26675] ? do_raw_spin_lock+0x120/0x2b0 [ 2779.607921][T26675] tomoyo_file_open+0xa3/0xd0 [ 2779.612626][T26675] security_file_open+0x52/0x4f0 [ 2779.617596][T26675] ? __mnt_want_write+0x196/0x270 [ 2779.622626][T26675] do_dentry_open+0x353/0x1090 [ 2779.627429][T26675] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2779.633725][T26675] ? may_open+0x1f6/0x420 [ 2779.638079][T26675] path_openat+0x1c0e/0x27e0 [ 2779.642689][T26675] ? path_lookupat+0x850/0x850 [ 2779.647496][T26675] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2779.653475][T26675] do_filp_open+0x190/0x3d0 [ 2779.657982][T26675] ? may_open_dev+0xf0/0xf0 [ 2779.662488][T26675] ? do_raw_spin_lock+0x120/0x2b0 [ 2779.667526][T26675] ? rwlock_bug.part.0+0x90/0x90 [ 2779.672458][T26675] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2779.678695][T26675] ? _find_next_bit+0x1e3/0x260 [ 2779.683547][T26675] ? _raw_spin_unlock+0x1a/0x30 [ 2779.688871][T26675] ? alloc_fd+0x2e6/0x660 [ 2779.693205][T26675] do_sys_openat2+0x16d/0x420 [ 2779.697898][T26675] ? build_open_flags+0x6f0/0x6f0 [ 2779.702929][T26675] ? __context_tracking_exit+0x9f/0xb0 [ 2779.708534][T26675] ? lock_downgrade+0x6e0/0x6e0 [ 2779.713723][T26675] __x64_sys_openat+0x13f/0x1f0 [ 2779.718836][T26675] ? __ia32_sys_open+0x1c0/0x1c0 [ 2779.724026][T26675] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2779.730022][T26675] ? syscall_enter_from_user_mode+0x27/0x70 [ 2779.735924][T26675] do_syscall_64+0x3a/0xb0 [ 2779.740345][T26675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2779.746237][T26675] RIP: 0033:0x4196c4 [ 2779.750128][T26675] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2779.770068][T26675] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2779.778597][T26675] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2779.786567][T26675] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2779.794653][T26675] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2779.802618][T26675] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2779.810585][T26675] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2779.818956][T26675] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2779.830877][ T33] audit: type=1804 audit(1623020526.516:458): pid=26675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343935332F48C7C060 dev="sda1" ino=15201 res=1 errno=0 [ 2779.938264][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2779.949279][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 64 [ 2779.960601][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2779.970945][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2780.138711][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2780.148106][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.156588][T20128] usb 2-1: Product: syz [ 2780.161023][T20128] usb 2-1: Manufacturer: syz [ 2780.165716][T20128] usb 2-1: SerialNumber: syz [ 2780.189543][T26650] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:07 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:02:07 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x200000) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x5, 0x4, 0xfffffff7, 0x3f, 0x1, 0x5f}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/26) 23:02:07 executing program 3 (fault-call:1 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:02:07 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:07 executing program 5 (fault-call:1 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:07 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x40) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/43) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000180)=""/147) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/130) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7ff, 0x400) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000300)=""/50) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x82) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000280)=""/13) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/10) [ 2780.458188][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2780.479246][ T33] audit: type=1804 audit(1623020527.166:459): pid=26689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343838352F48C7C060 dev="sda1" ino=14506 res=1 errno=0 [ 2780.492879][T26690] FAULT_INJECTION: forcing a failure. [ 2780.492879][T26690] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.517760][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2780.521778][T26690] CPU: 0 PID: 26690 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2780.521809][T26690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.521823][T26690] Call Trace: [ 2780.521832][T26690] dump_stack+0x143/0x1db [ 2780.528625][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2780.537402][T26690] should_fail.cold+0x5/0xa [ 2780.564588][T26690] ? ima_d_path+0x4d/0x1f0 [ 2780.569036][T26690] should_failslab+0x5/0x10 [ 2780.573583][T26690] kmem_cache_alloc+0x5b/0x360 [ 2780.578468][T26690] ? do_raw_read_unlock+0x3b/0x70 [ 2780.583570][T26690] ima_d_path+0x4d/0x1f0 [ 2780.587844][T26690] ? integrity_inode_get+0x38/0x270 [ 2780.590829][T26694] FAULT_INJECTION: forcing a failure. [ 2780.590829][T26694] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.593059][T26690] process_measurement+0xb46/0x17e0 [ 2780.593094][T26690] ? mmap_violation_check+0x1e0/0x1e0 [ 2780.593119][T26690] ? tomoyo_path_number_perm+0x590/0x590 [ 2780.621834][T26690] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2780.627823][T26690] ? find_held_lock+0x2d/0x110 [ 2780.632580][T26690] ? aa_get_task_label+0x25f/0x540 [ 2780.637689][T26690] ? lock_downgrade+0x6e0/0x6e0 [ 2780.642534][T26690] ? fsnotify+0x1070/0x1070 [ 2780.647080][T26690] ? ext4_file_write_iter+0x1980/0x1980 [ 2780.652720][T26690] ? path_get+0x5d/0x80 [ 2780.656870][T26690] ? aa_get_task_label+0x288/0x540 [ 2780.661977][T26690] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2780.668212][T26690] ? apparmor_task_getsecid+0xc2/0x110 [ 2780.673665][T26690] ima_file_check+0xb9/0x100 [ 2780.678251][T26690] ? process_measurement+0x17e0/0x17e0 [ 2780.683705][T26690] ? may_open+0x1f6/0x420 [ 2780.688033][T26690] path_openat+0x15b5/0x27e0 [ 2780.692624][T26690] ? path_lookupat+0x850/0x850 [ 2780.697405][T26690] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2780.703385][T26690] do_filp_open+0x190/0x3d0 [ 2780.707879][T26690] ? may_open_dev+0xf0/0xf0 [ 2780.712372][T26690] ? do_raw_spin_lock+0x120/0x2b0 [ 2780.717406][T26690] ? rwlock_bug.part.0+0x90/0x90 [ 2780.722344][T26690] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2780.728582][T26690] ? _find_next_bit+0x1e3/0x260 [ 2780.733523][T26690] ? _raw_spin_unlock+0x1a/0x30 [ 2780.738485][T26690] ? alloc_fd+0x2e6/0x660 [ 2780.743419][T26690] do_sys_openat2+0x16d/0x420 [ 2780.748178][T26690] ? build_open_flags+0x6f0/0x6f0 [ 2780.753196][T26690] ? __context_tracking_exit+0x9f/0xb0 [ 2780.758650][T26690] ? lock_downgrade+0x6e0/0x6e0 [ 2780.763696][T26690] __x64_sys_openat+0x13f/0x1f0 [ 2780.768547][T26690] ? __ia32_sys_open+0x1c0/0x1c0 [ 2780.773476][T26690] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2780.779466][T26690] ? syscall_enter_from_user_mode+0x27/0x70 [ 2780.785367][T26690] do_syscall_64+0x3a/0xb0 [ 2780.789777][T26690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2780.795672][T26690] RIP: 0033:0x4196c4 [ 2780.799559][T26690] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2780.819160][T26690] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2780.827565][T26690] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2780.835542][T26690] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2780.843506][T26690] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2780.851474][T26690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2780.859454][T26690] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2780.867607][T26694] CPU: 1 PID: 26694 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0 [ 2780.876396][T26694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.886472][T26694] Call Trace: [ 2780.889771][T26694] dump_stack+0x143/0x1db [ 2780.894126][T26694] should_fail.cold+0x5/0xa [ 2780.898671][T26694] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2780.904071][T26694] should_failslab+0x5/0x10 [ 2780.905182][ T33] audit: type=1800 audit(1623020527.166:460): pid=26690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15489 res=0 errno=0 [ 2780.908784][T26694] __kmalloc+0x72/0x310 [ 2780.908816][T26694] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2780.908846][T26694] tomoyo_encode+0x28/0x50 [ 2780.938761][ T33] audit: type=1800 audit(1623020527.266:461): pid=26694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15553 res=0 errno=0 [ 2780.939357][T26694] tomoyo_realpath_from_path+0x186/0x620 [ 2780.943987][ T33] audit: type=1804 audit(1623020527.546:462): pid=26691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343934322F48C7C060 dev="sda1" ino=15585 res=1 errno=0 [ 2780.964921][T26694] tomoyo_check_open_permission+0x272/0x380 [ 2780.964957][T26694] ? tomoyo_path_number_perm+0x590/0x590 [ 2780.964984][T26694] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2780.965016][T26694] ? path_get+0x5d/0x80 [ 2780.970987][ T33] audit: type=1804 audit(1623020527.546:463): pid=26690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15489 res=1 errno=0 [ 2781.000378][T26694] ? lock_downgrade+0x6e0/0x6e0 [ 2781.000414][T26694] ? do_raw_spin_lock+0x120/0x2b0 [ 2781.000437][T26694] tomoyo_file_open+0xa3/0xd0 [ 2781.000461][T26694] security_file_open+0x52/0x4f0 [ 2781.000488][T26694] do_dentry_open+0x353/0x1090 23:02:07 executing program 5 (fault-call:1 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:07 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2781.028411][ T33] audit: type=1804 audit(1623020527.546:464): pid=26693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353230382F48C7C060 dev="sda1" ino=15617 res=1 errno=0 [ 2781.042421][T26694] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2781.042460][T26694] ? may_open+0x1f6/0x420 [ 2781.042488][T26694] path_openat+0x1c0e/0x27e0 [ 2781.042515][T26694] ? path_lookupat+0x850/0x850 [ 2781.116719][T26694] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.122737][T26694] do_filp_open+0x190/0x3d0 [ 2781.127310][T26694] ? may_open_dev+0xf0/0xf0 [ 2781.131840][T26694] ? do_raw_spin_lock+0x120/0x2b0 [ 2781.136918][T26694] ? rwlock_bug.part.0+0x90/0x90 [ 2781.141972][T26694] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2781.148251][T26694] ? _find_next_bit+0x1e3/0x260 [ 2781.153131][T26694] ? _raw_spin_unlock+0x1a/0x30 [ 2781.158008][T26694] ? alloc_fd+0x2e6/0x660 [ 2781.162366][T26694] do_sys_openat2+0x16d/0x420 [ 2781.167072][T26694] ? build_open_flags+0x6f0/0x6f0 [ 2781.172136][T26694] ? __context_tracking_exit+0x9f/0xb0 [ 2781.177627][T26694] ? lock_downgrade+0x6e0/0x6e0 [ 2781.182517][T26694] __x64_sys_openat+0x13f/0x1f0 [ 2781.185464][ T33] audit: type=1800 audit(1623020527.546:465): pid=26701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15505 res=0 errno=0 [ 2781.187392][T26694] ? __ia32_sys_open+0x1c0/0x1c0 [ 2781.187424][T26694] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2781.219175][T26701] FAULT_INJECTION: forcing a failure. [ 2781.219175][T26701] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.220170][T26694] ? syscall_enter_from_user_mode+0x27/0x70 [ 2781.220208][T26694] do_syscall_64+0x3a/0xb0 [ 2781.220233][T26694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2781.220261][T26694] RIP: 0033:0x4196c4 [ 2781.252985][T26694] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2781.272595][T26694] RSP: 002b:00007f5beace6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2781.281007][T26694] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2781.288972][T26694] RDX: 0000000000105400 RSI: 00007f5beace6d60 RDI: 00000000ffffff9c [ 2781.296941][T26694] RBP: 00007f5beace6d60 R08: 0000000000000000 R09: 0000000000000000 [ 2781.304909][T26694] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000105400 [ 2781.312870][T26694] R13: 00007ffda92e561f R14: 00007f5beace7300 R15: 0000000000022000 [ 2781.320838][T26701] CPU: 0 PID: 26701 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2781.321099][T26694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2781.329611][T26701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2781.329627][T26701] Call Trace: [ 2781.329635][T26701] dump_stack+0x143/0x1db [ 2781.353960][T26701] should_fail.cold+0x5/0xa [ 2781.358504][T26701] ? ima_alloc_init_template+0xb4/0x750 [ 2781.364497][T26701] should_failslab+0x5/0x10 [ 2781.369030][T26701] __kmalloc+0x72/0x310 [ 2781.373225][T26701] ima_alloc_init_template+0xb4/0x750 [ 2781.378632][T26701] ima_add_violation+0x115/0x3b0 [ 2781.380631][T20128] usb 2-1: USB disconnect, device number 55 [ 2781.383599][T26701] ? ima_store_template+0x140/0x140 [ 2781.383631][T26701] ? __d_path+0x160/0x160 [ 2781.399030][T26701] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2781.405306][T26701] process_measurement+0xb6a/0x17e0 [ 2781.410604][T26701] ? mmap_violation_check+0x1e0/0x1e0 [ 2781.416013][T26701] ? tomoyo_path_number_perm+0x590/0x590 [ 2781.421884][T26701] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.427903][T26701] ? find_held_lock+0x2d/0x110 [ 2781.432349][ T33] audit: type=1800 audit(1623020528.116:466): pid=26694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15553 res=0 errno=0 [ 2781.432694][T26701] ? aa_get_task_label+0x25f/0x540 [ 2781.459253][T26701] ? lock_downgrade+0x6e0/0x6e0 [ 2781.464137][T26701] ? fsnotify+0x1070/0x1070 [ 2781.468668][T26701] ? ext4_file_write_iter+0x1980/0x1980 [ 2781.474237][T26701] ? path_get+0x5d/0x80 [ 2781.478420][T26701] ? aa_get_task_label+0x288/0x540 [ 2781.483570][T26701] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2781.489844][T26701] ? apparmor_task_getsecid+0xc2/0x110 [ 2781.495336][T26701] ima_file_check+0xb9/0x100 [ 2781.500045][T26701] ? process_measurement+0x17e0/0x17e0 [ 2781.505531][T26701] ? may_open+0x1f6/0x420 [ 2781.509896][T26701] path_openat+0x15b5/0x27e0 [ 2781.514522][T26701] ? path_lookupat+0x850/0x850 [ 2781.519328][T26701] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.526038][T26701] do_filp_open+0x190/0x3d0 [ 2781.530673][T26701] ? may_open_dev+0xf0/0xf0 [ 2781.535212][T26701] ? do_raw_spin_lock+0x120/0x2b0 [ 2781.540263][T26701] ? rwlock_bug.part.0+0x90/0x90 [ 2781.545224][T26701] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2781.551492][T26701] ? _find_next_bit+0x1e3/0x260 [ 2781.556465][T26701] ? _raw_spin_unlock+0x1a/0x30 [ 2781.561347][T26701] ? alloc_fd+0x2e6/0x660 [ 2781.565702][T26701] do_sys_openat2+0x16d/0x420 [ 2781.570494][T26701] ? build_open_flags+0x6f0/0x6f0 [ 2781.575552][T26701] ? __context_tracking_exit+0x9f/0xb0 23:02:08 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:02:08 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x105400) 23:02:08 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2781.581054][T26701] ? lock_downgrade+0x6e0/0x6e0 [ 2781.585939][T26701] __x64_sys_openat+0x13f/0x1f0 [ 2781.590909][T26701] ? __ia32_sys_open+0x1c0/0x1c0 [ 2781.595894][T26701] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2781.601912][T26701] ? syscall_enter_from_user_mode+0x27/0x70 [ 2781.607843][T26701] do_syscall_64+0x3a/0xb0 [ 2781.612293][T26701] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2781.618224][T26701] RIP: 0033:0x4196c4 23:02:08 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x38100) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x1) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x400800) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/157) [ 2781.622144][T26701] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2781.641780][T26701] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2781.650223][T26701] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2781.658259][T26701] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2781.666429][T26701] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2781.674425][T26701] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2781.682424][T26701] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2781.748659][T20128] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 2782.128512][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2782.139948][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2782.151629][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2782.161839][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2782.328459][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2782.338081][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2782.346068][T20128] usb 2-1: Product: syz [ 2782.350384][T20128] usb 2-1: Manufacturer: syz [ 2782.354989][T20128] usb 2-1: SerialNumber: syz [ 2782.379518][T26698] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:09 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2}}}}}}]}}, 0x0) 23:02:09 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x105400) 23:02:09 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x129400) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x800000, 0x181a00) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xfffffffe, 0x1ff, 0x1009, 0x1, 0x8, 0x7}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x802) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/65) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x57, 0x8001, 0xfffa, {0xfff, 0x6}, {0x96ab, 0xfb6}, @const={0x67, {0x7c25, 0x0, 0x800, 0x400}}}) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x14000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000001700)=""/266) r4 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000440)=""/58) r5 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000002c0), 0x6, 0x0) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000001840)=""/4112) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f00000003c0)={0x3, 0x0, 0x80000000, 0x2c8e2c31, 0x9e4, 0x1}) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000380)={0xffffffff, 0x3, 0xfff, 0x7fff, 0x2, 0x7}) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000180)=""/102) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000200)=""/84) 23:02:09 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:09 executing program 5 (fault-call:1 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:09 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x100000001, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)='\x00\x00\x00\x00'}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) syz_open_dev$evdev(&(0x7f0000000080), 0x80000000, 0x92000) [ 2782.658602][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2782.691253][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2782.698271][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x110b80) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x54, 0x1, 0x3, {0xb83f, 0x1f}, {0x200, 0x8001}, @const={0x5, {0xfe00, 0x66f, 0x4, 0x7}}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) syz_open_dev$hidraw(&(0x7f0000000080), 0xffff, 0x8742a1617f27d98a) 23:02:09 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2782.745708][T20128] usb 2-1: USB disconnect, device number 56 [ 2782.808971][T26754] FAULT_INJECTION: forcing a failure. [ 2782.808971][T26754] name failslab, interval 1, probability 0, space 0, times 0 [ 2782.822057][T26754] CPU: 1 PID: 26754 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2782.830851][T26754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2782.840936][T26754] Call Trace: [ 2782.844236][T26754] dump_stack+0x143/0x1db [ 2782.848595][T26754] should_fail.cold+0x5/0xa [ 2782.853134][T26754] ? ima_alloc_init_template+0x199/0x750 [ 2782.858884][T26754] should_failslab+0x5/0x10 [ 2782.863422][T26754] __kmalloc+0x72/0x310 [ 2782.867610][T26754] ima_alloc_init_template+0x199/0x750 [ 2782.873207][T26754] ima_add_violation+0x115/0x3b0 [ 2782.878219][T26754] ? ima_store_template+0x140/0x140 [ 2782.883519][T26754] ? __d_path+0x160/0x160 [ 2782.887904][T26754] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2782.894175][T26754] process_measurement+0xb6a/0x17e0 [ 2782.899400][T26754] ? mmap_violation_check+0x1e0/0x1e0 23:02:09 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x105400) 23:02:09 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/121) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/152) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x20, 0x1c7242) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0x105, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000001700)={{0x3, 0x3, 0x0, 0x7ff, 0x28, 0x3}, 0x282, [0x40, 0x1, 0x1f, 0x400, 0x7, 0x8, 0x0, 0x1b007564, 0x80000001, 0xff, 0x6, 0x1, 0x2, 0x4, 0x80000000, 0x7, 0xa542, 0x8d1, 0x2, 0x1, 0x0, 0x1ff, 0x40, 0x2, 0x7, 0x7fffffff, 0x1, 0x1, 0x8931, 0x1, 0x20, 0x7, 0x80000000, 0x2, 0x4, 0x1, 0x8, 0x6, 0xd7c, 0x4, 0x8, 0x3, 0xfffffff7, 0x10000, 0x7fff, 0xffffff7f, 0xfff, 0x5, 0x5, 0x7, 0x7, 0x3, 0x6, 0x3, 0x7fffffff, 0xff, 0xd3d4, 0x800, 0x3, 0x0, 0x3, 0x3f, 0x7f, 0x10000, 0x3ff, 0x4db, 0x6e47, 0x80000001, 0x101, 0xfff, 0x0, 0x20, 0xa286, 0xfdeb, 0x7ff, 0x6, 0x5, 0x6, 0x4, 0x80, 0x8, 0x2, 0x8, 0x1, 0x9, 0x10001, 0x1, 0x2, 0x6, 0x8001, 0x9, 0x10001, 0x9, 0x3, 0x800, 0x7f, 0x8, 0x6, 0x249a, 0x7, 0x2, 0x2, 0xf7, 0x3, 0x1, 0xba38, 0x55, 0x8, 0xb00000, 0xbc9, 0x4000, 0x9, 0xebe3, 0x3f, 0x5, 0x9, 0x1000, 0x3ff, 0x4, 0x92, 0xe64d, 0x7ff, 0x9fd, 0x2, 0x1, 0x9, 0x5, 0x6, 0x400, 0x7fff, 0x3, 0x6, 0x7fff, 0x6, 0x80000001, 0x1, 0x3e, 0x6588b948, 0x2fb, 0x0, 0x800, 0x0, 0x3, 0x1ff, 0x0, 0x6, 0x9, 0x80000001, 0xfffffff7, 0x3, 0x0, 0x9, 0x80000, 0x10000, 0x2, 0xae4, 0x8, 0x40, 0xfff, 0x5, 0x0, 0xff, 0x7, 0x4, 0x6, 0xfffffc00, 0x5b7b, 0x2, 0x45e2, 0x205, 0x8000, 0x7fff, 0x9, 0x4, 0x3, 0x8, 0x1f, 0x2, 0x439a04da, 0x0, 0x1, 0x6252, 0x3, 0x8dad, 0x8, 0x1, 0x200, 0x10000, 0xb8f, 0xf0e6, 0x7, 0x1ff, 0x5, 0x0, 0x0, 0x7, 0x5, 0x8000, 0x8000, 0x9, 0x0, 0x800, 0xfffff4cd, 0xff, 0x1, 0x14, 0x8, 0xc5b, 0x4, 0x7, 0x8df9, 0x80000001, 0x6, 0x3, 0x8, 0x6, 0x5, 0x9, 0x0, 0xff, 0x9, 0x32, 0x6, 0x7, 0xffffff00, 0x5, 0xfffffff8, 0x9f, 0x4eac, 0x400, 0x63d7, 0x0, 0x101, 0x8, 0x7fffffff, 0x4, 0x10000, 0x2, 0x7ff, 0x9, 0x1, 0x800, 0x38, 0x6c2, 0x20, 0x1, 0xdc, 0x5, 0xffff, 0xab, 0x80000000, 0x5, 0xd85, 0x7fffffff, 0x1, 0x612, 0x8000, 0x0, 0x3ff, 0x8, 0x8, 0x0, 0xb5, 0x20, 0x5, 0xf0000000, 0x81, 0x7ff, 0x44, 0x0, 0x7fff, 0x8, 0xfa2, 0x0, 0x3, 0x4, 0x95d, 0xfffffff8, 0x8, 0x5a4e, 0xfff, 0xed, 0xab88, 0x80000001, 0x5, 0x7, 0x4, 0x4, 0xffffaa8b, 0x6, 0x66, 0x10001, 0x3, 0x0, 0x9, 0x2, 0x8, 0x1, 0x0, 0x9, 0x902, 0x9300000, 0xb2e, 0xbc1, 0x7, 0x3, 0xfffffffc, 0x5, 0x101, 0x42, 0x7, 0xff, 0x1, 0x8, 0x0, 0x1000, 0x5, 0x7, 0xfffffff9, 0xffffffff, 0x9, 0x5, 0x8000, 0xf58, 0xb1, 0xffffffff, 0x7, 0x9, 0x1, 0x4, 0xfffffff8, 0x1, 0x1, 0x0, 0x8, 0xfffffc01, 0x26, 0x7fff, 0x3, 0x3, 0x6, 0xffff, 0x2, 0x2d14, 0x80000001, 0x9, 0x0, 0x7, 0x9, 0x7, 0x3, 0x101, 0x8, 0x9, 0x9, 0x2, 0x5, 0x80000001, 0x5, 0x7ff, 0xc75, 0x1, 0x3, 0x3, 0xfffffffe, 0x1, 0xffff, 0x0, 0x80000000, 0x6, 0x60, 0x8000, 0x3, 0x6, 0x9, 0x6, 0xb3, 0x6, 0x8, 0x3, 0x10001, 0x4, 0x40, 0x445, 0x10000, 0x4, 0x80, 0x1, 0x0, 0x2daa04c4, 0x0, 0xffff, 0x8, 0x9, 0x6, 0xcc, 0x6, 0x2, 0x6d79, 0x10000, 0xcb5, 0x7, 0xffffffff, 0x401, 0xebb, 0x0, 0x0, 0x20, 0xfffffffa, 0xfffff800, 0x3ff, 0x1000, 0x5, 0x1f, 0x6, 0x8, 0x200, 0xffff, 0x7, 0x3, 0x80000001, 0x2, 0x9, 0x1000, 0x20000000, 0x686a, 0x200, 0x5, 0x2, 0x7ac, 0x8001, 0x9, 0x1, 0x3, 0x20, 0x3, 0x7, 0x1, 0x8, 0x1, 0x8, 0x6, 0x18d, 0x8, 0x3f, 0x2, 0x7, 0x97, 0x7fffffff, 0x9, 0xac, 0x1, 0x2, 0x81, 0x8001, 0x9, 0x8, 0x5f53, 0x49, 0xfffff931, 0xf792, 0x101, 0x9c, 0xf86a, 0x8, 0x1, 0x80000001, 0x2, 0x101, 0x80000000, 0x6, 0x6, 0x4, 0x100, 0x1f, 0x2, 0x47, 0x1, 0x8000, 0x1, 0x7, 0x7ff, 0x5, 0xeafd, 0x0, 0x6, 0x1000, 0x8, 0x5, 0x9, 0x800, 0x7, 0x9, 0xbbd, 0x6547, 0x8, 0xbccf, 0x1000, 0x3f, 0xff, 0x0, 0x0, 0x8, 0x4, 0x6, 0x3, 0x200, 0x0, 0x7f, 0x7, 0x81, 0xffff7fff, 0x0, 0x7, 0x7ff, 0x9, 0x80000000, 0x400, 0x24507328, 0x2, 0x6, 0x3, 0x0, 0x8, 0x20, 0xf3b, 0x6, 0xff, 0x0, 0x8000, 0x1, 0x8, 0xd8, 0x0, 0x0, 0x3, 0x6, 0x0, 0x80000001, 0x6, 0x5, 0x7f, 0x7fff, 0x1, 0x1, 0x2, 0x7fffffff, 0x200, 0x7f, 0x7f, 0x22, 0x8001, 0x10001, 0xfffff5a0, 0x7, 0x8, 0x1, 0x20, 0x2, 0x8, 0x0, 0x81000000, 0x3, 0x0, 0x7fff, 0x81, 0x7, 0x3ff, 0x400, 0x7f, 0x7, 0x7f, 0x101, 0x7fffffff, 0x5, 0x4, 0xcc9, 0x9, 0x5, 0x1000, 0x400, 0x2, 0x5, 0x57bf, 0x612, 0x3, 0xffff, 0x20, 0x1, 0x10000, 0x9, 0x7ff, 0x6, 0x80000001, 0x401, 0x4, 0x8, 0x54404855, 0xff, 0xfffff000, 0xe02, 0xffffff9a, 0xffffff69, 0x0, 0xfff, 0x1, 0x7fff, 0x74d, 0x5, 0x2, 0x719, 0x8, 0xff, 0x9, 0x0, 0xe33, 0x2, 0x4, 0xff, 0x1, 0x0, 0xfff, 0x3f, 0x40000000, 0xff, 0x9, 0x95ca, 0x9, 0x8001, 0x8, 0x81, 0x8, 0x7fffffff, 0x401, 0x73c0, 0x7, 0x7ac2, 0x8e8e, 0x400, 0x1, 0x7, 0x1000, 0x80, 0x55ce, 0x0, 0x0, 0x2, 0x0, 0x5, 0x8000, 0x6, 0x1000, 0x2, 0x6, 0x1, 0x8, 0x7, 0xa4, 0x4c, 0x80, 0x8000, 0x100, 0x100, 0x9, 0x3, 0x1b45, 0x3ff, 0x0, 0x2, 0x6, 0x4, 0x3, 0x1, 0x2, 0xfa5, 0x3, 0x7fffffff, 0x10001, 0xff, 0x3, 0x8000, 0x8, 0x1, 0x1ff, 0x8, 0x2, 0x2, 0xff, 0x4f5, 0x4, 0x0, 0x5, 0x9, 0x3ff, 0x1, 0x6d00000, 0x7ff, 0x79, 0xfffffff8, 0x6, 0x401, 0x1f, 0x3f, 0x2fe, 0x10001, 0x6, 0x4, 0x7, 0xd834, 0x7, 0x29a1, 0x547e, 0x0, 0x5, 0x401, 0x3, 0x20, 0x33, 0x6, 0x80, 0x1, 0x6, 0x4, 0x6, 0x1, 0x3, 0x8000, 0x0, 0x0, 0x80, 0x0, 0x4, 0x1, 0x8, 0x7, 0x9, 0x9, 0x24c, 0x8001, 0xc5, 0x8, 0xdb6, 0x401, 0x10000, 0xffff009d, 0x6, 0xc0000000, 0x800, 0x8, 0xce, 0x4, 0x1, 0x6, 0x3, 0x9, 0xfff, 0x8, 0x8, 0x6, 0x1, 0x7, 0xa3, 0x3, 0x80000001, 0x8, 0xfbe3, 0x10001, 0x5, 0xffffffc0, 0x2, 0x3, 0x2, 0x1, 0x2, 0x8, 0x5, 0x4, 0x101, 0x7, 0x5, 0x401, 0x7, 0x9, 0x68be, 0x2, 0x800, 0x8, 0xffff0000, 0x7f, 0x8, 0x4, 0x8, 0x159, 0x2, 0x80000000, 0x8, 0x4, 0x3, 0x1, 0x81, 0x7fffffff, 0xffffff81, 0x5, 0x3, 0x0, 0xffff, 0x9d, 0x401, 0x7, 0x6, 0x80000001, 0x1ff, 0x3, 0x7fff, 0x81, 0x101, 0x7fffffff, 0x8, 0x5, 0x5, 0x200000, 0x8, 0xba, 0xdd, 0x9, 0x10000, 0x1, 0x7, 0x40, 0x10001, 0x6, 0x8, 0x5, 0x4, 0x401, 0x10000, 0x8001, 0x3f, 0xfff, 0xffffffff, 0x2, 0xfffffffa, 0x5, 0x0, 0x2, 0x57b, 0x3, 0x9, 0x4, 0xff, 0x1, 0x87, 0x5, 0x7, 0x1, 0x7fffffff, 0x4, 0xfffffffd, 0x7fff, 0x5, 0x80, 0x5707c891, 0x3ff, 0x2, 0xd3be, 0x9, 0x5, 0xd5d7, 0x200, 0x48000000, 0x1, 0x6, 0x8, 0x3, 0x7, 0x7, 0x6, 0x80000001, 0x5, 0x4, 0x100, 0x2, 0x1, 0x3, 0x5, 0x6, 0x80000000, 0x7, 0x9, 0x9, 0x7fff, 0x0, 0x10001, 0x1, 0x4, 0x1, 0x7f, 0x2, 0x54dd, 0x100, 0x4, 0x7, 0x7f, 0x44, 0x8f49, 0x6, 0x401, 0x3, 0xecc9, 0x1, 0x1, 0x9, 0x7, 0x3f, 0x200, 0x80000000, 0x4, 0x3, 0x7, 0x1, 0x6, 0x83, 0xffff, 0x7fff, 0x8, 0xfbfffffa, 0x1, 0x81, 0x59, 0x7f, 0x90, 0x7fff, 0x7, 0x2, 0x7, 0xb, 0x1ccd, 0x4, 0x1ff, 0x0, 0x6ca, 0x20, 0x1, 0x9, 0x80000001, 0x3, 0x3f800, 0x5, 0x3000, 0x7ff, 0xf1, 0x83, 0x3, 0x2, 0x4, 0x2, 0x9, 0x6, 0x4, 0x3, 0x200, 0xfffffffb, 0xba5, 0x5, 0x7f, 0x20, 0x8, 0x8, 0x6, 0xf73, 0x1, 0x0, 0x7aee, 0x6, 0x3f, 0x7, 0x2, 0xfffff000, 0x5cdf, 0x1, 0x7fffffff, 0x10001, 0x5, 0x200, 0x5, 0xdd, 0x8, 0x1ff, 0x0, 0x7, 0xac10, 0x4, 0x6, 0x9, 0x7, 0xfffffffb, 0xfffffffa, 0x2, 0x1, 0x81, 0x3ff, 0x5, 0x1000, 0x83, 0x6, 0x0, 0x401, 0x4bc1, 0x8, 0x0, 0x9, 0x8001, 0x8, 0x7fff, 0x5, 0xfffffffe, 0x663566be, 0x8, 0x8, 0x8, 0x4730f104, 0x8, 0xb98, 0x1c000]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x195105) [ 2782.904806][T26754] ? tomoyo_path_number_perm+0x590/0x590 [ 2782.910474][T26754] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2782.916493][T26754] ? find_held_lock+0x2d/0x110 [ 2782.921289][T26754] ? aa_get_task_label+0x25f/0x540 [ 2782.926435][T26754] ? lock_downgrade+0x6e0/0x6e0 [ 2782.931325][T26754] ? fsnotify+0x1070/0x1070 [ 2782.935988][T26754] ? ext4_file_write_iter+0x1980/0x1980 [ 2782.941561][T26754] ? path_get+0x5d/0x80 [ 2782.945748][T26754] ? aa_get_task_label+0x288/0x540 [ 2782.951100][T26754] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2782.957376][T26754] ? apparmor_task_getsecid+0xc2/0x110 [ 2782.962993][T26754] ima_file_check+0xb9/0x100 [ 2782.967610][T26754] ? process_measurement+0x17e0/0x17e0 [ 2782.973125][T26754] ? may_open+0x1f6/0x420 [ 2782.977483][T26754] path_openat+0x15b5/0x27e0 [ 2782.982099][T26754] ? path_lookupat+0x850/0x850 [ 2782.986890][T26754] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2782.992901][T26754] do_filp_open+0x190/0x3d0 [ 2782.997442][T26754] ? may_open_dev+0xf0/0xf0 [ 2783.001972][T26754] ? do_raw_spin_lock+0x120/0x2b0 23:02:09 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2783.007025][T26754] ? rwlock_bug.part.0+0x90/0x90 [ 2783.011992][T26754] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2783.018266][T26754] ? _find_next_bit+0x1e3/0x260 [ 2783.023142][T26754] ? _raw_spin_unlock+0x1a/0x30 [ 2783.028017][T26754] ? alloc_fd+0x2e6/0x660 [ 2783.032376][T26754] do_sys_openat2+0x16d/0x420 [ 2783.037093][T26754] ? build_open_flags+0x6f0/0x6f0 [ 2783.042154][T26754] ? __context_tracking_exit+0x9f/0xb0 [ 2783.047646][T26754] ? lock_downgrade+0x6e0/0x6e0 [ 2783.052535][T26754] __x64_sys_openat+0x13f/0x1f0 23:02:09 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2783.057423][T26754] ? __ia32_sys_open+0x1c0/0x1c0 [ 2783.062390][T26754] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2783.068421][T26754] ? syscall_enter_from_user_mode+0x27/0x70 [ 2783.074436][T26754] do_syscall_64+0x3a/0xb0 [ 2783.078880][T26754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2783.084809][T26754] RIP: 0033:0x4196c4 [ 2783.088722][T26754] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2783.108355][T26754] RSP: 002b:00007f7086064cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2783.116892][T26754] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2783.124892][T26754] RDX: 0000000000000006 RSI: 00007f7086064d60 RDI: 00000000ffffff9c [ 2783.132913][T26754] RBP: 00007f7086064d60 R08: 0000000000000000 R09: 0000000000000000 [ 2783.141014][T26754] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2783.149006][T26754] R13: 00007ffc69ffb2ff R14: 00007f7086065300 R15: 0000000000022000 [ 2783.487889][T20128] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 2783.848353][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2783.859419][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2783.869237][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2784.048446][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2784.057719][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.066007][T20128] usb 2-1: Product: syz [ 2784.070253][T20128] usb 2-1: Manufacturer: syz [ 2784.074872][T20128] usb 2-1: SerialNumber: syz [ 2784.099302][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:11 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3}}}}}}]}}, 0x0) 23:02:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x105400) 23:02:11 executing program 5 (fault-call:1 fault-nth:9): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:11 executing program 4: syz_open_dev$evdev(&(0x7f00000006c0), 0x3, 0x109000) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x8300) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/140) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:11 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000001, 0x200000) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x4, 0x29, 0x36, 0x80, 0x5, 0x5fa9}) [ 2784.358042][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2784.366470][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2784.373904][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2784.483230][T20128] usb 2-1: USB disconnect, device number 57 [ 2784.495045][T26792] FAULT_INJECTION: forcing a failure. [ 2784.495045][T26792] name failslab, interval 1, probability 0, space 0, times 0 [ 2784.507848][T26792] CPU: 0 PID: 26792 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2784.516727][T26792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.526810][T26792] Call Trace: [ 2784.530115][T26792] dump_stack+0x143/0x1db [ 2784.534479][T26792] should_fail.cold+0x5/0xa [ 2784.539020][T26792] ? ima_write_template_field_data+0x47/0x1c0 [ 2784.545158][T26792] should_failslab+0x5/0x10 [ 2784.549691][T26792] __kmalloc+0x72/0x310 [ 2784.553885][T26792] ? ima_alloc_init_template+0x199/0x750 [ 2784.559552][T26792] ima_write_template_field_data+0x47/0x1c0 [ 2784.565489][T26792] ima_eventdigest_init_common+0xed/0x250 [ 2784.571256][T26792] ? ima_write_template_field_data+0x1c0/0x1c0 [ 2784.577485][T26792] ? lock_acquire+0x19d/0x700 [ 2784.582199][T26792] ? fs_reclaim_acquire+0xb2/0x160 [ 2784.587343][T26792] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2784.592920][T26792] ima_alloc_init_template+0x39e/0x750 [ 2784.598413][T26792] ima_add_violation+0x115/0x3b0 [ 2784.603395][T26792] ? ima_store_template+0x140/0x140 [ 2784.608714][T26792] ? __d_path+0x160/0x160 [ 2784.613085][T26792] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2784.619363][T26792] process_measurement+0xb6a/0x17e0 [ 2784.624592][T26792] ? mmap_violation_check+0x1e0/0x1e0 [ 2784.629997][T26792] ? tomoyo_path_number_perm+0x590/0x590 [ 2784.635662][T26792] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2784.641778][T26792] ? find_held_lock+0x2d/0x110 [ 2784.646577][T26792] ? aa_get_task_label+0x25f/0x540 [ 2784.651789][T26792] ? lock_downgrade+0x6e0/0x6e0 [ 2784.656672][T26792] ? fsnotify+0x1070/0x1070 [ 2784.661298][T26792] ? ext4_file_write_iter+0x1980/0x1980 [ 2784.666878][T26792] ? path_get+0x5d/0x80 [ 2784.671069][T26792] ? aa_get_task_label+0x288/0x540 [ 2784.676294][T26792] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 23:02:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x105400) 23:02:11 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x23c041) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x115b80) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xe6c, 0x2000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/54) 23:02:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x5) 23:02:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x105400) [ 2784.682569][T26792] ? apparmor_task_getsecid+0xc2/0x110 [ 2784.688062][T26792] ima_file_check+0xb9/0x100 [ 2784.692685][T26792] ? process_measurement+0x17e0/0x17e0 [ 2784.698429][T26792] ? may_open+0x1f6/0x420 [ 2784.702790][T26792] path_openat+0x15b5/0x27e0 [ 2784.707411][T26792] ? path_lookupat+0x850/0x850 [ 2784.712218][T26792] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2784.718243][T26792] do_filp_open+0x190/0x3d0 [ 2784.722773][T26792] ? may_open_dev+0xf0/0xf0 [ 2784.727418][T26792] ? do_raw_spin_lock+0x120/0x2b0 23:02:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x105400) [ 2784.732512][T26792] ? rwlock_bug.part.0+0x90/0x90 [ 2784.737485][T26792] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2784.743759][T26792] ? _find_next_bit+0x1e3/0x260 [ 2784.748641][T26792] ? _raw_spin_unlock+0x1a/0x30 [ 2784.753524][T26792] ? alloc_fd+0x2e6/0x660 [ 2784.757882][T26792] do_sys_openat2+0x16d/0x420 [ 2784.762590][T26792] ? build_open_flags+0x6f0/0x6f0 [ 2784.767642][T26792] ? __context_tracking_exit+0x9f/0xb0 [ 2784.773141][T26792] ? lock_downgrade+0x6e0/0x6e0 [ 2784.778027][T26792] __x64_sys_openat+0x13f/0x1f0 [ 2784.782907][T26792] ? __ia32_sys_open+0x1c0/0x1c0 [ 2784.787875][T26792] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2784.793976][T26792] ? syscall_enter_from_user_mode+0x27/0x70 [ 2784.799986][T26792] do_syscall_64+0x3a/0xb0 [ 2784.804429][T26792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2784.810343][T26792] RIP: 0033:0x4196c4 [ 2784.814254][T26792] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2784.833889][T26792] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2784.842646][T26792] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2784.850629][T26792] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2784.858625][T26792] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2784.866623][T26792] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2784.874627][T26792] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2784.908804][ T33] kauditd_printk_skb: 42 callbacks suppressed [ 2784.908821][ T33] audit: type=1804 audit(1623020531.596:509): pid=26816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343934382F48C7C060 dev="sda1" ino=15776 res=1 errno=0 [ 2784.964790][ T33] audit: type=1804 audit(1623020531.606:510): pid=26792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343935372F48C7C060 dev="sda1" ino=15788 res=0 errno=0 [ 2785.257808][T20128] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 2785.618232][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2785.629434][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2785.639637][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2785.808297][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2785.817772][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2785.825756][T20128] usb 2-1: Product: syz [ 2785.830235][T20128] usb 2-1: Manufacturer: syz [ 2785.834870][T20128] usb 2-1: SerialNumber: syz [ 2785.859188][T26795] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:12 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x4}}}}}}]}}, 0x0) 23:02:12 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:12 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xa, 0x105400) 23:02:12 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x20) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x8cc, 0x490640) syz_open_dev$evdev(0xfffffffffffffffc, 0xdfa6, 0x400006) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/75) 23:02:12 executing program 4: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000140)=""/79) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x3, 0xfe, &(0x7f0000000000)="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"}) 23:02:12 executing program 5 (fault-call:1 fault-nth:10): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2786.117865][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2786.156263][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2786.163247][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:12 executing program 0: syz_usb_connect$cdc_ncm(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xa7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x1, 0x0, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '|'}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xd347, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0xcde, 0xc7, 0x3f, 0x7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7f, 0x1, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1f, 0x81, 0xad}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x81, 0x8, 0xff, 0x20, 0x41}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe1, 0x3, 0x4}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x457}}, {0x10, &(0x7f0000000180)=@string={0x10, 0x3, "87acc2a0b3239ec07060d868b469"}}, {0xf9, &(0x7f00000001c0)=@string={0xf9, 0x3, "1cbca808513c150c6572d9aff6b845a7bf271277a5334aff5e1c3a8b1283b1f8b3bc4ba7f48fa11a0a1ec965547cb83b0b4fef2b631f07564cdbc7eb15d03a2ce6fb85e4078b665264375d1af276a129d8d3ea47aa1e7720a924e08aa37f5e6bd36433364846d8fec0d8560beac926b3b2c08bde3cc1ddf8da56455104a3c8b264497e1b31b8b9d7864cbb094914a8523e17e497b58a106621a7646612f3a37f0229d9b0f6a4d482ebe73aff6018178b8bedb184220806d1ff93ece560e7f0ab39b50a28fc1fe23c62df94e6faad6c919c58323591b6233b97c92d10628f7207c13888615afc8a0df1616dba3fc05e1d820e40715a616a"}}, {0x34, &(0x7f00000002c0)=@string={0x34, 0x3, "8f703fc7cb42be503d2c1f12fb044f7288d450dfe3ccc4bef894e75a801b38a2d6eec866490418c50e3335d10df05b86ef1f"}}, {0x57, &(0x7f0000000300)=@string={0x57, 0x3, "cf35a3a44d750d341fd4c4df7b8595bb917466e9050ada2100d91bf98b962be7b802cf9781dff11d162742b48667e24f0746f8313661626e0feeb6243819ce6590b16cdaebaef5cfae56c1ba6fb946e3c2ae9c3687"}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_usb_connect(0x2, 0x269, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0xff, 0x9d, 0x5f, 0xff, 0xf7a7, 0x3124, 0x667e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x257, 0x1, 0x8, 0x5, 0xa0, 0x81, [{{0x9, 0x4, 0x73, 0x81, 0xb, 0x3, 0xa2, 0x26, 0x9, [], [{{0x9, 0x5, 0xd, 0x13, 0x240, 0x6, 0x62, 0xff, [@generic={0xf4, 0x10, "87a7a309bfbbe44c6809414ad0a22713a34f6456a4ace1100cf47815555af46268637991f6de64bf2b2199bec2ae639ba680867f2fa8337b02d53e51b9748a7938cebb15473f3338f417dbfcf4b8a114cf6de974ae7959f43a91f790539bed80929fafd7f56476591f5287e50a785b232b0efcc5bea87147e1b6f283634dadada17b5f668c579483b45a41a726f18133c4b45ceee95dd7ca4950821771a15482469f70d3a444a27f385475ba910381cf1620a010166efff2875263af231f9a5bb234addcb3ead46eb35ad3df67e730b54820d88da4eeb150da3a2d07c62c07a4965c9dc56568fdfc76bf0b6a9187f0ba0bc7"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0xe, 0xec}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xed, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x4, 0x1, 0x7}}, {{0x9, 0x5, 0x5, 0xa, 0x8, 0x2, 0x40, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x37, 0x4, 0x27}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x20, 0x2, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x5, 0x3a, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdd, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x40, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}, {{0x9, 0x5, 0x80, 0x7, 0x40, 0x8, 0xdb, 0xff}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xa4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6}, @generic={0xa8, 0x1, "292d9fafba0ada7e675f44e2e943ceef1763f4a573f74a9c0b84dde68d954f01c841126481413d371f699358ed9851d620b3c7239d9d7059c8dbfaf8444b20a9f58e63db3460f99125293ae71b6941f2d21b92cfe72b09bc6346e90b47783494855925dbd7e29f4d3033e870fe14e550d04170c5fd52d9931afeff7fb71d26320a4d1b5669ef7139804b37c8452ab84e719176b7d2f7d2d64b8cc18c2e613d819f8de9a995b9"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x40, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x9}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x311, 0x2, 0x7, 0x3f, 0xff}, 0x49, &(0x7f00000006c0)={0x5, 0xf, 0x49, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x3, 0xf00f, 0x8001}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x46}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x9, 0x9, 0x7f, 0x8d}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x36, 0x1, 0xc8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c8f5cd65f35b54a8eb03e7308bd949a9"}]}, 0x1, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc1a}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2786.184703][ T33] audit: type=1804 audit(1623020532.866:511): pid=26834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343934392F48C7C060 dev="sda1" ino=15806 res=1 errno=0 [ 2786.259378][T20128] usb 2-1: USB disconnect, device number 58 [ 2786.262041][T26837] FAULT_INJECTION: forcing a failure. [ 2786.262041][T26837] name failslab, interval 1, probability 0, space 0, times 0 [ 2786.278186][T26837] CPU: 0 PID: 26837 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2786.287007][T26837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.297090][T26837] Call Trace: [ 2786.300426][T26837] dump_stack+0x143/0x1db [ 2786.304875][T26837] should_fail.cold+0x5/0xa [ 2786.306017][ T33] audit: type=1800 audit(1623020532.906:512): pid=26833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15814 res=0 errno=0 [ 2786.309402][T26837] ? ima_write_template_field_data+0xeb/0x1c0 [ 2786.309438][T26837] should_failslab+0x5/0x10 [ 2786.309464][T26837] __kmalloc+0x72/0x310 [ 2786.345337][T26837] ima_write_template_field_data+0xeb/0x1c0 [ 2786.351236][T26837] ima_alloc_init_template+0x39e/0x750 [ 2786.356850][T26837] ima_add_violation+0x115/0x3b0 [ 2786.361802][T26837] ? ima_store_template+0x140/0x140 [ 2786.367006][T26837] ? __d_path+0x160/0x160 [ 2786.371337][T26837] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2786.377576][T26837] process_measurement+0xb6a/0x17e0 [ 2786.382776][T26837] ? mmap_violation_check+0x1e0/0x1e0 [ 2786.388156][T26837] ? tomoyo_path_number_perm+0x590/0x590 [ 2786.393786][T26837] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2786.399764][T26837] ? find_held_lock+0x2d/0x110 [ 2786.404523][T26837] ? aa_get_task_label+0x25f/0x540 [ 2786.409627][T26837] ? lock_downgrade+0x6e0/0x6e0 [ 2786.414472][T26837] ? fsnotify+0x1070/0x1070 [ 2786.418973][T26837] ? ext4_file_write_iter+0x1980/0x1980 [ 2786.424514][T26837] ? path_get+0x5d/0x80 [ 2786.428663][T26837] ? aa_get_task_label+0x288/0x540 [ 2786.433820][T26837] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2786.440056][T26837] ? apparmor_task_getsecid+0xc2/0x110 [ 2786.445560][T26837] ima_file_check+0xb9/0x100 [ 2786.450147][T26837] ? process_measurement+0x17e0/0x17e0 [ 2786.455635][T26837] ? may_open+0x1f6/0x420 [ 2786.459960][T26837] path_openat+0x15b5/0x27e0 [ 2786.464557][T26837] ? path_lookupat+0x850/0x850 [ 2786.469317][T26837] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2786.475294][T26837] do_filp_open+0x190/0x3d0 [ 2786.479789][T26837] ? may_open_dev+0xf0/0xf0 [ 2786.484288][T26837] ? do_raw_spin_lock+0x120/0x2b0 [ 2786.489306][T26837] ? rwlock_bug.part.0+0x90/0x90 [ 2786.494238][T26837] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2786.500485][T26837] ? _find_next_bit+0x1e3/0x260 [ 2786.505329][T26837] ? _raw_spin_unlock+0x1a/0x30 [ 2786.510173][T26837] ? alloc_fd+0x2e6/0x660 [ 2786.514493][T26837] do_sys_openat2+0x16d/0x420 [ 2786.519164][T26837] ? build_open_flags+0x6f0/0x6f0 [ 2786.524183][T26837] ? __context_tracking_exit+0x9f/0xb0 [ 2786.529658][T26837] ? lock_downgrade+0x6e0/0x6e0 [ 2786.534502][T26837] __x64_sys_openat+0x13f/0x1f0 [ 2786.539348][T26837] ? __ia32_sys_open+0x1c0/0x1c0 [ 2786.544365][T26837] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2786.550446][T26837] ? syscall_enter_from_user_mode+0x27/0x70 [ 2786.556339][T26837] do_syscall_64+0x3a/0xb0 [ 2786.560748][T26837] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2786.566635][T26837] RIP: 0033:0x4196c4 [ 2786.570518][T26837] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2786.590118][T26837] RSP: 002b:00007f7086064cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2786.598523][T26837] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 23:02:13 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x500000, 0xc000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:13 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x16, 0x105400) [ 2786.606486][T26837] RDX: 0000000000000006 RSI: 00007f7086064d60 RDI: 00000000ffffff9c [ 2786.614449][T26837] RBP: 00007f7086064d60 R08: 0000000000000000 R09: 0000000000000000 [ 2786.622452][T26837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2786.630415][T26837] R13: 00007ffc69ffb2ff R14: 00007f7086065300 R15: 0000000000022000 23:02:13 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2786.702146][ T33] audit: type=1804 audit(1623020532.906:513): pid=26835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343934392F48C7C060 dev="sda1" ino=15806 res=1 errno=0 23:02:13 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x105400) 23:02:13 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x121282) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0xad, 0x1f, 0x5, 0x0, 0x7, 0x5ec}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2786.787692][ T33] audit: type=1800 audit(1623020532.926:514): pid=26839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13841 res=0 errno=0 [ 2786.838270][ T33] audit: type=1800 audit(1623020532.936:515): pid=26839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13841 res=0 errno=0 [ 2786.896520][ T33] audit: type=1800 audit(1623020532.936:516): pid=26839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13841 res=0 errno=0 [ 2786.918920][ T33] audit: type=1804 audit(1623020532.936:517): pid=26836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353231372F48C7C060 dev="sda1" ino=15890 res=1 errno=0 [ 2786.950666][ T33] audit: type=1800 audit(1623020533.436:518): pid=26855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15800 res=0 errno=0 [ 2787.017732][T15081] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2787.037683][T20128] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 2787.307671][T15081] usb 1-1: device descriptor read/64, error 18 [ 2787.398182][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2787.409334][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2787.419558][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2787.587767][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2787.596975][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2787.605160][T20128] usb 2-1: Product: syz [ 2787.609406][T20128] usb 2-1: Manufacturer: syz [ 2787.614192][T20128] usb 2-1: SerialNumber: syz [ 2787.639190][T26848] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2787.737657][T15081] usb 1-1: device descriptor read/64, error 18 23:02:14 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5}}}}}}]}}, 0x0) 23:02:14 executing program 5 (fault-call:1 fault-nth:11): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:14 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:14 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x48, 0x105400) 23:02:14 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x181740) [ 2787.897830][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2787.926840][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2787.932003][T26877] FAULT_INJECTION: forcing a failure. [ 2787.932003][T26877] name failslab, interval 1, probability 0, space 0, times 0 [ 2787.933937][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2787.946293][T26877] CPU: 0 PID: 26877 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2787.960173][T26877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.970367][T26877] Call Trace: [ 2787.973665][T26877] dump_stack+0x143/0x1db [ 2787.978028][T26877] should_fail.cold+0x5/0xa [ 2787.982565][T26877] ? ima_add_digest_entry+0x4e/0x510 [ 2787.987876][T26877] should_failslab+0x5/0x10 [ 2787.992403][T26877] kmem_cache_alloc_trace+0x55/0x2a0 [ 2787.997715][T26877] ima_add_digest_entry+0x4e/0x510 [ 2787.998630][T20128] usb 2-1: USB disconnect, device number 59 [ 2788.002851][T26877] ima_add_template_entry+0x581/0x790 [ 2788.002885][T26877] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2788.002915][T26877] ? ima_get_binary_runtime_size+0x40/0x40 [ 2788.026238][T26877] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2788.031997][T26877] ? ima_alloc_init_template+0x532/0x750 [ 2788.037664][T26877] ima_add_violation+0x16c/0x3b0 [ 2788.042634][T26877] ? ima_store_template+0x140/0x140 [ 2788.047865][T26877] ? __d_path+0x160/0x160 [ 2788.052339][T26877] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2788.058619][T26877] process_measurement+0xb6a/0x17e0 [ 2788.063853][T26877] ? mmap_violation_check+0x1e0/0x1e0 [ 2788.069256][T26877] ? tomoyo_path_number_perm+0x590/0x590 [ 2788.075038][T26877] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2788.081065][T26877] ? find_held_lock+0x2d/0x110 [ 2788.085953][T26877] ? aa_get_task_label+0x25f/0x540 [ 2788.091107][T26877] ? lock_downgrade+0x6e0/0x6e0 [ 2788.095998][T26877] ? fsnotify+0x1070/0x1070 [ 2788.100587][T26877] ? ext4_file_write_iter+0x1980/0x1980 [ 2788.106166][T26877] ? path_get+0x5d/0x80 [ 2788.110355][T26877] ? aa_get_task_label+0x288/0x540 [ 2788.115604][T26877] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2788.121882][T26877] ? apparmor_task_getsecid+0xc2/0x110 [ 2788.127367][T26877] ima_file_check+0xb9/0x100 [ 2788.131987][T26877] ? process_measurement+0x17e0/0x17e0 [ 2788.137536][T26877] ? may_open+0x1f6/0x420 [ 2788.142018][T26877] path_openat+0x15b5/0x27e0 [ 2788.146756][T26877] ? path_lookupat+0x850/0x850 [ 2788.151869][T26877] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2788.158264][T26877] do_filp_open+0x190/0x3d0 [ 2788.162870][T26877] ? may_open_dev+0xf0/0xf0 [ 2788.167380][T26877] ? do_raw_spin_lock+0x120/0x2b0 [ 2788.172405][T26877] ? rwlock_bug.part.0+0x90/0x90 [ 2788.177819][T26877] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2788.184088][T26877] ? _find_next_bit+0x1e3/0x260 [ 2788.188944][T26877] ? _raw_spin_unlock+0x1a/0x30 [ 2788.193811][T26877] ? alloc_fd+0x2e6/0x660 [ 2788.198134][T26877] do_sys_openat2+0x16d/0x420 [ 2788.202813][T26877] ? build_open_flags+0x6f0/0x6f0 [ 2788.207977][T26877] ? __context_tracking_exit+0x9f/0xb0 [ 2788.213682][T26877] ? lock_downgrade+0x6e0/0x6e0 [ 2788.218556][T26877] __x64_sys_openat+0x13f/0x1f0 [ 2788.223427][T26877] ? __ia32_sys_open+0x1c0/0x1c0 [ 2788.228449][T26877] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2788.234456][T26877] ? syscall_enter_from_user_mode+0x27/0x70 [ 2788.240367][T26877] do_syscall_64+0x3a/0xb0 [ 2788.244805][T26877] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2788.250716][T26877] RIP: 0033:0x4196c4 [ 2788.254688][T26877] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2788.274314][T26877] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2788.282740][T26877] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2788.290712][T26877] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2788.298911][T26877] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2788.307019][T26877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2788.314997][T26877] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 23:02:15 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c, 0x105400) [ 2788.323402][T26877] ima: OUT OF MEMORY ERROR creating queue entry [ 2788.405942][T15081] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2788.457643][T20128] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2788.717614][T15081] usb 1-1: device descriptor read/64, error 18 [ 2788.818035][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2788.829363][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2788.839203][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2789.028077][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2789.037244][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2789.045693][T20128] usb 2-1: Product: syz [ 2789.050067][T20128] usb 2-1: Manufacturer: syz [ 2789.054673][T20128] usb 2-1: SerialNumber: syz [ 2789.078929][T26884] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2789.107580][T15081] usb 1-1: device descriptor read/64, error 18 [ 2789.227607][T15081] usb usb1-port1: attempt power cycle [ 2789.357765][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2789.373594][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2789.380532][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2789.395857][T20128] usb 2-1: USB disconnect, device number 60 [ 2789.637570][T15081] usb 1-1: new high-speed USB device number 111 using dummy_hcd 23:02:16 executing program 0: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000000c0)=""/187) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:16 executing program 5 (fault-call:1 fault-nth:12): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2d8c80) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x81, 0x3f, 0x20, 0x6, 0x3ff, 0x1000}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x269c, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x68, 0x105400) 23:02:16 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6}}}}}}]}}, 0x0) [ 2789.768257][T15081] usb 1-1: device descriptor read/8, error -71 [ 2789.826078][T26926] FAULT_INJECTION: forcing a failure. [ 2789.826078][T26926] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.838837][T26926] CPU: 1 PID: 26926 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2789.847630][T26926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2789.857800][T26926] Call Trace: [ 2789.861110][T26926] dump_stack+0x143/0x1db [ 2789.865470][T26926] should_fail.cold+0x5/0xa [ 2789.870007][T26926] ? audit_log_start.part.0+0x27d/0x760 [ 2789.875590][T26926] should_failslab+0x5/0x10 [ 2789.880128][T26926] kmem_cache_alloc+0x5b/0x360 [ 2789.884936][T26926] audit_log_start.part.0+0x27d/0x760 [ 2789.890358][T26926] ? audit_log_task_context+0x160/0x160 [ 2789.895943][T26926] ? audit_filter+0x319/0xb90 [ 2789.900653][T26926] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2789.906942][T26926] ? integrity_audit_message+0x36b/0x430 [ 2789.912610][T26926] ? integrity_kernel_read+0xb0/0xb0 [ 2789.917928][T26926] ? audit_compare_dname_path+0x120/0x120 [ 2789.923682][T26926] audit_log_start+0x5f/0x90 [ 2789.928400][T26926] integrity_audit_message+0x100/0x430 [ 2789.933931][T26926] ? integrity_kernel_read+0xb0/0xb0 [ 2789.939243][T26926] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2789.945525][T26926] ? ima_get_binary_runtime_size+0x40/0x40 [ 2789.951378][T26926] integrity_audit_msg+0x3d/0x50 [ 2789.956360][T26926] ima_add_violation+0x19f/0x3b0 [ 2789.961337][T26926] ? ima_store_template+0x140/0x140 [ 2789.966661][T26926] ? __d_path+0x160/0x160 [ 2789.971057][T26926] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2789.977336][T26926] process_measurement+0xb6a/0x17e0 [ 2789.982560][T26926] ? mmap_violation_check+0x1e0/0x1e0 [ 2789.987960][T26926] ? tomoyo_path_number_perm+0x590/0x590 [ 2789.993631][T26926] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2789.999645][T26926] ? find_held_lock+0x2d/0x110 [ 2790.004440][T26926] ? aa_get_task_label+0x25f/0x540 [ 2790.009581][T26926] ? lock_downgrade+0x6e0/0x6e0 [ 2790.014470][T26926] ? fsnotify+0x1070/0x1070 [ 2790.019113][T26926] ? ext4_file_write_iter+0x1980/0x1980 23:02:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:16 executing program 0: syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x2) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x206106) 23:02:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x181640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/78) 23:02:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c, 0x105400) [ 2790.024684][T26926] ? path_get+0x5d/0x80 [ 2790.029042][T26926] ? aa_get_task_label+0x288/0x540 [ 2790.034209][T26926] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2790.040606][T26926] ? apparmor_task_getsecid+0xc2/0x110 [ 2790.046106][T26926] ima_file_check+0xb9/0x100 [ 2790.050734][T26926] ? process_measurement+0x17e0/0x17e0 [ 2790.056254][T26926] ? may_open+0x1f6/0x420 [ 2790.060623][T26926] path_openat+0x15b5/0x27e0 [ 2790.065246][T26926] ? path_lookupat+0x850/0x850 [ 2790.070041][T26926] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2790.076056][T26926] do_filp_open+0x190/0x3d0 [ 2790.080582][T26926] ? may_open_dev+0xf0/0xf0 [ 2790.085113][T26926] ? do_raw_spin_lock+0x120/0x2b0 [ 2790.090182][T26926] ? rwlock_bug.part.0+0x90/0x90 [ 2790.095151][T26926] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2790.101426][T26926] ? _find_next_bit+0x1e3/0x260 [ 2790.106306][T26926] ? _raw_spin_unlock+0x1a/0x30 [ 2790.111190][T26926] ? alloc_fd+0x2e6/0x660 [ 2790.115551][T26926] do_sys_openat2+0x16d/0x420 [ 2790.120261][T26926] ? build_open_flags+0x6f0/0x6f0 23:02:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2790.125331][T26926] ? __context_tracking_exit+0x9f/0xb0 [ 2790.130830][T26926] ? lock_downgrade+0x6e0/0x6e0 [ 2790.135825][T26926] __x64_sys_openat+0x13f/0x1f0 [ 2790.140705][T26926] ? __ia32_sys_open+0x1c0/0x1c0 [ 2790.145845][T26926] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2790.151864][T26926] ? syscall_enter_from_user_mode+0x27/0x70 [ 2790.157794][T26926] do_syscall_64+0x3a/0xb0 [ 2790.162244][T26926] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2790.168184][T26926] RIP: 0033:0x4196c4 23:02:16 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x7e96c0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/11) [ 2790.172111][T26926] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2790.191882][T26926] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2790.200591][T26926] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2790.208590][T26926] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2790.216603][T26926] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2790.224596][T26926] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2790.232590][T26926] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2790.240891][T26926] audit_log_lost: 32 callbacks suppressed [ 2790.240909][T26926] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 2790.254542][T26926] audit: out of memory in audit_log_start [ 2790.263822][ T33] audit: type=1804 audit(1623020536.947:551): pid=26939 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343935352F48C7C060 dev="sda1" ino=15824 res=1 errno=0 23:02:17 executing program 5 (fault-call:1 fault-nth:13): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:17 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000, 0xc06) 23:02:17 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) 23:02:17 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x74, 0x105400) [ 2790.325323][ T33] audit: type=1800 audit(1623020536.967:552): pid=26942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15985 res=0 errno=0 [ 2790.397507][T15081] usb 1-1: device descriptor read/8, error -71 [ 2790.408388][T20128] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 2790.442090][ T33] audit: type=1800 audit(1623020536.977:553): pid=26942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15985 res=0 errno=0 [ 2790.481344][T26955] FAULT_INJECTION: forcing a failure. [ 2790.481344][T26955] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.494106][T26955] CPU: 0 PID: 26955 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2790.502990][T26955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2790.513106][T26955] Call Trace: [ 2790.516521][T26955] dump_stack+0x143/0x1db [ 2790.520881][T26955] should_fail.cold+0x5/0xa [ 2790.525421][T26955] ? __alloc_skb+0x20b/0x340 [ 2790.530073][T26955] should_failslab+0x5/0x10 [ 2790.534610][T26955] kmem_cache_alloc_node+0x55/0x390 [ 2790.539845][T26955] __alloc_skb+0x20b/0x340 [ 2790.544296][T26955] audit_log_start.part.0+0x2a2/0x760 [ 2790.544452][ T33] audit: type=1800 audit(1623020536.987:554): pid=26942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15985 res=0 errno=0 [ 2790.549906][T26955] ? audit_log_task_context+0x160/0x160 [ 2790.549938][T26955] ? audit_filter+0x319/0xb90 [ 2790.549958][T26955] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2790.549986][T26955] ? integrity_audit_message+0x36b/0x430 [ 2790.571610][ T33] audit: type=1800 audit(1623020536.987:555): pid=26942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15985 res=0 errno=0 [ 2790.576904][T26955] ? integrity_kernel_read+0xb0/0xb0 [ 2790.576934][T26955] ? audit_compare_dname_path+0x120/0x120 [ 2790.582447][ T33] audit: type=1804 audit(1623020537.087:556): pid=26948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353232322F48C7C060 dev="sda1" ino=15819 res=1 errno=0 [ 2790.587834][T26955] audit_log_start+0x5f/0x90 [ 2790.587868][T26955] integrity_audit_message+0x100/0x430 [ 2790.587893][T26955] ? integrity_kernel_read+0xb0/0xb0 [ 2790.587915][T26955] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2790.594102][ T33] audit: type=1800 audit(1623020537.147:557): pid=26956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16123 res=0 errno=0 [ 2790.614806][T26955] ? ima_get_binary_runtime_size+0x40/0x40 [ 2790.614839][T26955] integrity_audit_msg+0x3d/0x50 [ 2790.614861][T26955] ima_add_violation+0x19f/0x3b0 [ 2790.614884][T26955] ? ima_store_template+0x140/0x140 [ 2790.614907][T26955] ? __d_path+0x160/0x160 [ 2790.614930][T26955] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2790.614957][T26955] process_measurement+0xb6a/0x17e0 [ 2790.633308][ T33] audit: type=1800 audit(1623020537.157:558): pid=26955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=16124 res=0 errno=0 [ 2790.655820][T26955] ? mmap_violation_check+0x1e0/0x1e0 [ 2790.655855][T26955] ? tomoyo_path_number_perm+0x590/0x590 [ 2790.655881][T26955] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2790.655911][T26955] ? find_held_lock+0x2d/0x110 [ 2790.655933][T26955] ? aa_get_task_label+0x25f/0x540 [ 2790.655956][T26955] ? lock_downgrade+0x6e0/0x6e0 [ 2790.655981][T26955] ? fsnotify+0x1070/0x1070 [ 2790.795194][T26955] ? ext4_file_write_iter+0x1980/0x1980 [ 2790.800755][T26955] ? path_get+0x5d/0x80 [ 2790.804938][T26955] ? aa_get_task_label+0x288/0x540 [ 2790.807507][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2790.810062][T26955] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2790.810097][T26955] ? apparmor_task_getsecid+0xc2/0x110 [ 2790.821702][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2790.827184][T26955] ima_file_check+0xb9/0x100 [ 2790.827215][T26955] ? process_measurement+0x17e0/0x17e0 [ 2790.827238][T26955] ? may_open+0x1f6/0x420 [ 2790.832789][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2790.842392][T26955] path_openat+0x15b5/0x27e0 [ 2790.842430][T26955] ? path_lookupat+0x850/0x850 [ 2790.842456][T26955] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2790.842486][T26955] do_filp_open+0x190/0x3d0 [ 2790.886651][T26955] ? may_open_dev+0xf0/0xf0 [ 2790.891177][T26955] ? do_raw_spin_lock+0x120/0x2b0 [ 2790.896232][T26955] ? rwlock_bug.part.0+0x90/0x90 [ 2790.901167][T26955] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2790.907409][T26955] ? _find_next_bit+0x1e3/0x260 [ 2790.912387][T26955] ? _raw_spin_unlock+0x1a/0x30 [ 2790.917231][T26955] ? alloc_fd+0x2e6/0x660 [ 2790.921582][T26955] do_sys_openat2+0x16d/0x420 [ 2790.926252][T26955] ? build_open_flags+0x6f0/0x6f0 [ 2790.931272][T26955] ? __context_tracking_exit+0x9f/0xb0 [ 2790.936776][T26955] ? lock_downgrade+0x6e0/0x6e0 [ 2790.941740][T26955] __x64_sys_openat+0x13f/0x1f0 [ 2790.946611][T26955] ? __ia32_sys_open+0x1c0/0x1c0 [ 2790.951551][T26955] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2790.957539][T26955] ? syscall_enter_from_user_mode+0x27/0x70 [ 2790.963432][T26955] do_syscall_64+0x3a/0xb0 [ 2790.967847][T26955] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2790.974002][T26955] RIP: 0033:0x4196c4 [ 2790.978033][T26955] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2790.997646][T26955] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2791.006587][T26955] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2791.008206][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2791.014557][T26955] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2791.014575][T26955] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2791.014592][T26955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2791.014608][T26955] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2791.023659][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2791.063897][T20128] usb 2-1: Product: syz [ 2791.068167][T20128] usb 2-1: Manufacturer: syz [ 2791.072950][T20128] usb 2-1: SerialNumber: syz [ 2791.098874][T26924] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:18 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7}}}}}}]}}, 0x0) 23:02:18 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x9c26, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/174) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000000c0)=""/194) 23:02:18 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a, 0x105400) 23:02:18 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/150) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/190) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:18 executing program 5 (fault-call:1 fault-nth:14): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2791.357757][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2791.374986][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2791.382086][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2791.456157][T20128] usb 2-1: USB disconnect, device number 61 [ 2791.487736][T26977] FAULT_INJECTION: forcing a failure. [ 2791.487736][T26977] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.500558][T26977] CPU: 1 PID: 26977 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2791.509440][T26977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.519518][T26977] Call Trace: [ 2791.522815][T26977] dump_stack+0x143/0x1db [ 2791.527232][T26977] should_fail.cold+0x5/0xa [ 2791.531733][T26977] should_failslab+0x5/0x10 [ 2791.536234][T26977] __kmalloc_node_track_caller+0x7d/0x330 [ 2791.541958][T26977] ? audit_log_start.part.0+0x2a2/0x760 [ 2791.547628][T26977] __alloc_skb+0xde/0x340 [ 2791.551957][T26977] audit_log_start.part.0+0x2a2/0x760 [ 2791.557323][T26977] ? audit_log_task_context+0x160/0x160 [ 2791.562869][T26977] ? audit_filter+0x319/0xb90 [ 2791.567541][T26977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2791.573779][T26977] ? integrity_audit_message+0x36b/0x430 [ 2791.579430][T26977] ? integrity_kernel_read+0xb0/0xb0 [ 2791.584706][T26977] ? audit_compare_dname_path+0x120/0x120 [ 2791.590422][T26977] audit_log_start+0x5f/0x90 [ 2791.595011][T26977] integrity_audit_message+0x100/0x430 [ 2791.600463][T26977] ? integrity_kernel_read+0xb0/0xb0 [ 2791.605778][T26977] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2791.612018][T26977] ? ima_get_binary_runtime_size+0x40/0x40 [ 2791.617818][T26977] integrity_audit_msg+0x3d/0x50 [ 2791.622749][T26977] ima_add_violation+0x19f/0x3b0 [ 2791.627683][T26977] ? ima_store_template+0x140/0x140 [ 2791.632875][T26977] ? __d_path+0x160/0x160 [ 2791.637229][T26977] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2791.643464][T26977] process_measurement+0xb6a/0x17e0 [ 2791.648656][T26977] ? mmap_violation_check+0x1e0/0x1e0 [ 2791.654019][T26977] ? tomoyo_path_number_perm+0x590/0x590 [ 2791.659649][T26977] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2791.665657][T26977] ? find_held_lock+0x2d/0x110 [ 2791.670513][T26977] ? aa_get_task_label+0x25f/0x540 [ 2791.675628][T26977] ? lock_downgrade+0x6e0/0x6e0 [ 2791.680479][T26977] ? fsnotify+0x1070/0x1070 [ 2791.684993][T26977] ? ext4_file_write_iter+0x1980/0x1980 [ 2791.690530][T26977] ? path_get+0x5d/0x80 [ 2791.694773][T26977] ? aa_get_task_label+0x288/0x540 [ 2791.699899][T26977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2791.706139][T26977] ? apparmor_task_getsecid+0xc2/0x110 [ 2791.711682][T26977] ima_file_check+0xb9/0x100 [ 2791.716266][T26977] ? process_measurement+0x17e0/0x17e0 [ 2791.721718][T26977] ? may_open+0x1f6/0x420 [ 2791.726044][T26977] path_openat+0x15b5/0x27e0 [ 2791.730630][T26977] ? path_lookupat+0x850/0x850 [ 2791.735422][T26977] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2791.741404][T26977] do_filp_open+0x190/0x3d0 [ 2791.745908][T26977] ? may_open_dev+0xf0/0xf0 [ 2791.750410][T26977] ? do_raw_spin_lock+0x120/0x2b0 [ 2791.755424][T26977] ? rwlock_bug.part.0+0x90/0x90 [ 2791.760355][T26977] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2791.766595][T26977] ? _find_next_bit+0x1e3/0x260 [ 2791.771636][T26977] ? _raw_spin_unlock+0x1a/0x30 [ 2791.776547][T26977] ? alloc_fd+0x2e6/0x660 [ 2791.780872][T26977] do_sys_openat2+0x16d/0x420 [ 2791.785542][T26977] ? build_open_flags+0x6f0/0x6f0 [ 2791.790559][T26977] ? __context_tracking_exit+0x9f/0xb0 [ 2791.796038][T26977] ? lock_downgrade+0x6e0/0x6e0 [ 2791.800889][T26977] __x64_sys_openat+0x13f/0x1f0 [ 2791.805732][T26977] ? __ia32_sys_open+0x1c0/0x1c0 [ 2791.810663][T26977] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2791.816744][T26977] ? syscall_enter_from_user_mode+0x27/0x70 [ 2791.822634][T26977] do_syscall_64+0x3a/0xb0 [ 2791.827045][T26977] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2791.832932][T26977] RIP: 0033:0x4196c4 [ 2791.836818][T26977] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 23:02:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x10002) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/238) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2791.856505][T26977] RSP: 002b:00007f7086064cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2791.864917][T26977] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2791.872900][T26977] RDX: 0000000000000006 RSI: 00007f7086064d60 RDI: 00000000ffffff9c [ 2791.880862][T26977] RBP: 00007f7086064d60 R08: 0000000000000000 R09: 0000000000000000 [ 2791.888825][T26977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2791.896801][T26977] R13: 00007ffc69ffb2ff R14: 00007f7086065300 R15: 0000000000022000 23:02:18 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x101640) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x12, 0x7, 0xea1f, "931aec3fc96048e1437c99bceff02dc3554abc74619256e7717cd48235fa28a8"}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001080)=0x7) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000040)={{0x2, 0x100, 0x96e, 0x0, 0x6, 0x1}, 0x3ae, [0x4, 0x4b27f450, 0x8, 0x7, 0x2, 0x8, 0x1, 0x6, 0x1, 0x9bb, 0x7ff, 0x2, 0x0, 0x7fff, 0x1, 0x8, 0x3ff, 0x3f, 0x8, 0x5, 0x4, 0x5, 0x0, 0x7fffffff, 0x0, 0x1, 0x4, 0x400, 0x8, 0xd61, 0xfff, 0x7, 0x400, 0xd2, 0x6, 0xff, 0x5, 0x4, 0x1e4ad65d, 0x0, 0x8, 0x800, 0xb9c, 0x4, 0x13, 0x4, 0x0, 0xfffffff9, 0xffff0000, 0x2, 0x7031, 0x3f800000, 0x2, 0x86e, 0x9, 0x0, 0x7, 0x1, 0x3, 0x9, 0x598, 0xa0, 0x5, 0x5, 0x7fffffff, 0x7ff, 0x10000, 0x9, 0x9, 0x101, 0x7, 0x100, 0x3da9ce24, 0x3, 0x3ff, 0x5, 0xffff, 0x8, 0x3, 0x6, 0x3f, 0x2, 0x40, 0x5, 0x2, 0x4, 0x7, 0x401, 0x0, 0x9, 0x1, 0x3, 0xffff, 0xffffffe0, 0xfffff000, 0x40, 0xd94bdc1, 0x9dd, 0x80, 0x7f, 0x1, 0x2, 0x7, 0x5, 0x3, 0x1, 0x3, 0x10001, 0x206c, 0xd98d, 0x61, 0x80000000, 0xff, 0x7, 0x9, 0x77, 0x4, 0x4, 0x8, 0x3, 0x4, 0x0, 0xfff, 0x401, 0x5, 0x9, 0x4, 0x193b, 0x1, 0xc5, 0x611a, 0x81, 0xcc9, 0xbd75, 0x1d6, 0x3, 0x6, 0x800, 0x10000, 0x511, 0x1, 0x4, 0x9, 0x8, 0x401, 0x7, 0x607b, 0x2, 0x2, 0xfffffffe, 0x7fffffff, 0x4, 0x3, 0x3, 0x4b71, 0x2, 0x6, 0x795b, 0x6, 0x10001, 0xfff, 0x101, 0xc3, 0x9, 0x200, 0x9, 0x0, 0x3, 0x9, 0x8001, 0x8, 0x561, 0xffffffff, 0x0, 0x1, 0x200, 0x7fff, 0x1, 0xc, 0x30d8, 0x3ff, 0x39c, 0x8, 0x1f, 0x4, 0x4, 0x1ff, 0x1f, 0x8b3d, 0x1, 0x7, 0x7, 0x7f, 0xdc9, 0x3d, 0xffff, 0xd191, 0x7f800000, 0xfffffffd, 0x2, 0x9, 0x0, 0x10000, 0x8, 0x7f, 0x117, 0x9, 0xfff, 0xfffffffe, 0x7f, 0x8, 0x1, 0xc94, 0x0, 0x4, 0x8001, 0x9, 0xff, 0x8, 0x6, 0xfffffffb, 0x9, 0x0, 0x3db, 0x7, 0x7fff, 0x1de0, 0x40, 0x7, 0x9, 0x0, 0x1, 0x3, 0xff, 0x100, 0x9, 0x1, 0x0, 0x1, 0x2, 0x43, 0x5, 0x6, 0x2, 0x6, 0x5eff, 0x6, 0x4, 0x605, 0x800, 0x5, 0x0, 0x6, 0x6, 0x3, 0x980e, 0x800, 0x101, 0x3160, 0xe81, 0x5, 0x412b6c8c, 0x0, 0x79, 0x1, 0x7f, 0x10000, 0x100, 0x1b92, 0x401, 0x6, 0x4, 0xfffffffc, 0x200, 0x3, 0x3, 0x7, 0x5, 0x69d7, 0x1b35, 0x59f, 0x8000, 0x1ff, 0x7f, 0x7, 0x200000, 0x10001, 0x5, 0x7c, 0x400, 0x4, 0x0, 0x3, 0x100, 0x10000, 0x1000, 0x8, 0xd2, 0x400, 0x3, 0x7, 0x8, 0x4, 0xdc9, 0xa0, 0x4, 0x3, 0x7, 0x4, 0x3, 0x3, 0x8, 0x5, 0xd0, 0x5, 0x2, 0xf0, 0x6, 0x2, 0x2, 0x0, 0x7e6, 0x101, 0x20000, 0x7, 0x8, 0x1, 0x0, 0x2116, 0x244, 0x0, 0xb3e, 0x3f, 0x5, 0xfffffff8, 0x100, 0x2, 0xff, 0x1000, 0x5, 0x45, 0x80000000, 0x4, 0x7, 0x1, 0x2, 0x9, 0x4, 0xfd, 0x0, 0x7, 0xfffffffd, 0xffffffff, 0xe65, 0x4e, 0x4, 0x0, 0x40000, 0x6, 0x7, 0x2, 0x2, 0x8, 0x2, 0x7ff, 0x4, 0x4, 0x1, 0xffff8001, 0x401, 0x0, 0x6, 0x0, 0x4, 0x3, 0x7, 0x200, 0x5, 0x80000001, 0x80000001, 0x3, 0x9, 0x8, 0x0, 0x8000, 0x2, 0x401, 0xffffffff, 0x4, 0x5, 0x1, 0xde4, 0x1, 0x401, 0x7, 0x6, 0x5, 0x9, 0x37, 0x7fff, 0x4477, 0x2b93, 0x0, 0x78a8154, 0x7, 0x5, 0x7, 0x20, 0x7, 0x9, 0x9, 0x2, 0xcc5c, 0x8, 0xef8, 0x6, 0x1f, 0x4, 0x9, 0x5, 0x81, 0x10001, 0xec3, 0xfffffffd, 0x10001, 0x0, 0xff, 0x4000, 0x5, 0x6, 0x4, 0x401, 0x10001, 0x54a, 0x40, 0x5, 0x7, 0x8001, 0x7, 0x2, 0x0, 0xfffffffc, 0xf4e0, 0x3, 0x952c, 0xfff, 0x40, 0x3, 0x10000, 0x1f, 0x6, 0x9, 0x2, 0xa65, 0x80000001, 0x26, 0x7, 0x5, 0x1, 0x0, 0x9, 0x1ff, 0x0, 0x800, 0x1, 0xfffffffa, 0x6, 0x7, 0x101, 0x9, 0x5e, 0x7ff, 0x2, 0x5, 0x401, 0x1f, 0x7d, 0x1, 0x5, 0x57b, 0x8, 0xffffffff, 0x0, 0x0, 0x4, 0x5, 0x3ff, 0x7f, 0x7, 0x8be5, 0x4, 0x9, 0xd625, 0x3942b727, 0x1, 0xc8, 0x80000001, 0xc00000, 0x6, 0x80000000, 0x0, 0x3, 0x814, 0x40, 0x8001, 0xb3, 0x7, 0x3, 0x7, 0x5, 0xff, 0x0, 0x225e9234, 0x6, 0x9, 0x8, 0x0, 0x80, 0x2, 0x5, 0x2, 0x21, 0x2, 0xb14, 0x2, 0x7, 0x81, 0xffffffff, 0x80000001, 0x0, 0x4, 0x5, 0x4, 0x7, 0xfffff000, 0x4800000, 0x7, 0x0, 0x2, 0x6d79, 0x1f, 0x1, 0x6, 0x0, 0x7, 0x1, 0x5, 0x62, 0x1, 0x10001, 0x41, 0x7, 0xd9c9, 0x2, 0x80000000, 0x7, 0x4, 0x401, 0x7fffffff, 0xffff, 0xf, 0xffff7fff, 0xfffffc00, 0x2, 0x0, 0x2, 0x6, 0x8, 0x73, 0x1, 0x5, 0x800, 0x6, 0xffff, 0x6c4, 0x1, 0x1ff, 0x5, 0x5, 0x9, 0x3, 0x3, 0x7, 0x6, 0x80000000, 0x80, 0x2, 0x800, 0x4, 0x4, 0xffff725c, 0x6, 0x401, 0x8, 0x7, 0x7, 0x6, 0x400, 0x800, 0x8, 0x10000, 0x4, 0x22de, 0x8, 0x8842, 0x1ff, 0x7, 0x3, 0x1ff, 0x8000, 0x6, 0x3, 0x8ce, 0x5, 0x7f, 0x6, 0x400, 0x7fffffff, 0x3ff, 0x80000000, 0x9f10, 0x3, 0x7ac6, 0x9, 0x8001, 0x1ff, 0x1, 0x0, 0x1, 0x7, 0x0, 0x3394, 0x4446b3b7, 0x1, 0x4, 0x7, 0x0, 0x2, 0x8001, 0x8, 0x3, 0x5c, 0x3, 0x9, 0x934, 0x9, 0x2, 0x63, 0x7, 0x0, 0x2, 0x0, 0x3, 0x3, 0x6, 0xff, 0x7f, 0x21d189de, 0x580b, 0x8, 0x7, 0x5, 0x7ff, 0x84000001, 0x2, 0x101, 0xfb21, 0x2, 0x80008000, 0x4, 0x8, 0x80, 0x0, 0x2d, 0x0, 0x5, 0x8001, 0x8000, 0x53d, 0x9, 0x7, 0x3ff, 0x0, 0x7ff, 0x3ff, 0x0, 0x2, 0x0, 0x4, 0x7, 0x0, 0x4, 0x3, 0x96, 0x0, 0x3, 0x10001, 0x7, 0x6, 0x7, 0x6, 0x4, 0x2, 0x5, 0x1, 0xfffffff7, 0x9, 0xfffffe00, 0x2964a90c, 0x94, 0x7, 0x6859d1a6, 0x1, 0xa00000, 0x1f, 0x0, 0x565d4ba2, 0x10000, 0x6, 0x6, 0x1, 0x401, 0x2, 0x1, 0x6, 0x3f, 0xde, 0x400, 0x0, 0x7, 0x3, 0x5, 0x9, 0x9, 0x3, 0x5, 0x2b77cdb4, 0x4, 0x1000, 0x8, 0x9, 0xcf, 0x7, 0x101, 0x5, 0x7fff, 0x3, 0x5, 0xc188, 0x0, 0x1edc, 0x40, 0x8, 0x1, 0x8, 0x4a59fd74, 0x0, 0xc06, 0x2, 0x80, 0x10001, 0x501, 0x1, 0x7, 0x80000001, 0x8, 0x0, 0x1f, 0x1, 0x7, 0x9, 0x4, 0xffff, 0x0, 0x3, 0x1f, 0x787e556, 0xffffff80, 0x15a2000, 0x7f, 0x2479, 0x3, 0xfffffffe, 0x40, 0x4, 0x2, 0x9, 0xf, 0x8, 0x9, 0x6, 0x5, 0xfff, 0xffff, 0xffffffff, 0xffffff01, 0x7, 0x7, 0x10001, 0x0, 0x7ff, 0x4, 0x12, 0x8, 0x8000, 0x6, 0x80, 0x0, 0x2, 0x8, 0x80, 0x80000000, 0x6, 0x8, 0x8, 0x8, 0x9, 0x6, 0x5, 0x0, 0x85, 0xc4a6, 0x4, 0x100, 0x800, 0x2, 0x4, 0x9, 0x3, 0x4, 0x6, 0x4, 0x7f, 0xfffff801, 0x1e7, 0xfffffffd, 0x779f34f0, 0xfffffff7, 0x5, 0x1, 0xeba1, 0x6c, 0x1ff, 0xfffffffc, 0x20000000, 0x1, 0x7f, 0x6, 0x1, 0x6, 0x4, 0x6, 0x5, 0x6, 0x6, 0x1, 0x6, 0x2, 0xfffffff9, 0xfff, 0x6, 0x800, 0x3f, 0x7, 0x200, 0xbc, 0x2, 0xffffffff, 0x10000, 0xb215, 0x5, 0x3e00000, 0x101, 0x7, 0x8, 0x7, 0x5, 0xffffff80, 0x5, 0xb3, 0xf21c, 0x0, 0x3, 0x10000, 0xd7, 0x7fffffff, 0x0, 0xff, 0x2, 0x477d, 0x1ff, 0x7f, 0xfffffadf, 0x3, 0x5, 0x2, 0x7, 0x401, 0x4, 0x80000000, 0x7, 0x7ff, 0x9, 0x10000, 0x3, 0x7, 0x1, 0x101, 0x1, 0x1, 0x7, 0x3, 0x7, 0x401, 0x8, 0x1000000, 0x3, 0x7, 0x10000, 0x4, 0xfffffffa, 0x7, 0x2, 0x101, 0x101, 0x3, 0x1b4, 0x6, 0x5, 0x0, 0x4, 0x2, 0xffffffff, 0x3, 0xd1, 0x3ff, 0x3, 0x8, 0x7fffffff, 0x9, 0x35567118, 0x2, 0x80000001, 0x5, 0x0, 0x200, 0x80000001, 0x0, 0x3d2, 0x101, 0x1, 0x8, 0x3, 0x9, 0xfff, 0x2, 0xdc8, 0x6, 0x1f, 0x1, 0x7, 0x3ff, 0x9, 0xc8, 0x8, 0x80000000, 0x7f, 0x5, 0x46ff, 0xffff073e, 0x3, 0x1, 0x10000, 0x80000000, 0x8, 0x0, 0x800, 0xe7, 0xce9, 0x4, 0x7fff, 0x9, 0xffffffff, 0xf5c6, 0xffffffc1, 0x8, 0x6, 0x16, 0x1, 0xbbad, 0x7f, 0x1f, 0x1, 0xa99, 0xa6, 0x4, 0x540, 0x0, 0xd3c3, 0x0, 0x8, 0x9, 0xa86b, 0x7, 0x2, 0x7eac, 0x2, 0x7, 0xfffffffe, 0x100, 0x1, 0x56, 0x1, 0x4, 0x8001, 0x10000, 0x2, 0x62a0, 0x101, 0x4, 0x1, 0x6, 0x3, 0x3]}) 23:02:18 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:18 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0x105400) 23:02:18 executing program 5 (fault-call:1 fault-nth:15): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:18 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001700)=""/27) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001780), 0x6, 0x40402) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000017c0)=""/222) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001740)={0x54, 0xdf41, 0x7, {0x800, 0x1f}, {0x0, 0x40}, @const={0x0, {0x40, 0x6, 0x2, 0x4}}}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001040)={0x1, 0x1000, &(0x7f0000000040)="ceb7ef22ec99faf0887d765726e950a9ba09f6e8709ba17545b9ba5a9622bbdb1998b14e1c856f1d9c8d94f698610a3a84365aa8d057407a0431cf95581f31d724757ead2cfe3be658fd4b98e03637dded0fce692d44bd4a9bcc4d8fa37eba689f01277069641f599e60a91632a67dd034313bd6ab038312a45de4a0f31c268634b4b19dcbecf8783d1a647e2e3d8a588bc80d4f3a5df298d94c6a2644c1ec07f2f0914ac39e2f2713a290445b69d09f80101a0966cd5042a95db176ff7ec3bfacdfee20e8bf234aeb8ce6518317f556721dae90032a4e57dbe6c1cb00dc45f96454d3bd15b731c46736737328aaa8750261f45a4271d8e37bfa7369fa2f4822f3f1d38a467e2f451aa34caef5951a7ab8d6271f1f5b2666d91c17aeddb64675bb3e81b9e69bfd8dd405c3fc72653d587d569853b97a022184c8f43c980c2326d85fa9d84f9102800aed3105a1697ddcc9c82ff4afdaeb96fdf80d6ca6dc6a3ab85431ceec54fb9998f019fec9c04eb00c11836a3232c7aeacaca96a79b48a31a2df226c9516a21b126fff5e155738547edb488be49d87239a67414d1a9e12c627c58be7054827e564a3f168f780879a83f8c6f8b5e00aafcb4505bf4a2e1093bebf57571b0d37ca8b93c813a6cfa64ed482be6ae3a39283208a30001e44d5bf4723b4b65c07705c20680cb4fd9d2b866bc224d068b0e7c55dac0641572cf407ab0aa16239780d64dc29192710271f70fa0db083730c496da8e8661ce4a4d7ac44bc5bb82914dbd56ca5a07c5d2fb3a47e41120391f39a0817e8706e8f65f954aa3fd7055c4ea791a14b6b526354650ff83220716533030238a6f4c907f4e24c93b9eb1c8da9ca7314744f3455f6862444af3ca1698ec94152534bb020849b6848bd60a0efa250643c41a242cb83ef0f68fd88f3c3d691a74ce204577e472f5cc9fd8874891f83e021e5ff2183517b00d5f52fb92cc293c2b2b13394e6b1e8269caa682f5cd439a80f755c3765c7ff45c5f995025b9f20dc276f34bb2fcd56db03861f8957db1cd09d85085f3ea89d60875472ee134f9f49a98a8f5176e9a41d76fd0de76e97d7fb67eef161aa27cc7417c514082f89bab6c28da018a6d4e7cb4fe92e9942965635fa8e39e934d9fa4acaf34d5ee2776bb6bb2e70a158a32917f951fe28bac3b8013f8a5b991938dbfbb69e9919773531238b15b56682ac775800ccbc67f095781ea58455e95f216f9a23bbd90b77b410a4902b222dea9c6b4163c569233c671b9d471550bd155edd19bfe111191af2c3d42c307e3a4eefaac76e11d6d884c6579c947ee8a6c0fb23f925f9f1374e74b681d92e52a6fded8c335406c31b0d275c2cb3cbb0fc543562f4381f149a612383e654b9dfd5eceff9a125e8652b19feba324b27ce49136821d4b64b110327dfffb737ded223fd506ec526133c77363b3403ed9af386d1fd8327163cf5c2c77847a3416cad3b90bbbb8a336f1d2f156753454a8aa047e84c23bb4e0d54113cd51a77bf2a8f572e0a99416d7ea9aa6652d48c1fc8e26e3e842995d91e2266d9a28816ae45cbb3c60d3f87065801d391849a0e4ca43dc58da11c7166b1502f73390220060ba1398d37ceb3577e73021f53897d4a31a8805d9e41e98275c9fa17d7703286b784e0230eb3885996e66d67c28365209883e18eb3ffa3fa8f833b0b87c88f428848ef9ba348b7b210157fe119e8cbf62863a79c8312d0e291a82daad768ae7fff7cd181f09eabb298bf043db288c027f7fbab59dbfe619faddb2901aba50714507e4c9142c4ebd23ebf9a23abbf209c37005674785143ba56cc683ac9fee6b5202fda38ba241fd27e6b5197012156199da412038f018084c97179cf36437bb57e46d0143e2726426d97abed59a5b8fcc889cdffcc6b2196e06cbdf9059c7d16af195958e2a1a092e60691feb19eef049fa676db9382574c1a60305c4b3b5c9bedbde49a746d6c5b944a92c6ca6ffdaf3ff5d513888298a6a4dd567a8b0a45abbad2012387b53b3b809e84bed0d9afbde2519e18fe0a6a27f3b05da399e50e7bd5fe068d060cff6fb7f773d084a66d149772a8100a3d6c728c1b8d33f1bd79f719564e4408c575954bb4e495c575afc4d0bc91305f0a5e8dc3b2daf60087b4f0a6314a9b03a36d72758660ef59473a86fcf63f48b53beae4c3760e0fda2c984fefddfd4401aba54a7e72da9096f6b2b2661d84109baf5d3fe719cd751be77610f8739002fc312668eaf58b7789688ea284c859393613de715371be8aec10dc96cfeb861e6d919235d258a3f82e0989180a36eb56db0ab7dd87a9cd0a4554df5cb1db3631961db6c66a497698b09185e63c35a630bd2fbb7aafa68768e0422e273f9724e0accaef17504e43a94e17290e8e2910854d1c8f595ee7772646e687f5899518ab588510c228c641e23da732b3b99a8ba7aa7873b0c0e76aadd3a4ac79b5d000e0dfbe94eae68e3be0bd6f07aa9f99b4ec85f148eb5f46cbbc06f8fb6749b1dfa0e3e763f57331199d7a66a74d7387c0fe9aa69dfdf5b091e7b8e889c3ceeb91e2916deefafa425727f7a523c1b297798157d18e36f2ab1cb2f94576b12e379e74ae4661f5ffeb5680fddb0e6d0ca4cd6b015dd0d44413f7361d917dde21d15a9cfe21e51c30ee946a4a0dad14972660fe6fb14ce8023a926df715beaa48e46ea57afbdc3649d941cf2b9c6d7d00c4dec53217a28038e419acdb2b47042c0d49e458e37129115a94e00e983ff7b00c96f04bce60cf840d484945cc2ed927e781f326edae765fefe628c536ea279bff71ab2eb0d22b2259238d1d994320719d35ff1516d308fb52ad351cd054ec6f8be48862786439c83d08c6ea031ac27ca0bd3ba1c02dc989e3049c95b5b6deb9e7caddab4d0f56a5d1d4b28388e17c4b7a15c60a991654f46981158e25fd213577fc9c20fddf7a16877649e5719d3c1800db8147cc67d9ebd740e228a909466ec067fd7f0dd324a7dae15707b2ccb59e563fd10e6fd0455aa403507d571779d5601910d8e806a9923ffd6e96e35c9cf1956a61aa15fcca5adccb2863aac724c7ccf40a54d73bc350164e5db6a1ac66f191c7dbf759808c75c45ba3146acdcbcd854780f73754c59ad0e580f1ea2f0ee3372b0482dd03332827067652cee5380f133e5dfddeca36202df92c7da4939c02d23107c9e5773d7598f1d31ea37f805517cef22fd19082ae82bb8e774bf79384936b9053518fb5870ce657de1411a9ec8d250a5831198bb0010a4b821dab3f74d1932363bc0f381de7b3115ab63c9a16d622bf3e7d4ad63b5f1654ba3b9fb3f23557db5ab5e8c608526834b8ec1b3dd5ccec60738fb7c620b79446db241153f84d614be5e3034756c1775bbeaeff403d5f55da77ac6cc6f6ec8cbb39071ae6656643aa7dc7e300ecea66f514baa50e336a16c233384bef75778fc46ed95cf65c6541a350b6cd3aafa7964c38c50fb90abffcc838c72dc4a06cfb79349149ee9c282245a1dd5385b32e3a2f8e9efec73544369bb6cec6056eba94fe8b11782e1d7eb8b959da15141061fc25c8eb229461e198631f6b65af218e44cdff66a8ab8d9ffc27d5a1faa2dd4363c927b643a8a01a83b75fb42113c2cf562b230ced39906d804cf807a7797b9729cf826c44463ee57dc1d335e732914074d1aa9dd6ad384cd637d611864529e99433250f280e3ed6beb954bfeeb00311185237d3af98de92078e21a15841aa255329fc9102ca3ac22b0d99f43aa9192a74fbe49f2a4bba52265f748e00612f78021ae13629505d610363a85d41fa8862334b66b2f6bd0f0eec5e8e9b1236c7b659b76d7820cab6c462c1b124da751490fe9eff047aae104a900b38090d8869a3bc78d04c0b1e4fb638fa2ea886e6c4b19dd112ea3af05ca0a6e0b0b39820e239e3f8a8533640fa11880d91949e652b5ebeb2c77552132528bc8fbd9ff8db747d315937cd317531d51ff35e2a669472c2c454b457c526dfcc1f069463e7493bc946a8fa0945fc4ccfcb7e2bc33dc8a675c3a773150947196fec46a74a735cca82149374291d2cc5063e0509669435c8e4780c7e1da3aca1aa67110be37476bde968f666487c9b25049d5fc03b2d0942b470d546a7d0769ccde58ec9a92c5790cd3bceb1213a4121dc1265ddbe653cc046ccbc5580e91b85b53d5d1890234a4cf097eb3882efcb89fb6f60ed466233ee5bfd34db7fcb1817180f48a4b46c31378cecbc4cff44b70d652408b7a4cf0374f55ff680eb3270859261b5c111a972d02ba7b28bb7f96e5b7362d919fca20e9772fe51d1044992a53cb4d9c35ecf4d0cc2abf777d62e5dd322f1f557ea6499476ff665eb81bcce9d531ac1d1b2b01ac3adf152f3b21efa6b1667d6d45a695504cfc7d1ba7337627b0588245840d74d29a39a8b9396aa6a28b1d30cb20cfa94ea0f4f14f91cd5abcbc12d14a6030871782cad9fc3c1c543c62561c7c62df7374613148c0354820d09a650956668b4a8a06c83f3428bee0f5b198fb8c4b1dbbe98059ee66b88ce728df714e87663048e265579f2cc7d8f27f2436e911c0741265c6542cebee81acd5e918a900145880c584184fac6de4905da4325a93cde5d855bab87d05c764aff0933c59896b805ff7b7610402ca93b90d288f60912030b31d503760e648275087c47d1f0752c3369c4f12a6cc9f1ceff5608fd65fe9ed4e4de0b60aafcf1843fa7632d29fe6473cd3d04e8c7b2f69f0c85d64e4869579875cb617f043c2ea37a9a11f617896c7b4b8fe7c76f24f0b33174031219b9f7a602ace8556201e5aacf93e54190acabe86e111c6987e12b920680ebb58c3e0d987b333c8161f689e8a50fe62bf52aad7632008cbc0e954850cedcd4247c58a4305b1d6314f7094bd2077f48603703380ea640ad98131089b49479cbfd1d4f0b99cd739e62f70f6f2930d259557a75907dfe10c45ba9173b8340d1fcf14acb2e4fcac0c916cba19654e5d3bfd1ee526936ed52977939f197b76cdb1c98a257fbf5c645483365c115c5c14610e50f9a364e58216cefaf90544eff03eca7be37d75f21c5c22606eb9409e6176650a21a6acf0b70cac8aca941a892a4cc6be5cece68e7c39cfb68b3e567259ee68b105912ca68a073140bbc359cfeedfceb10142c7a13be8d3999746e82596e29ddd6788844b2c458e0cd3930427df284da987b104530de088154089efa305a9bac863eef275c28258e7414158353bb76bc005093037b02c75e7682ccabccd365f87dbc30f25afeb8efa78db3b6fbb952541243feccf8b590c19230e5348056a7e0a421577c11f9203d25b9d4b2f05633201ba76cc7c41224505ffd99488de7229158b280d7ef3744bc585690a5b0ff637896a02d27cff2f07ee5c1c00a4563ef050f065b8a1b1bbe3a00e3503db704b5a10116db5daabd643bae97ab21ac918e7ca904bfe3b86249bcece4349ae3293d0f8d8077ef2bb7f89b2522f440b2c66964029ed4cde45ed3dd2712ee7539ae95f09e1365449f6c1781788d313d1945beed603c47963f04e8f9028a426ed9616b8edb754c6d22be2402dcbfbd6fe9e01faed9fceede8235c6cf334ba8aa7f06a9e316ded664f3bda829caa2b78f1e65b28e456dcbdf9362c937836635fe1fcfe67eb17562329f42541bf08c378249e0fbe300be2c6dde141e17a3bec2ecb56b0b331fb1b9d2b04d7b8234aea27ac2d782294ac91d9ec750ce33e6a84e6825610c9eeafde2dcf5534b3bc5a4299825f85f9a7cceaed4"}) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x4, 0x90240) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000001900)=""/194) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0xb6) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000, 0x5) [ 2792.149493][T26999] FAULT_INJECTION: forcing a failure. [ 2792.149493][T26999] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.162262][T26999] CPU: 0 PID: 26999 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2792.171226][T26999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.181417][T26999] Call Trace: [ 2792.184940][T26999] dump_stack+0x143/0x1db [ 2792.189314][T26999] should_fail.cold+0x5/0xa [ 2792.193967][T26999] should_failslab+0x5/0x10 [ 2792.198593][T26999] __kmalloc_node_track_caller+0x7d/0x330 [ 2792.204605][T26999] ? audit_log_start.part.0+0x2a2/0x760 [ 2792.210192][T26999] __alloc_skb+0xde/0x340 [ 2792.214556][T26999] audit_log_start.part.0+0x2a2/0x760 [ 2792.220069][T26999] ? audit_log_task_context+0x160/0x160 [ 2792.225654][T26999] ? audit_filter+0x319/0xb90 [ 2792.230366][T26999] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2792.236648][T26999] ? integrity_audit_message+0x36b/0x430 [ 2792.242327][T26999] ? integrity_kernel_read+0xb0/0xb0 [ 2792.247655][T26999] ? audit_compare_dname_path+0x120/0x120 [ 2792.253408][T26999] audit_log_start+0x5f/0x90 [ 2792.258226][T26999] integrity_audit_message+0x100/0x430 [ 2792.263692][T26999] ? integrity_kernel_read+0xb0/0xb0 [ 2792.268970][T26999] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2792.275206][T26999] ? ima_get_binary_runtime_size+0x40/0x40 [ 2792.281004][T26999] integrity_audit_msg+0x3d/0x50 [ 2792.285957][T26999] ima_add_violation+0x19f/0x3b0 [ 2792.290885][T26999] ? ima_store_template+0x140/0x140 [ 2792.296422][T26999] ? __d_path+0x160/0x160 [ 2792.300967][T26999] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2792.307378][T26999] process_measurement+0xb6a/0x17e0 [ 2792.312583][T26999] ? mmap_violation_check+0x1e0/0x1e0 [ 2792.317350][T20128] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 2792.317983][T26999] ? tomoyo_path_number_perm+0x590/0x590 [ 2792.318019][T26999] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.337182][T26999] ? find_held_lock+0x2d/0x110 [ 2792.341974][T26999] ? aa_get_task_label+0x25f/0x540 [ 2792.347263][T26999] ? lock_downgrade+0x6e0/0x6e0 [ 2792.352367][T26999] ? fsnotify+0x1070/0x1070 [ 2792.357105][T26999] ? ext4_file_write_iter+0x1980/0x1980 [ 2792.362793][T26999] ? path_get+0x5d/0x80 [ 2792.366954][T26999] ? aa_get_task_label+0x288/0x540 [ 2792.372244][T26999] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2792.378505][T26999] ? apparmor_task_getsecid+0xc2/0x110 [ 2792.383959][T26999] ima_file_check+0xb9/0x100 [ 2792.388542][T26999] ? process_measurement+0x17e0/0x17e0 [ 2792.394185][T26999] ? may_open+0x1f6/0x420 [ 2792.398511][T26999] path_openat+0x15b5/0x27e0 [ 2792.403096][T26999] ? path_lookupat+0x850/0x850 [ 2792.407982][T26999] ? __kasan_init_slab_obj+0x21/0x30 [ 2792.413455][T26999] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.419564][T26999] do_filp_open+0x190/0x3d0 [ 2792.424180][T26999] ? may_open_dev+0xf0/0xf0 [ 2792.428872][T26999] ? do_raw_spin_lock+0x120/0x2b0 [ 2792.433895][T26999] ? rwlock_bug.part.0+0x90/0x90 [ 2792.438858][T26999] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2792.445103][T26999] ? _find_next_bit+0x1e3/0x260 [ 2792.449954][T26999] ? _raw_spin_unlock+0x1a/0x30 [ 2792.454799][T26999] ? alloc_fd+0x2e6/0x660 [ 2792.459135][T26999] do_sys_openat2+0x16d/0x420 [ 2792.463913][T26999] ? build_open_flags+0x6f0/0x6f0 [ 2792.468971][T26999] ? __context_tracking_exit+0x9f/0xb0 [ 2792.474547][T26999] ? lock_downgrade+0x6e0/0x6e0 [ 2792.479398][T26999] __x64_sys_openat+0x13f/0x1f0 [ 2792.484269][T26999] ? __ia32_sys_open+0x1c0/0x1c0 [ 2792.489210][T26999] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2792.495207][T26999] ? syscall_enter_from_user_mode+0x27/0x70 [ 2792.501117][T26999] do_syscall_64+0x3a/0xb0 [ 2792.505561][T26999] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2792.511474][T26999] RIP: 0033:0x4196c4 [ 2792.515525][T26999] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2792.535468][T26999] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2792.543880][T26999] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2792.551845][T26999] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2792.559935][T26999] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2792.568100][T26999] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2792.576082][T26999] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 [ 2792.677428][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2792.688360][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2792.698324][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2792.868022][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2792.877087][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2792.885134][T20128] usb 2-1: Product: syz [ 2792.889383][T20128] usb 2-1: Manufacturer: syz [ 2792.893989][T20128] usb 2-1: SerialNumber: syz [ 2792.918777][T26980] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:19 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8}}}}}}]}}, 0x0) 23:02:19 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:19 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x105400) 23:02:19 executing program 0: ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/109) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x42900) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:19 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000047, 0xc001) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/207) 23:02:19 executing program 5 (fault-call:1 fault-nth:16): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2793.187439][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2793.204199][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2793.211540][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2793.270996][T20128] usb 2-1: USB disconnect, device number 62 [ 2793.336846][T27018] FAULT_INJECTION: forcing a failure. [ 2793.336846][T27018] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.349563][T27018] CPU: 0 PID: 27018 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2793.358355][T27018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2793.368444][T27018] Call Trace: [ 2793.371771][T27018] dump_stack+0x143/0x1db [ 2793.376129][T27018] should_fail.cold+0x5/0xa [ 2793.380667][T27018] ? ima_alloc_init_template+0xb4/0x750 [ 2793.386337][T27018] should_failslab+0x5/0x10 [ 2793.390868][T27018] __kmalloc+0x72/0x310 [ 2793.395104][T27018] ima_alloc_init_template+0xb4/0x750 [ 2793.400718][T27018] ima_store_measurement+0x1d7/0x5a0 [ 2793.406053][T27018] ? ima_collect_measurement+0x570/0x570 [ 2793.411720][T27018] ? ima_get_action+0xa0/0xa0 [ 2793.416448][T27018] ? ima_get_cache_status+0x1d0/0x1d0 [ 2793.421852][T27018] process_measurement+0x11fb/0x17e0 [ 2793.427177][T27018] ? mmap_violation_check+0x1e0/0x1e0 23:02:20 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x109640) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x3, 0x20, 0x80, 0x4, 0x5, 0xfc07}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x51, 0x8, 0x2, {0xd2, 0x9}, {0xbe9b, 0x1}, @ramp={0x8, 0x1, {0x42, 0xd2, 0x8, 0xba6}}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x105140) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x0, 0x18, 0x0, 0xffffffff, "167d1b4ea45075493574fc5741718eec7bde5631cda36d47ac1be84a41183e58"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000, 0x5) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/51) 23:02:20 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000100)=""/49) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x200) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x8000, 0x18440) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000180)={0xffffffff, 0x81, 0x3, 0x9, 0x6}) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x600) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x7, 0x101000) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000280)=""/102389) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/105) [ 2793.432578][T27018] ? tomoyo_path_number_perm+0x590/0x590 [ 2793.438249][T27018] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2793.444270][T27018] ? find_held_lock+0x2d/0x110 [ 2793.449077][T27018] ? aa_get_task_label+0x25f/0x540 [ 2793.454223][T27018] ? lock_downgrade+0x6e0/0x6e0 [ 2793.459111][T27018] ? fsnotify+0x1070/0x1070 [ 2793.463647][T27018] ? ext4_file_write_iter+0x1980/0x1980 [ 2793.469308][T27018] ? path_get+0x5d/0x80 [ 2793.473491][T27018] ? aa_get_task_label+0x288/0x540 [ 2793.478638][T27018] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 23:02:20 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2793.484941][T27018] ? apparmor_task_getsecid+0xc2/0x110 [ 2793.490436][T27018] ima_file_check+0xb9/0x100 [ 2793.495079][T27018] ? process_measurement+0x17e0/0x17e0 [ 2793.500690][T27018] ? may_open+0x1f6/0x420 [ 2793.505057][T27018] path_openat+0x15b5/0x27e0 [ 2793.509786][T27018] ? path_lookupat+0x850/0x850 [ 2793.514587][T27018] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2793.520612][T27018] do_filp_open+0x190/0x3d0 [ 2793.525147][T27018] ? may_open_dev+0xf0/0xf0 [ 2793.529685][T27018] ? do_raw_spin_lock+0x120/0x2b0 23:02:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0x105400) [ 2793.534741][T27018] ? rwlock_bug.part.0+0x90/0x90 [ 2793.539916][T27018] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2793.546234][T27018] ? _find_next_bit+0x1e3/0x260 [ 2793.551124][T27018] ? _raw_spin_unlock+0x1a/0x30 [ 2793.556010][T27018] ? alloc_fd+0x2e6/0x660 [ 2793.560481][T27018] do_sys_openat2+0x16d/0x420 [ 2793.565191][T27018] ? build_open_flags+0x6f0/0x6f0 [ 2793.570346][T27018] ? __context_tracking_exit+0x9f/0xb0 [ 2793.575931][T27018] ? lock_downgrade+0x6e0/0x6e0 [ 2793.580811][T27018] __x64_sys_openat+0x13f/0x1f0 23:02:20 executing program 4: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x2, 0x100, 0x7f, 0x9, 0x81, 0xf39b}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x428504) [ 2793.585793][T27018] ? __ia32_sys_open+0x1c0/0x1c0 [ 2793.590846][T27018] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2793.596863][T27018] ? syscall_enter_from_user_mode+0x27/0x70 [ 2793.602793][T27018] do_syscall_64+0x3a/0xb0 [ 2793.607250][T27018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2793.613190][T27018] RIP: 0033:0x4196c4 [ 2793.617115][T27018] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2793.637022][T27018] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2793.645467][T27018] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2793.653470][T27018] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2793.661466][T27018] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2793.669718][T27018] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2793.677847][T27018] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 23:02:20 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x7, 0x7fffffff, 0x2}) [ 2793.789005][T20128] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 2794.167434][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2794.178683][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2794.188467][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2794.358058][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2794.367717][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2794.375787][T20128] usb 2-1: Product: syz [ 2794.380025][T20128] usb 2-1: Manufacturer: syz [ 2794.384641][T20128] usb 2-1: SerialNumber: syz [ 2794.408661][T27038] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:21 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x18}}}}}}]}}, 0x0) 23:02:21 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x105400) 23:02:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000080)=""/234) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000240)=""/146) 23:02:21 executing program 5 (fault-call:1 fault-nth:17): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:21 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000003, 0x4e0a00) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2794.677559][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2794.694621][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2794.701645][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2794.755044][T20128] usb 2-1: USB disconnect, device number 63 23:02:21 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x7f) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/33) [ 2794.795581][T27067] FAULT_INJECTION: forcing a failure. [ 2794.795581][T27067] name failslab, interval 1, probability 0, space 0, times 0 [ 2794.808417][T27067] CPU: 0 PID: 27067 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0 [ 2794.817523][T27067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2794.827598][T27067] Call Trace: [ 2794.830901][T27067] dump_stack+0x143/0x1db [ 2794.835347][T27067] should_fail.cold+0x5/0xa [ 2794.839885][T27067] ? ima_alloc_init_template+0x199/0x750 [ 2794.845549][T27067] should_failslab+0x5/0x10 [ 2794.850174][T27067] __kmalloc+0x72/0x310 [ 2794.854354][T27067] ima_alloc_init_template+0x199/0x750 [ 2794.859849][T27067] ima_store_measurement+0x1d7/0x5a0 [ 2794.865178][T27067] ? ima_collect_measurement+0x570/0x570 [ 2794.870861][T27067] ? ima_get_action+0xa0/0xa0 [ 2794.875571][T27067] ? ima_get_cache_status+0x1d0/0x1d0 [ 2794.880977][T27067] process_measurement+0x11fb/0x17e0 [ 2794.886394][T27067] ? mmap_violation_check+0x1e0/0x1e0 23:02:21 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x1c70ab6f35f0d7e0) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f00000000c0)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/72) 23:02:21 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2794.891815][T27067] ? tomoyo_path_number_perm+0x590/0x590 [ 2794.897484][T27067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2794.903506][T27067] ? find_held_lock+0x2d/0x110 [ 2794.908303][T27067] ? aa_get_task_label+0x25f/0x540 [ 2794.913444][T27067] ? lock_downgrade+0x6e0/0x6e0 [ 2794.918333][T27067] ? fsnotify+0x1070/0x1070 [ 2794.922874][T27067] ? ext4_file_write_iter+0x1980/0x1980 [ 2794.928544][T27067] ? path_get+0x5d/0x80 [ 2794.932743][T27067] ? aa_get_task_label+0x288/0x540 [ 2794.937923][T27067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2794.944366][T27067] ? apparmor_task_getsecid+0xc2/0x110 [ 2794.949862][T27067] ima_file_check+0xb9/0x100 [ 2794.954487][T27067] ? process_measurement+0x17e0/0x17e0 [ 2794.959979][T27067] ? may_open+0x1f6/0x420 [ 2794.964345][T27067] path_openat+0x15b5/0x27e0 [ 2794.968959][T27067] ? path_lookupat+0x850/0x850 [ 2794.973847][T27067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2794.979865][T27067] do_filp_open+0x190/0x3d0 [ 2794.984393][T27067] ? may_open_dev+0xf0/0xf0 [ 2794.988917][T27067] ? do_raw_spin_lock+0x120/0x2b0 23:02:21 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2794.993985][T27067] ? rwlock_bug.part.0+0x90/0x90 [ 2794.998958][T27067] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2795.005252][T27067] ? _find_next_bit+0x1e3/0x260 [ 2795.010140][T27067] ? _raw_spin_unlock+0x1a/0x30 [ 2795.015030][T27067] ? alloc_fd+0x2e6/0x660 [ 2795.019385][T27067] do_sys_openat2+0x16d/0x420 [ 2795.024263][T27067] ? build_open_flags+0x6f0/0x6f0 [ 2795.029320][T27067] ? __context_tracking_exit+0x9f/0xb0 [ 2795.034947][T27067] ? lock_downgrade+0x6e0/0x6e0 [ 2795.039856][T27067] __x64_sys_openat+0x13f/0x1f0 [ 2795.044744][T27067] ? __ia32_sys_open+0x1c0/0x1c0 [ 2795.049715][T27067] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2795.055733][T27067] ? syscall_enter_from_user_mode+0x27/0x70 [ 2795.061659][T27067] do_syscall_64+0x3a/0xb0 [ 2795.066104][T27067] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2795.072121][T27067] RIP: 0033:0x4196c4 [ 2795.076173][T27067] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 23:02:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xa00, 0x105400) [ 2795.095986][T27067] RSP: 002b:00007f7086085cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2795.104442][T27067] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 2795.112449][T27067] RDX: 0000000000000006 RSI: 00007f7086085d60 RDI: 00000000ffffff9c [ 2795.120451][T27067] RBP: 00007f7086085d60 R08: 0000000000000000 R09: 0000000000000000 [ 2795.128449][T27067] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2795.136450][T27067] R13: 00007ffc69ffb2ff R14: 00007f7086086300 R15: 0000000000022000 23:02:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200400) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/58) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0xffffffff, 0x76]) [ 2795.255461][ T33] kauditd_printk_skb: 57 callbacks suppressed [ 2795.255481][ T33] audit: type=1804 audit(1623020541.937:610): pid=27067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343936352F48C7C060 dev="sda1" ino=16321 res=0 errno=0 [ 2795.300822][ T33] audit: type=1804 audit(1623020541.977:611): pid=27098 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343930312F48C7C060 dev="sda1" ino=16209 res=1 errno=0 [ 2795.331416][ T33] audit: type=1804 audit(1623020541.987:612): pid=27098 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343930312F48C7C060 dev="sda1" ino=16209 res=1 errno=0 [ 2795.557167][T20128] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 2795.917840][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2795.929798][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2795.939688][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2796.117683][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2796.126865][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2796.135245][T20128] usb 2-1: Product: syz [ 2796.139605][T20128] usb 2-1: Manufacturer: syz [ 2796.144418][T20128] usb 2-1: SerialNumber: syz [ 2796.168606][T27082] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:23 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:02:23 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/206) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x1600, 0x105400) 23:02:23 executing program 5 (fault-call:1 fault-nth:18): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:23 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:23 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3a3101) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x1892c0) read$hidraw(r0, &(0x7f0000000100)=""/234, 0xfffffffffffffdef) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2796.441339][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2796.457999][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2796.464988][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:23 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0xffffffffffffffc0, 0x505600) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x9, 0x13, 0xfffc, 0xff, "e7558271f8bf49523e744610b820fb82c7f6021137e598b592b4cec41125476d"}) [ 2796.532007][ T33] audit: type=1804 audit(1623020543.217:613): pid=27118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343936362F48C7C060 dev="sda1" ino=16809 res=1 errno=0 [ 2796.582716][T20128] usb 2-1: USB disconnect, device number 64 23:02:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000010001, 0x5) 23:02:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x105400) 23:02:23 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:23 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0x105400) [ 2796.734460][ T33] audit: type=1800 audit(1623020543.217:614): pid=27116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16810 res=0 errno=0 [ 2796.813853][ T33] audit: type=1800 audit(1623020543.217:615): pid=27116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16810 res=0 errno=0 [ 2796.885088][ T33] audit: type=1800 audit(1623020543.217:616): pid=27116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16810 res=0 errno=0 [ 2796.909437][ T33] audit: type=1804 audit(1623020543.267:617): pid=27122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343936362F48C7C060 dev="sda1" ino=16809 res=1 errno=0 [ 2796.939660][ T33] audit: type=1800 audit(1623020543.287:618): pid=27120 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=16373 res=0 errno=0 [ 2796.961650][ T33] audit: type=1800 audit(1623020543.417:619): pid=27139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16381 res=0 errno=0 [ 2797.007089][T20128] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 2797.377723][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2797.388932][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2797.400960][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2797.410784][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2797.587531][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2797.597034][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2797.605733][T20128] usb 2-1: Product: syz [ 2797.610225][T20128] usb 2-1: Manufacturer: syz [ 2797.614845][T20128] usb 2-1: SerialNumber: syz [ 2797.638536][T27125] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:24 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}}]}}, 0x0) 23:02:24 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "2d1f861b", {0x3, 0x107, 0x0, 0x1e, 0x4, 0x4, 0xe6}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x7d, 0x725500) 23:02:24 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/115) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/72) 23:02:24 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:24 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x6) 23:02:24 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0x105400) [ 2797.897482][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2797.905959][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2797.913080][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:24 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:24 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4e6805) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x6, 0x200]) 23:02:24 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x6) 23:02:24 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0x105400) [ 2797.997495][T20128] usb 2-1: USB disconnect, device number 65 23:02:24 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:24 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x9, 0x4, 0x1, 0x4, 0xffff}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/175) [ 2798.376978][T20128] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 2798.737026][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2798.748493][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2798.760644][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2798.770606][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2798.947492][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2798.956685][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2798.965065][T20128] usb 2-1: Product: syz [ 2798.969537][T20128] usb 2-1: Manufacturer: syz [ 2798.974265][T20128] usb 2-1: SerialNumber: syz [ 2798.998426][T27168] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:25 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x3}}}}}}]}}, 0x0) 23:02:25 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:25 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x6) 23:02:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4800, 0x105400) 23:02:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x200000) 23:02:25 executing program 0: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x3, 0x7fffffff, 0x5, 0x7ff, 0x9}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2799.277058][T20128] cdc_ncm 2-1:1.0: bind() failure 23:02:26 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x6) [ 2799.299857][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2799.306764][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:26 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2799.375000][T20128] usb 2-1: USB disconnect, device number 66 23:02:26 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c00, 0x105400) 23:02:26 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/19) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0xc78f5f003f61a33f, 0x64, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3ff, 0x0, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0x7f, 0x7}, @dmm={0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7f, 0x1, 0x65}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x25, &(0x7f00000000c0)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5ba}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3f, 0x5, 0x1ff, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x9, 0x81, 0x20, 0xff}]}, 0x5, [{0x35, &(0x7f0000000140)=@string={0x35, 0x3, "aef79d41c85c4997b2b14b1b8a277ea0ec38ce1ba169d42bdbfde3f73f9c3848c79096cced31f0fafcada00f72ea4f97617615"}}, {0x5e, &(0x7f0000000180)=@string={0x5e, 0x3, "c4199bac513e0fa4c86ce9b09cc1ecb2dd7ae4a02c66fd599625b4f55b8bbbe48a50cc431848efe7a0ed4c19e996c30855b202496ce489b83b363cf69add9ad0b4d98b893de535b7461cec89d812ea77a466ebd630303692096258f7"}}, {0xc9, &(0x7f0000000200)=@string={0xc9, 0x3, "57f2d25a2587d4e913f99c1ade383585172d39b99315f2aa4644167daad30d1522e8a139d789da2ba2f8b29a201828c52992ab672e5196539bc4eac9e0ae6b53d8841746c52dad28189797f48ba422429a34045279dc9880b50566326474f899940bed7109a692e0e64ea8a00a4a72ce3f41ad18b4809aadcbcfbcb0a6f91589cd7cb95529e04ca2d47a12621808dd86158f440182e33f17e7a0253f0072efacc1695348d3dfffba383ad12c0a4a5827959bf175d0507ed27c4d7434cf17c5d3eb5dc28db3d7f4"}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x82, &(0x7f00000003c0)=@string={0x82, 0x3, "e52b162e39f80f7a00382ce7929a8af7e644c28ead39dd505988c5d90c176599785ab15ac4dd6ee7d246a453c8ab80a45789556c05b5a78850476e350c940d32a46c54c8cc9fca56058edc6c4fa7006f86b54461de718acb6fd84756c09b9c210f619612a8228e7bb820a1fa817f481c1344aabecb81c810ef7585412da010c2"}}]}) syz_open_dev$evdev(&(0x7f0000000500), 0x3, 0x80) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000600)=""/4096) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x2, 0x3, 0x8, 0x9, 0x0, 0x6}) 23:02:26 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/215) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:26 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6800, 0x105400) [ 2799.786870][T20128] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 2800.146923][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2800.158249][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2800.169573][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2800.179416][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2800.346943][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2800.356247][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2800.364423][T20128] usb 2-1: Product: syz [ 2800.368658][T20128] usb 2-1: Manufacturer: syz [ 2800.373392][T20128] usb 2-1: SerialNumber: syz [ 2800.398416][T27214] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:27 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4}}}}}}]}}, 0x0) 23:02:27 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x6) 23:02:27 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1090c0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1, 0xcc, &(0x7f0000000000)="d5e77edfad142db6900d4273fbb92b35a0ef5cc5bb63347c50c3f6a665a3a3c1d30261051ab43d90bb6e7ffb182f7b4040d6e4c781284bdf37a93a61ed662d29415d441569dba7235a9bbd27106e91950808080e826e86e8fd26825e7a394eb7caccbea677b9be804efc105e794ba92564e8371d70c6d878ac8d6581cf4d9a8d263c1d3cc2b76e1d9f39f3047c4ccdea0497f82aeb3d5a3b319cd8a787e91bf77fa7d47a023f6ab7aad815606a2fa99b43ec44a1c3a875b2bc6d0915ea88e7e0acdff3d3d4c13bd65d1de9c2"}) 23:02:27 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:27 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c00, 0x105400) 23:02:27 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/139) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/89) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2800.673021][ T33] kauditd_printk_skb: 56 callbacks suppressed [ 2800.673038][ T33] audit: type=1800 audit(1623020547.357:676): pid=27251 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14625 res=0 errno=0 [ 2800.686980][T20128] cdc_ncm 2-1:1.0: bind() failure 23:02:27 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7400, 0x105400) [ 2800.761731][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2800.768649][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2800.771046][ T33] audit: type=1800 audit(1623020547.357:677): pid=27251 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14625 res=0 errno=0 23:02:27 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:27 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x141640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:27 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x6) [ 2800.813680][T20128] usb 2-1: USB disconnect, device number 67 23:02:27 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0xd43c04) 23:02:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/95) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2800.910387][ T33] audit: type=1800 audit(1623020547.367:678): pid=27251 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14625 res=0 errno=0 [ 2800.999447][ T33] audit: type=1804 audit(1623020547.417:679): pid=27254 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353233372F48C7C060 dev="sda1" ino=14737 res=1 errno=0 [ 2801.030849][ T33] audit: type=1804 audit(1623020547.417:680): pid=27256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343937332F48C7C060 dev="sda1" ino=14754 res=1 errno=0 [ 2801.061687][ T33] audit: type=1804 audit(1623020547.427:681): pid=27259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343937332F48C7C060 dev="sda1" ino=14754 res=1 errno=0 [ 2801.092343][ T33] audit: type=1800 audit(1623020547.427:682): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14771 res=0 errno=0 [ 2801.113939][ T33] audit: type=1804 audit(1623020547.437:683): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343937322F48C7C060 dev="sda1" ino=14771 res=1 errno=0 [ 2801.146009][ T33] audit: type=1800 audit(1623020547.437:684): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14771 res=0 errno=0 [ 2801.167405][ T33] audit: type=1804 audit(1623020547.437:685): pid=27257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343930372F48C7C060 dev="sda1" ino=14786 res=1 errno=0 [ 2801.276781][T20128] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2801.637260][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2801.648790][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2801.660296][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2801.670219][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2801.837614][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2801.846747][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2801.855069][T20128] usb 2-1: Product: syz [ 2801.859282][T20128] usb 2-1: Manufacturer: syz [ 2801.863883][T20128] usb 2-1: SerialNumber: syz [ 2801.888244][T27253] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:28 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00, 0x105400) 23:02:28 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x1016c0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000280)=""/4096) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x442) write$hidraw(r1, &(0x7f0000000000)="c9", 0xfdef) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000180)=""/213) write$hidraw(r1, &(0x7f0000000140)="c2", 0x1) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:28 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x6) 23:02:28 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x5}}}}}}]}}, 0x0) 23:02:28 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x5, 0xad, &(0x7f0000000000)="c4129d3b6d416cb4203be6ab8816e8bc92f69cd2d6f207ce35b5442748d59be3613a38422cd3fde7e8792638b4f157d3e21456eca9b7e6503906a4063e073436fe659773b1bd3996c88a653ac732209962a79622915c3bfec01e8e3f0211acc4b67fb7471df6355b44c73da0ed2b9ce031e98a230174742a140c65ed5f3902871854e10b1b89f4f711a7cd013564bce84f9acfeef027ac80f640ca31370e4302c82e7ead8543297aebd117ed1f"}) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x97, 0x2d8000) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000280)={0x9f, 0x0, 0x1000, 0x6d1, 0x80000000, 0x36}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1a147f6d, 0x456200) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000001c0)=""/143) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000140)=""/127) [ 2802.157029][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2802.172209][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2802.179350][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:28 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x105400) 23:02:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xa668, 0x9f5d9d5c64d3c5a1) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/209) syz_open_dev$evdev(0xfffffffffffffffc, 0x7f, 0x442401) 23:02:29 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x6) [ 2802.265968][T20128] usb 2-1: USB disconnect, device number 68 23:02:29 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x7) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0x105400) 23:02:29 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0x6) 23:02:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) syz_usb_connect$cdc_ecm(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x470, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x9, 0x20, 0x35, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, '}'}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x8, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x14, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x8000}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x63, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x5, 0x5}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x80, 0x4, 0x20, 0x40, 0x8f}, 0xa6, &(0x7f00000000c0)={0x5, 0xf, 0xa6, 0x4, [@generic={0x76, 0x10, 0x2, "81aa033711b05c8b5ca2a4e32c8d5577990455c69d7d1edd9347fc9890535601cb4deddc75889bb1e738f35296028803d7621e84fd476763c2d365ac9d47a7a604807e7bce554aec64d46c48dd1e66d7428307a4456207651d40d595a200d72a43f48c666a5460442d7872abf0b3d6b97416f4"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "062bbf23326a6103f7c09d93791aca46"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x7, 0xf00, 0xfff9, [0xff0000, 0xc0]}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1012}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42b}}, {0x97, &(0x7f0000000280)=@string={0x97, 0x3, "97cf58c5abb6f4415078e9f538e86fee615797c2f89938c8af258ce301549225af4ea6f84d33d192dfb863106ae0f768131b147c7a38e8cd210c6acd7c79d76853fb9c75711f0abf6c5ccd6950eeaf13d8f4aa12a881274cb42e10b0566a981802ce82a96b8081be7a32544355b490950bd1150a98088295a927a9b451d43d6dab8c23695460cc1c1c7d6b7fbb17bf9672a9f7ccd5"}}]}) 23:02:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/239) 23:02:29 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2802.686773][T20128] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2802.826751][ T32] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2803.047218][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2803.058549][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2803.070654][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2803.080588][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2803.096722][ T32] usb 5-1: Invalid ep0 maxpacket: 512 [ 2803.247239][ T32] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2803.255124][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2803.264341][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2803.272805][T20128] usb 2-1: Product: syz [ 2803.277145][T20128] usb 2-1: Manufacturer: syz [ 2803.281759][T20128] usb 2-1: SerialNumber: syz [ 2803.318100][T27305] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:30 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x6}}}}}}]}}, 0x0) 23:02:30 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x105400) 23:02:30 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x6) 23:02:30 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:30 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x634b, 0x400002) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/34) [ 2803.516672][ T32] usb 5-1: Invalid ep0 maxpacket: 512 [ 2803.522562][ T32] usb usb5-port1: attempt power cycle [ 2803.586817][T20128] cdc_ncm 2-1:1.0: bind() failure 23:02:30 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x105400) [ 2803.612480][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2803.619428][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:30 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2803.696354][T20128] usb 2-1: USB disconnect, device number 69 23:02:30 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0x6) 23:02:30 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/228) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x10000) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000001c0)=[0x6bf5, 0x1]) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/72) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/12) [ 2803.956670][ T32] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2804.046706][ T32] usb 5-1: Invalid ep0 maxpacket: 512 [ 2804.096658][T20128] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 2804.196648][ T32] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2804.297196][ T32] usb 5-1: Invalid ep0 maxpacket: 512 [ 2804.302755][ T32] usb usb5-port1: unable to enumerate USB device [ 2804.466700][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2804.478259][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2804.489525][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2804.499970][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2804.666632][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2804.676002][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2804.684084][T20128] usb 2-1: Product: syz [ 2804.688322][T20128] usb 2-1: Manufacturer: syz [ 2804.693032][T20128] usb 2-1: SerialNumber: syz [ 2804.718061][T27354] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2804.976669][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2804.984263][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2804.991459][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2805.012457][T20128] usb 2-1: USB disconnect, device number 70 23:02:32 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0xfffffffffffffffe, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4093) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000017c0)=0xffbffff8) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000001080)=""/235) r4 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000001800)=""/51) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001040)=0x1ff) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r5 = syz_open_dev$evdev(&(0x7f0000001700), 0x9, 0x80) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000001740)=""/75) 23:02:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x105400) 23:02:32 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x9c260000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:32 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x6) 23:02:32 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000000000, 0x440204) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xbb, 0x4800c0) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x3, 0x5]) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x4, 0x1c7, &(0x7f0000000100)="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"}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000300)=""/115) 23:02:32 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x7}}}}}}]}}, 0x0) 23:02:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x105400) 23:02:32 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:32 executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0x0, 0xc6, 0x1, {0x22, 0x8cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xec, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7, 0x80, 0x20, 0x20, 0x2}, 0xfb, &(0x7f0000000080)={0x5, 0xf, 0xfb, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x4, 0x1, 0x401}, @wireless={0xb, 0x10, 0x1, 0x2, 0x90, 0x5, 0xff, 0x6}, @generic={0xd2, 0x10, 0x3, "446e5ba133f3bf67d989a08e72c25d079de67b0afa642c9f415ba2f4dc0ca688f5bcf96475b5843a22383e361222abdd4cc69a336ec15b1bfd4b93ef89c10ea1584c13f79cb246038ac012fee9a14d1fa3f17cadec779180993048c0211237e6a7aaad8ead493ce6d1c98659bf64f960d7f15562ac89c30630660ec72e1c420a8844edd4004e5027479c94e5a6501d6cbb57701ea5839cf964076feb385460c57843ecd4a1e13bb519025d64cc83481a0ea80e3babfcb548cb20845e2af094fb7286eed8863a69ab249b4998ca3661"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0xb, 0xfff9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x3, 0x1}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:32 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x6) 23:02:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x28000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/174) syz_open_dev$evdev(0xfffffffffffffffc, 0xe6, 0x5) 23:02:32 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x6) [ 2805.740851][ T33] kauditd_printk_skb: 61 callbacks suppressed [ 2805.740868][ T33] audit: type=1800 audit(1623020552.428:747): pid=27413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15074 res=0 errno=0 23:02:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x105400) [ 2805.801515][ T33] audit: type=1800 audit(1623020552.438:748): pid=27414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15090 res=0 errno=0 23:02:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xfffffffb) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x8005) 23:02:32 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2805.846691][T15081] usb 2-1: new full-speed USB device number 71 using dummy_hcd 23:02:32 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0x6) 23:02:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x105400) [ 2805.903011][ T33] audit: type=1804 audit(1623020552.438:749): pid=27413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343938302F48C7C060 dev="sda1" ino=15074 res=1 errno=0 [ 2805.986586][ T33] audit: type=1800 audit(1623020552.438:750): pid=27414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15090 res=0 errno=0 [ 2806.037181][ T33] audit: type=1800 audit(1623020552.438:751): pid=27413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15074 res=0 errno=0 [ 2806.059286][ T33] audit: type=1800 audit(1623020552.438:752): pid=27414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15090 res=0 errno=0 [ 2806.081519][ T33] audit: type=1804 audit(1623020552.468:753): pid=27416 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353234352F48C7C060 dev="sda1" ino=15122 res=1 errno=0 [ 2806.111796][ T6374] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2806.112987][ T33] audit: type=1804 audit(1623020552.478:754): pid=27417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343938302F48C7C060 dev="sda1" ino=15154 res=1 errno=0 [ 2806.149966][ T33] audit: type=1800 audit(1623020552.558:755): pid=27423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14831 res=0 errno=0 [ 2806.171385][ T33] audit: type=1804 audit(1623020552.568:756): pid=27423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343938312F48C7C060 dev="sda1" ino=14831 res=1 errno=0 [ 2806.336536][T15081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2806.347858][T15081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2806.359379][T15081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2806.369218][T15081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2806.386553][ T6374] usb 1-1: Invalid ep0 maxpacket: 512 [ 2806.537001][ T6374] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2806.545090][T15081] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2806.554455][T15081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2806.562571][T15081] usb 2-1: Product: syz [ 2806.566787][T15081] usb 2-1: Manufacturer: syz [ 2806.571406][T15081] usb 2-1: SerialNumber: syz [ 2806.597953][T27397] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x105400) 23:02:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0xa5280) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x1, 0x20, 0xe9, 0x40, 0x4, 0x8}) 23:02:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2806.786536][ T6374] usb 1-1: Invalid ep0 maxpacket: 512 [ 2806.792124][ T6374] usb usb1-port1: attempt power cycle [ 2806.856746][T15081] cdc_ncm 2-1:1.0: bind() failure [ 2806.874598][T15081] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2806.881553][T15081] cdc_ncm 2-1:1.1: bind() failure [ 2806.905569][T15081] usb 2-1: USB disconnect, device number 71 [ 2807.216495][ T6374] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2807.306996][ T6374] usb 1-1: Invalid ep0 maxpacket: 512 [ 2807.456451][ T6374] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2807.546983][ T6374] usb 1-1: Invalid ep0 maxpacket: 512 [ 2807.552619][ T6374] usb usb1-port1: unable to enumerate USB device 23:02:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x301a42) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x4200) 23:02:35 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x8}}}}}}]}}, 0x0) 23:02:35 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x6) 23:02:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xa000000, 0x105400) 23:02:35 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:35 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/91) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) syz_open_dev$char_usb(0xc, 0xb4, 0xb6a) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x20581) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x123002) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000000)=0x1d79) 23:02:35 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:35 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x6) 23:02:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x16000000, 0x105400) 23:02:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x7962c1) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:35 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x22, 0x64, {0x64, 0x6, "b0746ea8d0713dfbfd73c33f88f4e7e43c28879505cce1c33f0ca4397ad877f6dfcc538bdeaa6ae6e0b4ddad39a32016fadb0b0cbf49e31ebf7d29c4ff7a2647d37ac37b61b070011d1cde27d77a6b34d03d7de5b8f83b13ae01e6fd0046bf79ab96"}}, &(0x7f0000000080)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "f251af6729881b272e26e374f649d04b71eeda03f9c97589c7425acee1c4f604d6f1e789b3634dbc00674438539e4286d8ce65fe6330ab3ba7be59f0e309abb12f9fa050b1e29a4b0b0c590e854d7ae2150f0c9f5f2ec6d62884baafab646ab0a96affdc187628e59c7a7c587a53780a2ba03af96a0f62435a11e0f564b639a2c474268376b80c2fea2df1c7014922e8bc5a238747d5b58a61c29b1233e3b5db603c05321758b1721caeda9d6c760e724638fd94667dc01ef86edad992af8e144784feead55a05e242512b990e43a573b3560d6fda"}}, &(0x7f0000000180)={0x0, 0x22, 0x11, {[@local=@item_012={0x1, 0x2, 0x7, "ce"}, @global=@item_4={0x3, 0x1, 0x2, "c3309d4a"}, @global=@item_4={0x3, 0x1, 0x5, "952fcdc8"}, @global=@item_4={0x3, 0x1, 0xa, "23575a18"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x89, 0x1, {0x22, 0x33f}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x11, 0x6f, "e7c9af046013ffa64b4fbabccebdfd978a8094a8883384b9fe8b98e0016f9841b19654eda3bfcc8f45e5d7d051e6194caa9d8378d726f404c1a54205156a73973644c6b6d2e6574a1170c380bbac26c5cd53e5c4afd2afb3dacec553967ca046967fc9f298a81de7cd61a5adb3d147"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2b}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000340)={0x20, 0x1, 0x7c, "046e3a69c34f10841d898faeeca7144d9f58c511cb6c22936e0fb3777a3449dcec216e5ff27ea1aed9f909c1d5e06b280ead7a7ce6aa4f53c3f70b75ffb4578c56de98e15497bc1e4739fdd9c10700eb6c000e87aeff8be215462abe58d158545e904a031d96bbd49f7ffbcf50f8a7cbaa6c7ffcb9bc4deeaa487484"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x2}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x115b42) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:35 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:35 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x6) [ 2809.076435][T20128] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 2809.456791][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2809.468219][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2809.479532][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2809.489356][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2809.656335][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2809.665619][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2809.673686][T20128] usb 2-1: Product: syz [ 2809.678024][T20128] usb 2-1: Manufacturer: syz [ 2809.682652][T20128] usb 2-1: SerialNumber: syz [ 2809.707804][T27466] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:36 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:36 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/184) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x105400) 23:02:36 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x6) 23:02:36 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x18}}}}}}]}}, 0x0) 23:02:36 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/97) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x101040) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x20, 0xfffffffc, 0x8, 0x7, 0x0, 0x10001}) [ 2809.978301][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2809.989878][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2809.996874][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2810.062993][T20128] usb 2-1: USB disconnect, device number 72 23:02:36 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10405) 23:02:36 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x6) 23:02:36 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x800, 0x20c1) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x2, 0x3, 0x0, {0x1, 0xffe0}, {0x6e4b, 0x1}, @rumble={0x70f, 0x8}}) 23:02:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000, 0x105400) 23:02:36 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:36 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x6) 23:02:36 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/129) 23:02:36 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x59ae00) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0x105400) 23:02:37 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffffffffffff, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2810.516286][T20128] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 2810.876717][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2810.888055][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2810.899447][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2810.909276][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2811.086719][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2811.095805][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2811.103892][T20128] usb 2-1: Product: syz [ 2811.108222][T20128] usb 2-1: Manufacturer: syz [ 2811.112818][T20128] usb 2-1: SerialNumber: syz [ 2811.138165][T27511] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:38 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:02:38 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/231) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x7f) 23:02:38 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x1, 0x1]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x4, 0x85]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:38 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:38 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x6) 23:02:38 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0x105400) [ 2811.406373][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2811.425455][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2811.432388][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2811.492078][ T33] kauditd_printk_skb: 66 callbacks suppressed [ 2811.492095][ T33] audit: type=1800 audit(1623020558.178:823): pid=27559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15666 res=0 errno=0 23:02:38 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/178) 23:02:38 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:38 executing program 0: syz_open_dev$evdev(&(0x7f0000000180), 0x2e3d, 0x484642) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x50d6c0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000280)=""/30) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0xc00) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000001c0)=""/102) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/13) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x6, 0x1813c2) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000040)=""/225) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000002c0)=""/210) [ 2811.552194][T20128] usb 2-1: USB disconnect, device number 73 23:02:38 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x6) 23:02:38 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x48000000, 0x105400) [ 2811.626779][ T33] audit: type=1804 audit(1623020558.188:824): pid=27558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343932312F48C7C060 dev="sda1" ino=15650 res=1 errno=0 23:02:38 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c000000, 0x105400) [ 2811.719514][ T33] audit: type=1800 audit(1623020558.208:825): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15714 res=0 errno=0 [ 2811.748623][ T33] audit: type=1804 audit(1623020558.218:826): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343938392F48C7C060 dev="sda1" ino=15666 res=1 errno=0 [ 2811.831073][ T33] audit: type=1800 audit(1623020558.218:827): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15714 res=0 errno=0 [ 2811.854688][ T33] audit: type=1800 audit(1623020558.218:829): pid=27559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15666 res=0 errno=0 [ 2811.877047][ T33] audit: type=1800 audit(1623020558.218:828): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15714 res=0 errno=0 [ 2811.898384][ T33] audit: type=1800 audit(1623020558.378:830): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15538 res=0 errno=0 [ 2811.919777][ T33] audit: type=1800 audit(1623020558.388:831): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15538 res=0 errno=0 [ 2811.942165][ T33] audit: type=1800 audit(1623020558.388:832): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15538 res=0 errno=0 [ 2812.026134][T20128] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 2812.386684][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2812.397766][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2812.409403][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2812.419652][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2812.586588][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2812.595898][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2812.604012][T20128] usb 2-1: Product: syz [ 2812.608334][T20128] usb 2-1: Manufacturer: syz [ 2812.612961][T20128] usb 2-1: SerialNumber: syz [ 2812.637570][T27562] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:39 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x2}}}}}}]}}, 0x0) 23:02:39 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0x6) 23:02:39 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:39 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x721400) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x6a08c4) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x2, 0x12, &(0x7f0000000000)="c081c43dcba2641a3d2affe86aac2fe5f799"}) 23:02:39 executing program 0: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x3, 0x2}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:39 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x68000000, 0x105400) [ 2812.898455][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2812.940435][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2812.947374][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:39 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:39 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0x6) 23:02:39 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x3, 0x13, &(0x7f0000000000)="49ed0fdfe7bf1c081465a974e31371cf03a190"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2813.024859][T20128] usb 2-1: USB disconnect, device number 74 23:02:39 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x2400) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/208) 23:02:39 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c000000, 0x105400) 23:02:39 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2813.466044][T20128] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 2813.826532][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2813.837854][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2813.849405][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2813.859370][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2814.056513][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2814.065768][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2814.073861][T20128] usb 2-1: Product: syz [ 2814.078125][T20128] usb 2-1: Manufacturer: syz [ 2814.082713][T20128] usb 2-1: SerialNumber: syz [ 2814.107502][T27611] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:41 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x6) 23:02:41 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x14, 0xfd, &(0x7f0000000000)="a8822f7762843fa379546ffbf58e40489668571bf56e3811d94085e2fdc9ff8ed8bc431cd1efd8af57de8719c4a99a8c4e3d6b9b9537c0ada3f611d6bd8697eb5844b374f9a000b5bceca99d22500ecc6d6992afa43ea5385454acbc404bdb952fc298febe6a16c3eda2d3615530d26af6f64cd4ce30389f52f0cf0ed207d5951084a5ab1d4cf47ab318d8dd76f7cb90cd95b6be378033ae4601823c394e59f2368bc419468c406e20401da54b5a9ae5f9f3209b6dd00f9df07943004059a5bda5fed4ad015592452835fe94084c4b69f6e10e3839f5962e3506fa7038450e9cfdc1be81f8128b1343de11a1f2f1b243c5fee8ba3e40647faa894d56cb"}) 23:02:41 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/196) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x2, 0x6f64a846, 0x7, 0x3, 0x2326, 0xfffffffd}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x1, 0x1d, 0x4, 0x8000, "f5a66964484ebdf689fd104b908d7366b490bb22ced5aaed0618bf9796269de8"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0xe6, 0x2, 0xfff9, 0x0, "e2049e682279c2b0f090eb701f8847d13b263727a097f6471d04d41cf0ef9969"}) 23:02:41 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x74000000, 0x105400) 23:02:41 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x3}}}}}}]}}, 0x0) 23:02:41 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2814.366395][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2814.383965][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2814.391331][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:41 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2814.495644][T20128] usb 2-1: USB disconnect, device number 75 23:02:41 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x6) 23:02:41 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a000000, 0x105400) 23:02:41 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:41 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="77f560c077978470f9ca20ce17c69f7b4b67164766f73af63b1e5b5aa6b26df415946ba30671fc01"}) 23:02:41 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:41 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0xe3e1, 0x8000, 0x401, 0x664, 0x20, 0x6}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x48080) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0xfffffff6, 0x2]) 23:02:41 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xa1ffffff, 0x105400) 23:02:41 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0x6) [ 2814.895993][T20128] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2815.256045][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2815.267046][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2815.279108][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2815.289158][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2815.456871][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2815.466285][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2815.474404][T20128] usb 2-1: Product: syz [ 2815.478639][T20128] usb 2-1: Manufacturer: syz [ 2815.483288][T20128] usb 2-1: SerialNumber: syz [ 2815.517043][T27655] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:42 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}}]}}, 0x0) 23:02:42 executing program 0: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x2, 0x3, 0x5, 0x5f, 0x9b, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/123) 23:02:42 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/218) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:42 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:42 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x6) 23:02:42 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0x105400) [ 2815.807987][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2815.828363][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2815.835260][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:42 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:42 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000000, 0x101640) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/146) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4000) 23:02:42 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0x105400) [ 2815.913908][T20128] usb 2-1: USB disconnect, device number 76 23:02:42 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0x6) 23:02:42 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/44) 23:02:42 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x105400) [ 2816.405905][T20128] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 2816.765990][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2816.777111][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2816.789192][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2816.799162][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2816.966446][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2816.975619][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2816.984029][T20128] usb 2-1: Product: syz [ 2816.988261][T20128] usb 2-1: Manufacturer: syz [ 2816.993222][T20128] usb 2-1: SerialNumber: syz [ 2817.017314][T27713] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:43 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x5}}}}}}]}}, 0x0) 23:02:43 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:43 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0x6) 23:02:43 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x6) 23:02:43 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x10040) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/5) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:43 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffff7f, 0x105400) [ 2817.276401][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2817.284530][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2817.291769][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2817.309054][ T33] kauditd_printk_skb: 78 callbacks suppressed [ 2817.309072][ T33] audit: type=1800 audit(1623020563.998:911): pid=27743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14907 res=0 errno=0 23:02:44 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:44 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0x6) [ 2817.412650][T20128] usb 2-1: USB disconnect, device number 77 23:02:44 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000180), 0xb, 0x280) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f00000001c0)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/214) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x100000000, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x9) 23:02:44 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffa1, 0x105400) 23:02:44 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x105400) [ 2817.492276][ T33] audit: type=1804 audit(1623020564.028:912): pid=27744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353236342F48C7C060 dev="sda1" ino=14917 res=1 errno=0 23:02:44 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0x6) [ 2817.647810][ T33] audit: type=1804 audit(1623020564.038:913): pid=27743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F343939382F48C7C060 dev="sda1" ino=14907 res=1 errno=0 [ 2817.713170][ T33] audit: type=1800 audit(1623020564.038:914): pid=27743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14907 res=0 errno=0 [ 2817.737212][ T33] audit: type=1800 audit(1623020564.038:915): pid=27745 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=16159 res=0 errno=0 [ 2817.759386][ T33] audit: type=1800 audit(1623020564.068:916): pid=27746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16165 res=0 errno=0 [ 2817.780826][ T33] audit: type=1800 audit(1623020564.078:917): pid=27746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16165 res=0 errno=0 [ 2817.802243][ T33] audit: type=1800 audit(1623020564.078:918): pid=27746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16165 res=0 errno=0 [ 2817.823661][T20128] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 2817.824598][ T33] audit: type=1804 audit(1623020564.088:919): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F343939372F48C7C060 dev="sda1" ino=16166 res=1 errno=0 [ 2817.862124][ T33] audit: type=1804 audit(1623020564.118:920): pid=27745 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343933302F48C7C060 dev="sda1" ino=16159 res=1 errno=0 [ 2818.206303][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2818.217481][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2818.228926][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2818.238948][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2818.406314][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2818.415477][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2818.423566][T20128] usb 2-1: Product: syz [ 2818.427794][T20128] usb 2-1: Manufacturer: syz [ 2818.432524][T20128] usb 2-1: SerialNumber: syz [ 2818.467149][T27751] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:45 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x6}}}}}}]}}, 0x0) 23:02:45 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x105400) 23:02:45 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:45 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/12) syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x5) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/84) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000080)=""/20) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000001c0)=""/123) syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x8f, &(0x7f0000000240)="c45015230e97901e6d5bdd34d1d38fdea987eb01dfc45fd635e480b5a2a24a63bd5d204debadf3f22478d404280617305191b0a3d5d83ff8f4804c1ae3abd6c4bdbd0d8137f3fad50ba42307e13ea7d5f57b6a9134b2dfaa70a2a4fef6de781a84b4bd301f69643c22b1ad2f07720e186fde379b39c5485ce88f8e6e2fb01c82d8240ba3153b13f80e54afbbfdfb01") ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0xee4e47df2ebbff03, 0x0, &(0x7f0000000140)}) 23:02:45 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0x6) 23:02:45 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x105400) [ 2818.745880][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2818.767795][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2818.774793][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2818.832803][T20128] usb 2-1: USB disconnect, device number 78 23:02:45 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:45 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0x105400) 23:02:45 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0x6) 23:02:45 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0x6) 23:02:45 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:45 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x105400) [ 2819.225745][T20128] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 2819.585763][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2819.596986][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2819.608992][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2819.618931][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2819.796208][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2819.805369][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2819.813470][T20128] usb 2-1: Product: syz [ 2819.817706][T20128] usb 2-1: Manufacturer: syz [ 2819.822307][T20128] usb 2-1: SerialNumber: syz [ 2819.847163][T27794] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:46 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x7}}}}}}]}}, 0x0) 23:02:46 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0x6) 23:02:46 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0x6) 23:02:46 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:46 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0x105400) 23:02:46 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/58) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2820.105826][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2820.136906][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2820.143780][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:46 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000, 0x115002) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:46 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0x105400) [ 2820.220889][T20128] usb 2-1: USB disconnect, device number 79 23:02:46 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x9c26000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:47 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x6) 23:02:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0x6) 23:02:47 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2820.685674][T20128] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 2821.056126][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2821.067335][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2821.079687][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2821.089678][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2821.266060][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2821.275244][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2821.283332][T20128] usb 2-1: Product: syz [ 2821.287695][T20128] usb 2-1: Manufacturer: syz [ 2821.292302][T20128] usb 2-1: SerialNumber: syz [ 2821.317142][T27840] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:48 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x8}}}}}}]}}, 0x0) 23:02:48 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0x105400) 23:02:48 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x701640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/173) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/31) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000000)=[0x80000001, 0x4]) 23:02:48 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0x6) 23:02:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x105400) [ 2821.576549][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2821.584952][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2821.592041][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0x6) 23:02:48 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2821.711101][T20128] usb 2-1: USB disconnect, device number 80 23:02:48 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0x105400) 23:02:48 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0x6) 23:02:48 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000180), 0xb, 0x280) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f00000001c0)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/214) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x100000000, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x9) 23:02:48 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0x6) [ 2822.155504][T20128] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 2822.516026][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2822.527360][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2822.539761][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2822.549963][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2822.715982][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2822.725227][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2822.733497][T20128] usb 2-1: Product: syz [ 2822.737834][T20128] usb 2-1: Manufacturer: syz [ 2822.742582][T20128] usb 2-1: SerialNumber: syz [ 2822.767339][T27882] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:49 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x18}}}}}}]}}, 0x0) 23:02:49 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:49 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0x105400) 23:02:49 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000180), 0xb, 0x280) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f00000001c0)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/214) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x100000000, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x9) 23:02:49 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:49 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0x6) [ 2823.037225][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2823.081986][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2823.089025][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2823.092033][ T33] kauditd_printk_skb: 80 callbacks suppressed [ 2823.092048][ T33] audit: type=1804 audit(1623020569.779:1001): pid=27917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353237342F48C7C060 dev="sda1" ino=16379 res=1 errno=0 23:02:49 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffff000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2823.184603][T20128] usb 2-1: USB disconnect, device number 81 23:02:49 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0x6) 23:02:49 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0x105400) [ 2823.269897][ T33] audit: type=1800 audit(1623020569.859:1002): pid=27920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16814 res=0 errno=0 23:02:50 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0x105400) 23:02:50 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0x6) 23:02:50 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10165d) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2823.370448][ T33] audit: type=1804 audit(1623020569.869:1003): pid=27918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F353030342F48C7C060 dev="sda1" ino=16375 res=1 errno=0 [ 2823.433310][ T33] audit: type=1800 audit(1623020569.879:1004): pid=27921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=16373 res=0 errno=0 [ 2823.500278][ T33] audit: type=1804 audit(1623020569.889:1005): pid=27921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F353030382F48C7C060 dev="sda1" ino=16373 res=1 errno=0 [ 2823.533773][ T33] audit: type=1800 audit(1623020569.889:1006): pid=27921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=16373 res=0 errno=0 [ 2823.564982][ T33] audit: type=1800 audit(1623020569.889:1007): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16814 res=0 errno=0 [ 2823.586671][ T33] audit: type=1800 audit(1623020569.889:1008): pid=27920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=16814 res=0 errno=0 [ 2823.608428][T20128] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 2823.609893][ T33] audit: type=1804 audit(1623020569.969:1009): pid=27927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343933382F48C7C060 dev="sda1" ino=16379 res=1 errno=0 [ 2823.647054][ T33] audit: type=1804 audit(1623020570.039:1010): pid=27937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353237352F48C7C060 dev="sda1" ino=14952 res=1 errno=0 [ 2823.996053][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2824.007250][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2824.018663][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2824.028704][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2824.195908][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2824.205283][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.213357][T20128] usb 2-1: Product: syz [ 2824.217761][T20128] usb 2-1: Manufacturer: syz [ 2824.222494][T20128] usb 2-1: SerialNumber: syz [ 2824.246861][T27923] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:51 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0xf}}}}]}}, 0x0) 23:02:51 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0x105400) 23:02:51 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4) 23:02:51 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:51 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x102000) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:02:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xa1ffffff, 0x105400) [ 2824.509825][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2824.580415][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2824.587448][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:51 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/196) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x2, 0x6f64a846, 0x7, 0x3, 0x2326, 0xfffffffd}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x1, 0x1d, 0x4, 0x8000, "f5a66964484ebdf689fd104b908d7366b490bb22ced5aaed0618bf9796269de8"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0xe6, 0x2, 0xfff9, 0x0, "e2049e682279c2b0f090eb701f8847d13b263727a097f6471d04d41cf0ef9969"}) 23:02:51 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101e40) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2824.653484][T20128] usb 2-1: USB disconnect, device number 82 23:02:51 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x105400) 23:02:51 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10) 23:02:51 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xa1ffffff, 0x105400) 23:02:51 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x109e41) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000002c0)=""/132) r1 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x3f, 0x7f, 0x4, 0x8, 0x80}, 0xb4, &(0x7f0000000080)={0x5, 0xf, 0xb4, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x65, 0x5, 0x251550a, 0xf, 0x80, [0xc00f, 0xff0000, 0x0, 0x0, 0xc000]}, @generic={0x7d, 0x10, 0xb, "46003e6743d123c8069f92c08d42dacd57f7f70655799eb606f778e3f2e3cdfc063d71fe84d58dbdba27160589c18acddd5874b91d230d1269b96e64708e22a03227ee45bbcd5168b0e2c6a831455a3c9da11a2e1a6e61f6849c532d3109cc3fb151988a2df3c1782b8d3795ead4c4ffe85595efd50c846aeac4"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x50, 0xff, 0x8, 0x8001, 0xe9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3029}}, {0xb3, &(0x7f0000000180)=@string={0xb3, 0x3, "a01d3e183ecacde430085279fce765cae879e7a44893b3beeb4339751d817e1ffa6bdebbb01711a84929564ee7dfcb612b52015f82e130ae0fce7bea2b5573d52e9147c52c12b023e7610d3d38227d3d88997943d8361656bf175eebcfaf62440e27b7c621018fbd94cf9f3c6b1893568c5791d6887f5cb36c59be2568d3e0f25daa1074ecf3ac56115b13ebae75d45eb6b3fc3704eaa7102ad6d65708e49db37afbb52f563627fb8866d7fcbee715840e"}}]}) syz_usb_ep_read(r1, 0x0, 0x28, &(0x7f0000000280)=""/40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2825.055364][T20128] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 2825.185345][ T6374] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2825.426032][T20128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2825.426209][ T6374] usb 3-1: Using ep0 maxpacket: 16 [ 2825.436456][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2825.452598][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2825.636085][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2825.645331][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2825.653412][T20128] usb 2-1: Product: syz [ 2825.657620][T20128] usb 2-1: Manufacturer: syz [ 2825.662222][T20128] usb 2-1: SerialNumber: syz [ 2825.676132][ T6374] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32 [ 2825.686286][ T6374] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2825.686704][T27967] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2825.699145][ T6374] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2825.726158][T20128] usb 2-1: selecting invalid altsetting 1 [ 2825.915349][ T6374] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2825.924593][ T6374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2825.932818][ T6374] usb 3-1: Product: syz [ 2825.937377][ T6374] usb 3-1: Manufacturer: ᶠᠾ쨾࠰祒쩥秨ꓧ鍈뺳䏫甹脝὾毺믞ឰꠑ⥉乖懋别弁기츏唫핳鄮앇ሬ⎰懧㴍∸㵽馈䍹㛘嘖ឿ꿏䑢✎욷ġ붏쾔㲟ᡫ嚓垌횑羈덜奬▾퍨꩝琐嚬嬑疮廔뎶㟼Ⴇ혪埖뎝ﭺ⾵㙖ﬧ暈ﳗ萕 23:02:52 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x10}}}}]}}, 0x0) 23:02:52 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/196) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x2, 0x6f64a846, 0x7, 0x3, 0x2326, 0xfffffffd}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x1, 0x1d, 0x4, 0x8000, "f5a66964484ebdf689fd104b908d7366b490bb22ced5aaed0618bf9796269de8"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0xe6, 0x2, 0xfff9, 0x0, "e2049e682279c2b0f090eb701f8847d13b263727a097f6471d04d41cf0ef9969"}) 23:02:52 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xa00000000000000, 0x105400) 23:02:52 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x105400) [ 2825.964426][ T6374] usb 3-1: SerialNumber: syz [ 2825.968169][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2825.992180][T20128] cdc_ncm 2-1:1.1: skipping garbage [ 2825.997632][T20128] cdc_ncm 2-1:1.1: skipping garbage [ 2826.002871][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2826.009839][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2826.099094][T27988] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2826.113803][T20128] usb 2-1: USB disconnect, device number 83 23:02:52 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x1600000000000000, 0x105400) 23:02:52 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/177) 23:02:52 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:52 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:53 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0x105400) 23:02:53 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x2, 0x1]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x16, 0x27, &(0x7f00000000c0)="cf14bc1319fea46aef321c527e7860e7d0bd6453ab8042bf14a102c68e7033ef55f1a93cf85a68"}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x7fff, 0x640001) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/14) 23:02:53 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe5, 0x105100) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x7ff, 0x5, 0xce2d, 0x81, 0x95}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0xbd, 0x15, 0x0, 0x24, "eeb7eab065b0355592066d911a05ee46fd029083771d5d86ecec46bbe7a02eb4"}) [ 2826.483723][ T6374] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 2826.516644][ T6374] usb 3-1: USB disconnect, device number 118 [ 2826.537597][ T6374] usblp0: removed [ 2826.605333][T20128] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 2826.965714][T20128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2826.976552][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2826.987725][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2827.155759][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2827.165100][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2827.173178][T20128] usb 2-1: Product: syz [ 2827.177414][T20128] usb 2-1: Manufacturer: syz [ 2827.182015][T20128] usb 2-1: SerialNumber: syz [ 2827.206620][T28015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2827.226246][T20128] usb 2-1: selecting invalid altsetting 1 23:02:54 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x2}}}}]}}, 0x0) 23:02:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:54 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000000000000, 0x105400) 23:02:54 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:54 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0xfbe, 0x8000, 0x4, 0xffff, 0x800, 0x3ff}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/68) 23:02:54 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/148) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x14, 0x84, &(0x7f00000000c0)="be1f58efca22f53cc78d90348c55a5df40bfe137b444a8bd32493269bfebf20e8e42cb7a27890d579b1006ffc22264485e888715db6cb69061baaac42761e9de87e5b16eb66077c01f2c364c6ec8870c1da6ed4fa3ba88fe805bf70a99a15af426e27ee44850f3b0d041df748201be0a231f350dd0a17e2caf092f4bbc6b12283b7eb556"}) [ 2827.455310][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2827.486442][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2827.493435][T20128] cdc_ncm 2-1:1.1: bind() failure 23:02:54 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:54 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x14, 0xfd, &(0x7f0000000000)="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"}) 23:02:54 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0x105400) [ 2827.573452][T20128] usb 2-1: USB disconnect, device number 84 23:02:54 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x98b, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffff6f, 0x900) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x4, 0xcc, &(0x7f0000000040)="45c458b7d956dbd54e6a2e5bd7cae7fdcf3105d68370e6d07948539faaf7c8b2eee25f7e06a3bba6275e98ef2ab307726b06abb7a3d3911a03c52293fcbbd98519302fe99a4ffd9d36c4663e119536baf56767ab49a40e1fe760921faa07e291dd66937fb4ad018a5eb96497bd977566f52d820d7a36cb0de2a915f518161203e6dbcbe1315ec2ff789f51271f578be0678bab99c2607fb4b0e64482f469f1254e959665c6fab2cc87a934c7b331809dc11263e8e288dab1cb1c5ca136922715e8a3d56df9bd5601ce704196"}) 23:02:54 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/127) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:54 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0x105400) [ 2827.985187][T20128] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 2828.345674][T20128] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2828.354869][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2828.365919][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2828.377006][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2828.386989][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2828.396854][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2828.555751][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2828.565094][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2828.573284][T20128] usb 2-1: Product: syz [ 2828.577717][T20128] usb 2-1: Manufacturer: syz [ 2828.582510][T20128] usb 2-1: SerialNumber: syz [ 2828.606590][T28073] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:55 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x3}}}}]}}, 0x0) 23:02:55 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x68000000, 0x105400) 23:02:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:55 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x6) 23:02:55 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4800000000000000, 0x105400) 23:02:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x80004507, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x6, 0x4ac403) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x100, 0x8, 0x8, 0x9, 0xfffffffd}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) [ 2828.851690][T20128] usb 2-1: selecting invalid altsetting 0 [ 2828.857674][T20128] usb 2-1: selecting invalid altsetting 0 [ 2828.885328][ T33] kauditd_printk_skb: 73 callbacks suppressed [ 2828.885345][ T33] audit: type=1800 audit(1623020575.559:1084): pid=28105 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14387 res=0 errno=0 [ 2828.915723][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2828.940625][T20128] usb 2-1: selecting invalid altsetting 0 23:02:55 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c00000000000000, 0x105400) 23:02:55 executing program 0: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x3, 0x2}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2828.961443][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2828.993212][T20128] usb 2-1: selecting invalid altsetting 0 23:02:55 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:55 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400000, 0x200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x3f, 0x1b, 0x1000, 0x1, "d0cc83811859f2e68e6fa65da850288c1d3e958df253dd94e6fbd912107e4435"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:55 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/126) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2829.002834][ T33] audit: type=1800 audit(1623020575.569:1085): pid=28106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14419 res=0 errno=0 [ 2829.047713][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2829.082479][T20128] usb 2-1: selecting invalid altsetting 0 [ 2829.112710][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:02:55 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6800000000000000, 0x105400) [ 2829.128486][ T33] audit: type=1800 audit(1623020575.579:1086): pid=28105 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14387 res=0 errno=0 [ 2829.159302][T20128] usb 2-1: USB disconnect, device number 85 [ 2829.222902][ T33] audit: type=1800 audit(1623020575.579:1087): pid=28105 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14387 res=0 errno=0 [ 2829.255959][ T33] audit: type=1800 audit(1623020575.579:1088): pid=28106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14419 res=0 errno=0 [ 2829.277625][ T33] audit: type=1800 audit(1623020575.639:1089): pid=28109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14580 res=0 errno=0 [ 2829.300150][ T33] audit: type=1804 audit(1623020575.649:1090): pid=28109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F353031372F48C7C060 dev="sda1" ino=14580 res=1 errno=0 [ 2829.331076][ T33] audit: type=1800 audit(1623020575.659:1091): pid=28109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14580 res=0 errno=0 [ 2829.352521][ T33] audit: type=1800 audit(1623020575.739:1092): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14259 res=0 errno=0 [ 2829.374462][ T33] audit: type=1800 audit(1623020575.749:1093): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14259 res=0 errno=0 [ 2829.605068][T20128] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2829.965708][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2829.976940][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2829.988440][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2829.998590][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2830.008292][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2830.195580][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2830.204850][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.212940][T20128] usb 2-1: Product: syz [ 2830.217216][T20128] usb 2-1: Manufacturer: syz [ 2830.222083][T20128] usb 2-1: SerialNumber: syz [ 2830.246478][T28114] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:57 executing program 0: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x3, 0x2}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:57 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x844042) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/118) 23:02:57 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x5}}}}]}}, 0x0) 23:02:57 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c00000000000000, 0x105400) [ 2830.495544][T20128] usb 2-1: selecting invalid altsetting 0 [ 2830.501433][T20128] usb 2-1: selecting invalid altsetting 0 [ 2830.542373][T20128] cdc_ncm 2-1:1.0: bind() failure 23:02:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x402) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:02:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) 23:02:57 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/7) [ 2830.591376][T20128] usb 2-1: selecting invalid altsetting 0 [ 2830.618997][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:02:57 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7400000000000000, 0x105400) [ 2830.643199][T20128] usb 2-1: selecting invalid altsetting 0 [ 2830.671971][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 23:02:57 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x6) 23:02:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) [ 2830.700271][T20128] usb 2-1: selecting invalid altsetting 0 [ 2830.730923][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:02:57 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40004) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/23) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x101, 0x2]) 23:02:57 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/39) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/64) 23:02:57 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7a00000000000000, 0x105400) [ 2830.780244][T20128] usb 2-1: USB disconnect, device number 86 23:02:57 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3b) [ 2831.204998][T20128] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 2831.585449][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2831.599107][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2831.610152][T20128] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2831.623259][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2831.633103][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2831.642828][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2831.805475][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2831.814656][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2831.822738][T20128] usb 2-1: Product: syz [ 2831.827069][T20128] usb 2-1: Manufacturer: syz [ 2831.831700][T20128] usb 2-1: SerialNumber: syz [ 2831.855998][T28159] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:58 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x6}}}}]}}, 0x0) 23:02:58 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4c000000, 0x105400) 23:02:58 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:02:58 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x7, 0x8001) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x82, 0x6) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000000)=""/177) 23:02:58 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xa1ffffff00000000, 0x105400) 23:02:58 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x52, 0xff, 0x85, {0x800, 0xffe0}, {0xdf, 0x101}, @ramp={0x7, 0x5, {0x5, 0x1, 0x3}}}) [ 2832.115333][T20128] usb 2-1: selecting invalid altsetting 0 [ 2832.121145][T20128] usb 2-1: selecting invalid altsetting 0 [ 2832.156037][T20128] cdc_ncm 2-1:1.0: bind() failure 23:02:58 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0x105400) [ 2832.203954][T20128] usb 2-1: selecting invalid altsetting 0 [ 2832.238121][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:02:58 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/243) 23:02:59 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2832.263921][T20128] usb 2-1: selecting invalid altsetting 0 [ 2832.296268][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 23:02:59 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x2ef40) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/165) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x1, 0x9, 0xfffff800, 0x8, 0x1}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x3f, 0xfffff881]) 23:02:59 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40004) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/23) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x101, 0x2]) 23:02:59 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0x105400) [ 2832.323145][T20128] usb 2-1: selecting invalid altsetting 0 [ 2832.355149][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2832.398387][T20128] usb 2-1: USB disconnect, device number 87 [ 2832.824874][T20128] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 2833.184905][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2833.196143][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2833.208818][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2833.219191][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2833.229047][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2833.395429][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2833.404620][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2833.412791][T20128] usb 2-1: Product: syz [ 2833.417362][T20128] usb 2-1: Manufacturer: syz [ 2833.421963][T20128] usb 2-1: SerialNumber: syz [ 2833.446397][T28210] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:00 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x7}}}}]}}, 0x0) 23:03:00 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x105e40) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0xfffffffa) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/33) 23:03:00 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000000)=""/4096) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000002000)=""/75) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000001000)=""/4096) 23:03:00 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:03:00 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0x105400) 23:03:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40004) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/23) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x101, 0x2]) [ 2833.686037][T20128] usb 2-1: selecting invalid altsetting 0 [ 2833.691847][T20128] usb 2-1: selecting invalid altsetting 0 [ 2833.740237][T20128] cdc_ncm 2-1:1.0: bind() failure 23:03:00 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x6) [ 2833.784943][T20128] usb 2-1: selecting invalid altsetting 0 [ 2833.819030][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:03:00 executing program 5: syz_open_dev$evdev(&(0x7f0000001000), 0x7, 0x40000) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x72e3afec, 0x80400) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/184) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x4, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000002740)=""/4085) syz_open_dev$evdev(0xfffffffffffffffc, 0x88, 0x84200) 23:03:00 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffff7f00000000, 0x105400) 23:03:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x9, 0x80082) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000500)=""/49) syz_usb_connect$uac1(0x5, 0xf1, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x81, 0x0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x5}, [@selector_unit={0x9, 0x24, 0x5, 0x2, 0x0, "d34f40c5"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x1, 0x3f, "60ef3131e5c8"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x0, 0x58, "75e8d1011a47"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x7f, "cf"}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x3, 0x6, [0x3, 0x3, 0xd, 0x2, 0x9, 0x4], 0x40}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x9, 0x1, 'L'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x20, 0xc0, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x6, "f2f4a2910f82f44829"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x98, 0x3, 0xf9, 0x4, "14a79b9d3395bd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3f, 0x1, 0xfe, {0x7, 0x25, 0x1, 0x2, 0xc0, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0xfe, 0x7f, "abd6"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0xf9, 0x0, 'uBy'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x8, 0xb6, {0x7, 0x25, 0x1, 0x0, 0x8a, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x7, 0x3, 0x2, 0x10}, 0xdd, &(0x7f0000000240)=ANY=[@ANYBLOB="050fdd00047b100a2e2ae91c9a8fca74939676fb5c37472f921a19ce21a3f6bebb3a2daa80d2b325de0c3031211188e63c71e2ef461449795d5a22877ba0fd6c11b32b3166b850f7cb16a4e7b28b60cbedb692f245009d8e59acd5060ea6bf8baf850eb1bb32f9a529b21c2f4f1da2d64b10030d07342ed7248bbea40b9cec3051eaf0113adfd3428d406c7d96a73aa471f768d36b88cb57007bd8b70c8f4b5101ce7a02cd8cae23da1b7702885acd495548cb91a6765d0007f6660b1001028000091f06000307100200a80200"/221], 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x24, &(0x7f0000000400)=@string={0x24, 0x3, "300d0bc5c44e0726a41d5427c7d9f7fee7f81a26d98f5a37f7743307b2214e66110d"}}]}) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/168) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0xe0, 0x1, 0x7, 0x5, "90f64c2352185e5c8799efb4c4e75bbebc1a68c4daedf2526f7ee74e4241b69b"}) [ 2833.858537][T20128] usb 2-1: selecting invalid altsetting 0 [ 2833.883152][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2833.916151][T20128] usb 2-1: selecting invalid altsetting 0 [ 2833.927342][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:03:00 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0x105400) [ 2833.960720][T20128] usb 2-1: USB disconnect, device number 88 [ 2833.960988][ T33] kauditd_printk_skb: 65 callbacks suppressed [ 2833.961003][ T33] audit: type=1800 audit(1623020580.639:1159): pid=28266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15000 res=0 errno=0 23:03:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40004) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/23) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x101, 0x2]) [ 2834.109059][ T33] audit: type=1800 audit(1623020580.659:1160): pid=28266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15000 res=0 errno=0 [ 2834.131711][ T33] audit: type=1800 audit(1623020580.659:1161): pid=28266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15000 res=0 errno=0 [ 2834.154210][ T33] audit: type=1800 audit(1623020580.679:1162): pid=28267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15006 res=0 errno=0 [ 2834.177236][ T33] audit: type=1804 audit(1623020580.689:1163): pid=28267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F353032312F48C7C060 dev="sda1" ino=15006 res=1 errno=0 [ 2834.208536][ T33] audit: type=1800 audit(1623020580.759:1164): pid=28281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14990 res=0 errno=0 [ 2834.230939][ T33] audit: type=1800 audit(1623020580.769:1165): pid=28281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14990 res=0 errno=0 [ 2834.252843][ T33] audit: type=1800 audit(1623020580.769:1166): pid=28281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14990 res=0 errno=0 [ 2834.275183][ T33] audit: type=1800 audit(1623020580.819:1167): pid=28283 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14983 res=0 errno=0 [ 2834.294809][ T32] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2834.374799][T20128] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 2834.655777][ T32] usb 3-1: descriptor type invalid, skip [ 2834.661456][ T32] usb 3-1: descriptor type invalid, skip [ 2834.667169][ T32] usb 3-1: descriptor type invalid, skip [ 2834.744944][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2834.756252][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2834.767361][ T32] usb 3-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2834.776922][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2834.789952][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2834.799755][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2834.809605][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2834.816299][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 2835.024831][ T32] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2835.034054][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.042168][ T32] usb 3-1: Product: Э [ 2835.046343][ T32] usb 3-1: Manufacturer: ᐉ [ 2835.050949][ T32] usb 3-1: SerialNumber: ര씋仄☇ᶤ❔ﻷ☚这㝚瓷ܳ↲晎഑ [ 2835.059778][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2835.069011][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.077321][T20128] usb 2-1: Product: syz [ 2835.081613][T20128] usb 2-1: Manufacturer: syz [ 2835.086378][T20128] usb 2-1: SerialNumber: syz [ 2835.100053][ T32] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 2835.109026][ T32] usb 3-1: no configuration chosen from 1 choice [ 2835.117189][T28257] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:02 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x8}}}}]}}, 0x0) 23:03:02 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/165) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:02 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x6) 23:03:02 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105402) 23:03:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40004) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/23) [ 2835.354811][T20128] usb 2-1: selecting invalid altsetting 0 [ 2835.360628][T20128] usb 2-1: selecting invalid altsetting 0 [ 2835.388661][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2835.410032][ T33] audit: type=1800 audit(1623020582.089:1168): pid=28296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15075 res=0 errno=0 [ 2835.436037][T20128] usb 2-1: selecting invalid altsetting 0 [ 2835.477865][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2835.507049][T20128] usb 2-1: selecting invalid altsetting 0 23:03:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x0, 0x2]) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xeb7, 0x80, 0x400, 0x3, 0x3f}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x4002) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/206) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)=""/30) 23:03:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40004) 23:03:02 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105403) 23:03:02 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/231) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x7f) [ 2835.541301][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2835.575098][T20128] usb 2-1: selecting invalid altsetting 0 [ 2835.604794][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2835.625307][T20128] usb 2-1: USB disconnect, device number 89 [ 2835.994687][T20128] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 2836.355233][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2836.366263][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2836.378329][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2836.388135][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2836.397870][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2836.565172][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2836.574626][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2836.582911][T20128] usb 2-1: Product: syz [ 2836.587127][T20128] usb 2-1: Manufacturer: syz [ 2836.591837][T20128] usb 2-1: SerialNumber: syz [ 2836.616182][T28305] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2836.864691][T20128] usb 2-1: selecting invalid altsetting 0 [ 2836.870536][T20128] usb 2-1: selecting invalid altsetting 0 [ 2836.880986][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2836.891773][T20128] usb 2-1: selecting invalid altsetting 0 [ 2836.901833][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2836.909093][T20128] usb 2-1: selecting invalid altsetting 0 [ 2836.917584][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2836.925191][T20128] usb 2-1: selecting invalid altsetting 0 [ 2836.931058][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2836.940463][T20128] usb 2-1: USB disconnect, device number 90 23:03:03 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/4096) 23:03:03 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) 23:03:03 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffffffffffff, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:03 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105404) 23:03:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001840), 0xfffffffffffffffd, 0x20000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001700)=""/93) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000001780), 0x5, 0x200000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f00000017c0)={0x80000000, 0xfffffc00, 0x41cc, 0x10000, 0x1, 0x5}) 23:03:03 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0xf}}}}]}}, 0x0) [ 2836.962109][ T6374] usb 3-1: USB disconnect, device number 119 23:03:03 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) 23:03:03 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105405) 23:03:03 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x28087) 23:03:03 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:03 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) 23:03:03 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) 23:03:03 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/153) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/231) 23:03:04 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105406) 23:03:04 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) 23:03:04 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x42100) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x16, 0x6, &(0x7f0000000040)="bce31bbd1422"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x416a30a2, 0x101, 0x1, 0x7, 0x2, 0x401}) 23:03:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2837.464822][T20128] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 2837.834764][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2837.846133][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2837.858288][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2837.868519][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2837.878414][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2838.045264][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2838.054353][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2838.062423][T20128] usb 2-1: Product: syz [ 2838.066677][T20128] usb 2-1: Manufacturer: syz [ 2838.071410][T20128] usb 2-1: SerialNumber: syz [ 2838.105784][T28352] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:05 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x10}}}}]}}, 0x0) 23:03:05 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105407) 23:03:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x1) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x89, 0x2, 0x9, 0x9, 0x5, 0x80000000}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:05 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/183) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/3) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x10402) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000080)=""/173) 23:03:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) 23:03:05 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2838.372666][T20128] usb 2-1: selecting invalid altsetting 0 [ 2838.379578][T20128] usb 2-1: selecting invalid altsetting 0 [ 2838.419994][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2838.452277][T20128] usb 2-1: selecting invalid altsetting 0 [ 2838.480085][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:03:05 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1af00) syz_open_dev$evdev(0xfffffffffffffffc, 0xc5d, 0x6) 23:03:05 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2838.505795][T20128] usb 2-1: selecting invalid altsetting 0 [ 2838.526877][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 23:03:05 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105408) 23:03:05 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x6, 0x2, 0x81, 0x5, "5dc1ed87a15fc649d45829f061739e849091b85b3e627d2d0950e55de7afd3f5"}) [ 2838.562033][T20128] usb 2-1: selecting invalid altsetting 0 [ 2838.594875][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:03:05 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2838.624570][T20128] usb 2-1: USB disconnect, device number 91 23:03:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2839.004592][T20128] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 2839.404981][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2839.416089][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2839.428224][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2839.438062][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2839.447987][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2839.615049][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2839.624636][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2839.632736][T20128] usb 2-1: Product: syz [ 2839.637161][T20128] usb 2-1: Manufacturer: syz [ 2839.641770][T20128] usb 2-1: SerialNumber: syz [ 2839.665942][T28404] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:06 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x0}}}}]}}, 0x0) 23:03:06 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10540a) 23:03:06 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x30, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:06 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x12db84) 23:03:06 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) 23:03:06 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2839.914578][T20128] usb 2-1: selecting invalid altsetting 0 [ 2839.920381][T20128] usb 2-1: selecting invalid altsetting 0 23:03:06 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2839.955338][T20128] cdc_ncm 2-1:1.0: bind() failure 23:03:06 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2839.989866][T20128] usb 2-1: selecting invalid altsetting 0 [ 2839.997721][ T33] kauditd_printk_skb: 65 callbacks suppressed [ 2839.997738][ T33] audit: type=1800 audit(1623020586.690:1234): pid=28443 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14030 res=0 errno=0 23:03:06 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x5b5881) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0xffffff81, 0x7]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:06 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105416) 23:03:06 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x28ed, 0x201) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/246) [ 2840.034650][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2840.055127][T20128] usb 2-1: selecting invalid altsetting 0 [ 2840.061070][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 23:03:06 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2840.104676][T20128] usb 2-1: selecting invalid altsetting 0 [ 2840.110816][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2840.122442][ T33] audit: type=1800 audit(1623020586.690:1235): pid=28443 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14030 res=0 errno=0 [ 2840.164924][T20128] usb 2-1: USB disconnect, device number 92 [ 2840.234745][ T33] audit: type=1800 audit(1623020586.690:1236): pid=28446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14084 res=0 errno=0 [ 2840.271057][ T33] audit: type=1800 audit(1623020586.690:1237): pid=28443 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14030 res=0 errno=0 [ 2840.314069][ T33] audit: type=1804 audit(1623020586.690:1238): pid=28442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353239362F48C7C060 dev="sda1" ino=15795 res=1 errno=0 [ 2840.344256][ T33] audit: type=1804 audit(1623020586.700:1239): pid=28446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353235332F48C7C060 dev="sda1" ino=14084 res=1 errno=0 [ 2840.375545][ T33] audit: type=1800 audit(1623020586.700:1240): pid=28446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14084 res=0 errno=0 [ 2840.397315][ T33] audit: type=1800 audit(1623020586.710:1241): pid=28446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14084 res=0 errno=0 [ 2840.418901][ T33] audit: type=1800 audit(1623020586.880:1242): pid=28459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15779 res=0 errno=0 [ 2840.440488][ T33] audit: type=1804 audit(1623020586.900:1243): pid=28459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723533333438373839382F73797A6B616C6C65722E766E4B3475722F353235342F48C7C060 dev="sda1" ino=15779 res=1 errno=0 [ 2840.584496][T20128] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 2840.954938][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2840.966124][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2840.977374][T20128] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2840.986828][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2840.996640][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2841.006576][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2841.174529][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2841.183640][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2841.191814][T20128] usb 2-1: Product: syz [ 2841.196424][T20128] usb 2-1: Manufacturer: syz [ 2841.201141][T20128] usb 2-1: SerialNumber: syz [ 2841.225834][T28448] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:08 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x2}}}}]}}, 0x0) 23:03:08 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) 23:03:08 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105418) 23:03:08 executing program 2: ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x3, 0x200, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:08 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:03:08 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x1, 0x1, 0x9cb, 0x2, 0xfff, 0x200}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2841.474605][T20128] usb 2-1: selecting invalid altsetting 0 [ 2841.480502][T20128] usb 2-1: selecting invalid altsetting 0 23:03:08 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) [ 2841.534374][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2841.574367][T20128] usb 2-1: selecting invalid altsetting 0 [ 2841.580233][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:03:08 executing program 5: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000100)={0x20, 0xfffffff7, 0x0, 0x7f, 0x5, 0x80}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x7c, {0x7c, 0x24, "2b65942b195b8a58a76171f28397540d9b681f4c9e76a78d4ee58f4a006cfb20dfe6c3200ffed554119bae0f65b703d152bb7a473188004ef4f0e1475d4bf59968c83248e77b97e53b108cc6fa43a703136d84d76b1e0f19f2bb0885cb9f2bf3cd8c967477677e9fe89eb0a9b505f54ec295f2d2ad0e89262641"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="0003040000000403c8bd47254d426bac9dda007014494263ffa010a12c774c479061ca124872a6cc4681681b75479fb0375c8c553c96c89972bf515c54b3b72413348b67ae9598f637beafd1c5aad4498058df5b188dd912ecdf80d4bcdf64cdf8d47d92229781f0ca4e957a232bd25ec1d4776f39f7828c51e35b743b3d629681c056048f00078278bbda69ff974a4b23dd92c77e24181505259926f88a410392b996597ffa3dd1f75dc9bf3fe7389b8739b3415a9a15"], &(0x7f0000001600)={0x0, 0xf, 0x198, {0x5, 0xf, 0x198, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x5, 0x8}, @generic={0x89, 0x10, 0xa, "c9a4f782056107daef84a4d99d8b650822c69ae0d9908da4c9c3d33574d5f8ac4d55082a42ab6ddde3297373fe228d82fd3aa1fe82045d393a6ad500394df8ad0d466ef049e4f5c45514ae8a28e3e00ddca4f70874e5e1882c4404a647fcec9a27c00733a546377c85baa329a9cd10998cd36fa0ca8cf40021678b4f8499f5c5bd3d740a38b7"}, @generic={0xe6, 0x10, 0xa, "bd54d34ad5d0915ee8499c6e8dcf38792483cb6101eabd531e9794652ed6af2d923e07203e506d63787f286d2bb59d4db53f936583d1f8a82650ccdbe373c3f9858f793587416bd284ada81642c95a81fe67787e57d7a6da0788735f38267ccd47a08e5030fae82402ae933d71e97da86f191631548ba8e77d49654df73ad3ca962b74d7d378003cf524a2352a308d410c6d8755541334336d7fcfde9bd0664b2f7126d9335f9d31429ba3c6e81798827ed59de97b36ca26841541120ed9c3f9628cf2f1dba5b032d5bd03edd48a71a789aa082a5272a5e0a3353cccc3d3f6ee29499b"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x19, 0x5, 0xfe, 0x401}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x4, 0x2, 0x7fd, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x5, 0x8, "9856e22d", "185e8479"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x4, 0xdb, 0x2, 0xb54, 0xdbab}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="4001c700000083922a0d151fdf5471344fb2db5b3033d3f8c2c3f97824f2430c91b0fc5530c85fb273c8ddf3f0770f348a54dd713014acc62d4a58d916f8e91151bf9e93da379ca068bd6d23f8054c1003a8258c767c91143303d0c4d4fb04b96102b7ac5205339040dc3aa40bc3b705e1bdbb2af1fe7652252cdae05c18410bab570bcd58c7e9898fff081f0cd1bcd0396bf1053f463328e47c45f2111df5452e1288248e69e8502be31b65b25d8f2bc8143e831504156b45762dfc5d229e4a344d15d517a7e0e4b1d0000000"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)=ANY=[@ANYBLOB="200008000000106aef82f0f00000"], &(0x7f0000000480)={0x40, 0x7, 0x2, 0xff52}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, ',x'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="14306e1cface"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "d89c"}, &(0x7f0000000640)={0x40, 0x1a, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x21, 0x1}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0xfd5, 0x40) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001580)=""/113) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000800)=0x5) r1 = syz_usb_connect(0x1, 0x765, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0xa4, 0x0, 0xf7, 0xff, 0x17ef, 0x3062, 0x652f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x753, 0x1, 0x4, 0x2, 0x90, 0x5, [{{0x9, 0x4, 0x3c, 0x6, 0xe, 0xff, 0x2d, 0x1b, 0x83, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x3ff, 0xb5, 0xc1, 0x3c, 0xc543}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x3ff, 0x15, 0x20, 0x4, 0x6}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "264db1832b20"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x1, 0x8}, [@obex={0x5, 0x24, 0x15, 0x528}]}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0xff, 0xa4, 0x7f}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xf8, 0xff, 0xf7}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x4, 0x80, [@generic={0xa4, 0x21, "661830184972487fe92691eb47725f23507b74089c206b2796f12de6d26fc692159aa1bf8634b7d11c0635296f8a0c4768b5481dfb780857b44d5957b3e7e3fcc94c66b9982050eda0fedecb335ab678738a545f31819d06728e4f8bf49fb3b449d9bdc02ae2307ed867d68c58e247ce760e9ebabbaa8a66b15019827447b331588b86c7bad97aa2ff3ca218934322bf2fe598c526401a7550fc65f060dcb58b3944"}, @generic={0xcd, 0xb, "94ce7820736d78006a8d496b979cf0d472e689d6358eb8e2d51b895b3a183b8b9479a123ae3aefce18128a45e7d23d699bd6a8d745c221b4cc53bf71197c7062c56812fede325fa6eedc6f13acd72962af2cadabc155a6326a29d4314fbe4b71c30556212c78ff0e8fba9a53fb674c5799c2bd57176f5cee12db9111f2a8e61953972e806c3ad193973bee4be90d90e0a423de8edd637003b4ce491114b6c6d9d96c08a8969a46e8a4d5a7453906ce2929e4f63d585fb26a06b23293301973fe563cf278a56db5a8745331"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8c, 0x20, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x65, 0xfc, 0x2, [@generic={0xa3, 0x3, "45fdcc434a76ca6ba7093d808e0c7edf4f1add4eed7bf92f5805268a9fdeff6c4d7aa2c2c5ec2214ec40c33ddd5a29ecf299dbf9c6aefb44eb75527a1909f07d5f0f8bf40ed2df917045b3a7cfabf757d472b37ed285b925ce3ca5c7c7775d330f7f706c3aa56dda5315034939e98957856c2cc359c18997ffea3d78d1e251fb2e399f82fcb37600ed48f0c4232d601571565560a8db2672a2d29dbbc70ba0e529"}, @generic={0xe6, 0xd, "87e8fb96de5ecc2007275a6c39f644e14c7662079d45af1596ef2dc714df8715161628c10d65beaf6a0ce1e3de72a1a89b9cf9d07725cc47a1684a90649d5c1b34f28398f23248e4ba9e27d5b02f673ede58d229cd369779ffbd518b22e8aacb88b056ed88697b6c891f8c722f0f9092e823b2d08a716e3f2bd0698731b0b034d8803ec4c372cee56dee103ac657b05d58d85f2eb2cd1075c8ce6ab1a88317cd46af6bb5a59e6a1e82bdc6e3ddeaf11cb52d86e53846cdffacb7769f87520de43f552237293dc5460d5ea2cce0934a4a67c2db729b99b505302d82698c2bb26c3039fcc3"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x6, 0x7, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}, @generic={0x6c, 0x6, "8382aaafe48bcb6feec58df3612c29e176b1b7bd2c8a74afb8b52f5a4f1df6eb364ab5edc36b934ee524d33bccb66ccfce62bebf47d6ff39d8f08d45aecaad3aa3af63f8be23d5fc9604d54931a8be802ee5a3abfc85ca5a9fdd6f07a9bfdde0047ad0d6f974aab4a629"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xe1, 0x9, 0xf8, [@generic={0x71, 0x1, "1b95fb66cc94ba324d8133fc32177ee467ebc6083cae4892fb5a36bb92631795e7ddfaa5f299b7ab120bcaf50036968a40e8d0248feef4808a0da5a0369b888b4ee029f33165d01628beaa5306b3c10565de4374ea619db3774fe8130307d19b948747414b77bcbb3fa97c8bbdff14"}, @generic={0xa4, 0xf, "f4a85a90aadf14ce08eed7723e4c5407edafcb6b330f7adca5eb563f283debb0a6fd201e724a5701a8a00a4e6b46bac187f771f693c10db4f80e77ca01de56a1d378764045a80c06c4b68b522a5dcc4078504bab3946032f437b93d8c399a9e2b4f4862f6bcc439fb4e5dcb7dd531c564ec52b7e1785aedd24148b1f03bfe7803e3765bd30fdccca3405c466a140d150876ad79cfa22b2db3185d9e68688b43f86ba"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x1, 0xe0, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfd, 0xcb, 0x4, [@generic={0xf7, 0x24, "9e5dd82a5ff8a41ddf8823a42751d553b969a4d5cd4c4ad4d0474cfde6c89e84a1fb94cbb3b4fac55a7c1626e3322c93735b6b36024678c9d3381b59dccb7707731ee9c72f76b5d12ff4516ec134801d4be741782eed1179d4700ed00b0134bdc53cbbb698742045c8a3266ba5507fe9f819e96ccbbb2b8eb1739b171e9a4b91cd6bb278d41abcb4e601a71d4d73525e120f43a32657028d54a1a8484b2b38412a8a92e1ebe653119ce35b611e3c98d80d83e62f6a6ba17b2e2cc4e73b9ed7d526d09b7f5a7a51977fdc825eb0e02792ae8d64bcb501891663c167fb21edde75cd60c22c95172376f52c34138fa5faa5bd241b9de3"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x5, 0xc6, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0xbef, 0x3f, 0x40, 0x6, [@generic={0xe5, 0xe, "6372a1394098d7e5874ef7619f3d40d05b3923f95c322db6ee7d59ab2d5eef138f06ecc0389b8125a3f89b4b2013ad5d4075de6b5084c32bd877726531ba7fee4407de5026727bd5c65daa951312b545f85ac2dc8735bdd088f8a03efb3f79444f3e442d3bf8dfd9b144f5488b814b37d3772538dd22e24c9bb0db3cc4ee2065ff6c45badcf4b9a4db9bf23b0f9f79d50bccafdda1c7f7b259f80a63f70b4287632c1475e46e20a5a66b03bba174f3c3c993ca6bcd2af655423fefc77c343c57259b717a8680eed45e704acc5735ff3eab3fbe3aeb085c2835720017445ab25f182e76"}]}}, {{0x9, 0x5, 0xe, 0x14, 0x400, 0x80, 0x81, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x5, 0x81, 0x8}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0x9, 0x3, 0x10, 0x4}, 0x37, &(0x7f0000001080)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "acbcd9eb50ef82129196bb3002b94bb9"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f4dfa387c570877f6eb7cdd9cac00555"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x0, 0x2}, @ptm_cap={0x3}]}, 0x1, [{0xa, &(0x7f00000010c0)=@string={0xa, 0x3, "711791fe2ab5335f"}}]}) syz_usb_control_io$printer(r1, &(0x7f00000012c0)={0x14, &(0x7f0000001140)={0x0, 0x5, 0xf2, {0xf2, 0x21, "a69bb6bdcae2f9e8d5888369c3388790e8c7da654bfe1a8140f3d74c580e8e963039d8eb69fa115fa6b917af0127885a7cddb99fadfb84e292869335b297c59f3c98d8cf04a6c73c354d491f99039d0bb11b075647f36126574d296fd3dfa06ecf09f54aa8c9c212cfa76c044169aa4720662de993f857348eb70525d610eb0ab1f2279262ac0689d38c4a7cd3b3c021b53bc6b022523bb1a8c083422732f1292fce3d6f723783abbfa834102ac9da4493be729ee7e4b1cfd78b8c3cdd4416071882c6618136b353cfb717cc5c48b80a38f27cc35b5175a5d94424e053d6a0b87eef2ac429a25dc3e8771a63e22769de"}}, &(0x7f0000001240)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "c24684cdd7f785780fe69328d60ca553210aac9ea356a1b96fdddab57f4cfbb2126d7a340d5bfa8ffc16aa7234628a4088c208a2a6f3449113ea8350d41473dda409b1d97cc5e35fdec84f512e37b2aa10f390241ae9c04a287b"}}}, &(0x7f0000001500)={0x34, &(0x7f0000001300)={0x0, 0x6, 0x31, "ea04d0c701065e47460e6f9563af73c5e04d65215da36865957421f8120d52acc27b54b3a4489ca0e9aa3db1e6eed0349c"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000013c0)={0x20, 0x0, 0xab, {0xa9, "0483329f515c2137350c055d4f24466cb4c51401efb3dba80219d0a41b8c814d108a402104a49a1aafbf0d3ba37bd99067934c25b4b27526c659ae52f082cacdda8f0f45ad5d518c4001c040bd242df2e43f2a5cdaa90ed72dca4c7b2a958600aafd8ee442c9563dbd835b5801b5d090423f4dfab26c0cfe982a4801ae346314de212826aab47f405251433e545e9e81c749c3b7dafbbfec9fb54af14bdefeaaca87fd9e62f863f341"}}, &(0x7f0000001480)={0x20, 0x1, 0x1, 0x9d}, &(0x7f00000014c0)={0x20, 0x0, 0x1, 0x2}}) 23:03:08 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) 23:03:08 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/74) 23:03:08 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2841.647343][T20128] usb 2-1: selecting invalid altsetting 0 [ 2841.653196][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 23:03:08 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105448) [ 2841.694616][T20128] usb 2-1: selecting invalid altsetting 0 [ 2841.738400][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2841.782764][T20128] usb 2-1: USB disconnect, device number 93 [ 2842.114315][ T6374] usb 6-1: new low-speed USB device number 116 using dummy_hcd [ 2842.214303][T20128] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 2842.354410][ T6374] usb 6-1: Invalid ep0 maxpacket: 512 [ 2842.504861][ T6374] usb 6-1: new low-speed USB device number 117 using dummy_hcd [ 2842.584442][T20128] usb 2-1: config 1 has an invalid interface number: 2 but max is 1 [ 2842.592992][T20128] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2842.603213][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2842.614291][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2842.625255][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2842.635500][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2842.645611][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2842.774338][ T6374] usb 6-1: Invalid ep0 maxpacket: 512 [ 2842.779982][ T6374] usb usb6-port1: attempt power cycle [ 2842.804880][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2842.814272][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2842.822431][T20128] usb 2-1: Product: syz [ 2842.826772][T20128] usb 2-1: Manufacturer: syz [ 2842.831413][T20128] usb 2-1: SerialNumber: syz [ 2842.855804][T28492] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:09 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x3}}}}]}}, 0x0) 23:03:09 executing program 0: ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x3, 0x200, 0x4}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:09 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/73) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000180)={0x65e, 0x1ff, 0x7, 0x100, 0xacd, 0xfffffffd}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x7f8, 0x0, 0x3, 0xb, 0x8d9, 0xfffffffd}) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x5) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x204c0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000040)=""/46) syz_open_dev$evdev(&(0x7f0000000080), 0x3f, 0x40) 23:03:09 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) 23:03:09 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10544c) [ 2843.094730][T20128] usb 2-1: selecting invalid altsetting 0 [ 2843.104148][T20128] usb 2-1: selecting invalid altsetting 0 [ 2843.145544][T20128] cdc_ncm 2-1:1.0: bind() failure 23:03:09 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/70) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7fff) 23:03:09 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105468) [ 2843.198400][T20128] cdc_ncm 2-1:1.2: CDC Union missing and no IAD found [ 2843.205556][T20128] cdc_ncm 2-1:1.2: bind() failure [ 2843.234459][ T6374] usb 6-1: new low-speed USB device number 118 using dummy_hcd [ 2843.245951][T20128] usb 2-1: selecting invalid altsetting 0 [ 2843.274983][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2843.310619][T20128] usb 2-1: selecting invalid altsetting 0 [ 2843.333558][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2843.344966][T20128] usb 2-1: selecting invalid altsetting 0 [ 2843.350807][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2843.357480][ T6374] usb 6-1: Invalid ep0 maxpacket: 512 [ 2843.364506][T20128] usb 2-1: USB disconnect, device number 94 [ 2843.534246][ T6374] usb 6-1: new low-speed USB device number 119 using dummy_hcd [ 2843.624461][ T6374] usb 6-1: Invalid ep0 maxpacket: 512 [ 2843.630199][ T6374] usb usb6-port1: unable to enumerate USB device [ 2843.744321][T20128] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 2844.124745][T20128] usb 2-1: config 1 has an invalid interface number: 3 but max is 1 [ 2844.133037][T20128] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2844.142374][T20128] usb 2-1: config 1 has no interface number 2 [ 2844.148670][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2844.159783][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2844.170739][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2844.181051][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2844.191103][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2844.404780][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2844.414164][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2844.422166][T20128] usb 2-1: Product: syz [ 2844.426369][T20128] usb 2-1: Manufacturer: syz [ 2844.430979][T20128] usb 2-1: SerialNumber: syz [ 2844.465321][T28536] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:11 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0xaf, 0x3216c0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:03:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105448) 23:03:11 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x10001, 0x8, 0xffffffff, 0x1000, 0x6, 0x30}) syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x5) 23:03:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10546c) 23:03:11 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x4}}}}]}}, 0x0) [ 2844.714258][T20128] usb 2-1: selecting invalid altsetting 0 [ 2844.720068][T20128] usb 2-1: selecting invalid altsetting 0 [ 2844.733115][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2844.747638][T20128] cdc_ncm 2-1:1.3: CDC Union missing and no IAD found [ 2844.754893][T20128] cdc_ncm 2-1:1.3: bind() failure [ 2844.793053][T20128] usb 2-1: selecting invalid altsetting 0 [ 2844.854696][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2844.878634][T20128] usb 2-1: selecting invalid altsetting 0 23:03:11 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x800) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x100, 0x200) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000140)=""/92) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000001c0)=""/31) read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/233, 0xe9) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0xfff, 0x240) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000240)=""/115) 23:03:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 2844.915047][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2844.952131][T20128] usb 2-1: selecting invalid altsetting 0 23:03:11 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x10001, 0x200000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/225) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x0, 0x401, 0x6, 0x1, 0x1, 0x3ff}) [ 2844.961004][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:03:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105474) [ 2844.992965][T20128] usb 2-1: USB disconnect, device number 95 23:03:11 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/244) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x402901) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/250) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0xffff]) 23:03:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10546c) [ 2845.070406][ T33] kauditd_printk_skb: 41 callbacks suppressed [ 2845.070423][ T33] audit: type=1800 audit(1623020591.750:1285): pid=28598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14836 res=0 errno=0 23:03:11 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffe9a6, 0xa002) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2845.138963][ T33] audit: type=1800 audit(1623020591.770:1286): pid=28597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15870 res=0 errno=0 23:03:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:03:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10547a) [ 2845.161136][ T33] audit: type=1804 audit(1623020591.790:1287): pid=28598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F353033392F48C7C060 dev="sda1" ino=14836 res=1 errno=0 [ 2845.232746][ T33] audit: type=1800 audit(1623020591.790:1288): pid=28598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14836 res=0 errno=0 23:03:12 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0xffffffff, 0x2, 0xfffffffa, 0x70, 0x5, 0x80000000}) 23:03:12 executing program 5: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/61) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x56, 0x7ff, 0xd68, {0x1, 0x400}, {0x5, 0xfffd}, @ramp={0x1000, 0xf4c6, {0x5, 0xff7f, 0xe31, 0x200}}}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2000000000, 0x2240) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/169) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000002740)=""/4087) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x2d, 0x1, 0x2, 0x7fff, 0x7ff, 0x10001}) [ 2845.342878][ T33] audit: type=1804 audit(1623020591.800:1289): pid=28598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F353033392F48C7C060 dev="sda1" ino=14836 res=1 errno=0 [ 2845.375946][T20128] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 2845.412061][ T33] audit: type=1800 audit(1623020591.820:1290): pid=28599 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15866 res=0 errno=0 [ 2845.435963][ T33] audit: type=1800 audit(1623020591.830:1291): pid=28599 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15866 res=0 errno=0 [ 2845.457708][ T33] audit: type=1800 audit(1623020591.840:1292): pid=28599 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15866 res=0 errno=0 [ 2845.479645][ T33] audit: type=1804 audit(1623020591.890:1293): pid=28604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353330342F48C7C060 dev="sda1" ino=14693 res=1 errno=0 [ 2845.510645][ T33] audit: type=1804 audit(1623020591.900:1294): pid=28604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353330342F48C7C060 dev="sda1" ino=14693 res=1 errno=0 [ 2845.744211][T20128] usb 2-1: config 1 has an invalid interface number: 4 but max is 1 [ 2845.752265][T20128] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2845.761297][T20128] usb 2-1: config 1 has no interface number 2 [ 2845.767494][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2845.778649][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2845.789628][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2845.799520][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2845.809460][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2845.994635][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2846.003707][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2846.011773][T20128] usb 2-1: Product: syz [ 2846.016018][T20128] usb 2-1: Manufacturer: syz [ 2846.020624][T20128] usb 2-1: SerialNumber: syz [ 2846.045632][T28576] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:12 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x5}}}}]}}, 0x0) 23:03:12 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000100)={0x20, 0xfffffff7, 0x0, 0x7f, 0x5, 0x80}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x7c, {0x7c, 0x24, "2b65942b195b8a58a76171f28397540d9b681f4c9e76a78d4ee58f4a006cfb20dfe6c3200ffed554119bae0f65b703d152bb7a473188004ef4f0e1475d4bf59968c83248e77b97e53b108cc6fa43a703136d84d76b1e0f19f2bb0885cb9f2bf3cd8c967477677e9fe89eb0a9b505f54ec295f2d2ad0e89262641"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="0003040000000403c8bd47254d426bac9dda007014494263ffa010a12c774c479061ca124872a6cc4681681b75479fb0375c8c553c96c89972bf515c54b3b72413348b67ae9598f637beafd1c5aad4498058df5b188dd912ecdf80d4bcdf64cdf8d47d92229781f0ca4e957a232bd25ec1d4776f39f7828c51e35b743b3d629681c056048f00078278bbda69ff974a4b23dd92c77e24181505259926f88a410392b996597ffa3dd1f75dc9bf3fe7389b8739b3415a9a15"], &(0x7f0000001600)={0x0, 0xf, 0x198, {0x5, 0xf, 0x198, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x5, 0x8}, @generic={0x89, 0x10, 0xa, "c9a4f782056107daef84a4d99d8b650822c69ae0d9908da4c9c3d33574d5f8ac4d55082a42ab6ddde3297373fe228d82fd3aa1fe82045d393a6ad500394df8ad0d466ef049e4f5c45514ae8a28e3e00ddca4f70874e5e1882c4404a647fcec9a27c00733a546377c85baa329a9cd10998cd36fa0ca8cf40021678b4f8499f5c5bd3d740a38b7"}, @generic={0xe6, 0x10, 0xa, "bd54d34ad5d0915ee8499c6e8dcf38792483cb6101eabd531e9794652ed6af2d923e07203e506d63787f286d2bb59d4db53f936583d1f8a82650ccdbe373c3f9858f793587416bd284ada81642c95a81fe67787e57d7a6da0788735f38267ccd47a08e5030fae82402ae933d71e97da86f191631548ba8e77d49654df73ad3ca962b74d7d378003cf524a2352a308d410c6d8755541334336d7fcfde9bd0664b2f7126d9335f9d31429ba3c6e81798827ed59de97b36ca26841541120ed9c3f9628cf2f1dba5b032d5bd03edd48a71a789aa082a5272a5e0a3353cccc3d3f6ee29499b"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x19, 0x5, 0xfe, 0x401}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x4, 0x2, 0x7fd, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x5, 0x8, "9856e22d", "185e8479"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x4, 0xdb, 0x2, 0xb54, 0xdbab}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="4001c700000083922a0d151fdf5471344fb2db5b3033d3f8c2c3f97824f2430c91b0fc5530c85fb273c8ddf3f0770f348a54dd713014acc62d4a58d916f8e91151bf9e93da379ca068bd6d23f8054c1003a8258c767c91143303d0c4d4fb04b96102b7ac5205339040dc3aa40bc3b705e1bdbb2af1fe7652252cdae05c18410bab570bcd58c7e9898fff081f0cd1bcd0396bf1053f463328e47c45f2111df5452e1288248e69e8502be31b65b25d8f2bc8143e831504156b45762dfc5d229e4a344d15d517a7e0e4b1d0000000"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)=ANY=[@ANYBLOB="200008000000106aef82f0f00000"], &(0x7f0000000480)={0x40, 0x7, 0x2, 0xff52}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, ',x'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="14306e1cface"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "d89c"}, &(0x7f0000000640)={0x40, 0x1a, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x21, 0x1}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0xfd5, 0x40) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001580)=""/113) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000800)=0x5) r1 = syz_usb_connect(0x1, 0x765, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0xa4, 0x0, 0xf7, 0xff, 0x17ef, 0x3062, 0x652f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x753, 0x1, 0x4, 0x2, 0x90, 0x5, [{{0x9, 0x4, 0x3c, 0x6, 0xe, 0xff, 0x2d, 0x1b, 0x83, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x3ff, 0xb5, 0xc1, 0x3c, 0xc543}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x3ff, 0x15, 0x20, 0x4, 0x6}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "264db1832b20"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x1, 0x8}, [@obex={0x5, 0x24, 0x15, 0x528}]}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0xff, 0xa4, 0x7f}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xf8, 0xff, 0xf7}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x4, 0x80, [@generic={0xa4, 0x21, "661830184972487fe92691eb47725f23507b74089c206b2796f12de6d26fc692159aa1bf8634b7d11c0635296f8a0c4768b5481dfb780857b44d5957b3e7e3fcc94c66b9982050eda0fedecb335ab678738a545f31819d06728e4f8bf49fb3b449d9bdc02ae2307ed867d68c58e247ce760e9ebabbaa8a66b15019827447b331588b86c7bad97aa2ff3ca218934322bf2fe598c526401a7550fc65f060dcb58b3944"}, @generic={0xcd, 0xb, "94ce7820736d78006a8d496b979cf0d472e689d6358eb8e2d51b895b3a183b8b9479a123ae3aefce18128a45e7d23d699bd6a8d745c221b4cc53bf71197c7062c56812fede325fa6eedc6f13acd72962af2cadabc155a6326a29d4314fbe4b71c30556212c78ff0e8fba9a53fb674c5799c2bd57176f5cee12db9111f2a8e61953972e806c3ad193973bee4be90d90e0a423de8edd637003b4ce491114b6c6d9d96c08a8969a46e8a4d5a7453906ce2929e4f63d585fb26a06b23293301973fe563cf278a56db5a8745331"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8c, 0x20, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x65, 0xfc, 0x2, [@generic={0xa3, 0x3, "45fdcc434a76ca6ba7093d808e0c7edf4f1add4eed7bf92f5805268a9fdeff6c4d7aa2c2c5ec2214ec40c33ddd5a29ecf299dbf9c6aefb44eb75527a1909f07d5f0f8bf40ed2df917045b3a7cfabf757d472b37ed285b925ce3ca5c7c7775d330f7f706c3aa56dda5315034939e98957856c2cc359c18997ffea3d78d1e251fb2e399f82fcb37600ed48f0c4232d601571565560a8db2672a2d29dbbc70ba0e529"}, @generic={0xe6, 0xd, "87e8fb96de5ecc2007275a6c39f644e14c7662079d45af1596ef2dc714df8715161628c10d65beaf6a0ce1e3de72a1a89b9cf9d07725cc47a1684a90649d5c1b34f28398f23248e4ba9e27d5b02f673ede58d229cd369779ffbd518b22e8aacb88b056ed88697b6c891f8c722f0f9092e823b2d08a716e3f2bd0698731b0b034d8803ec4c372cee56dee103ac657b05d58d85f2eb2cd1075c8ce6ab1a88317cd46af6bb5a59e6a1e82bdc6e3ddeaf11cb52d86e53846cdffacb7769f87520de43f552237293dc5460d5ea2cce0934a4a67c2db729b99b505302d82698c2bb26c3039fcc3"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x6, 0x7, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}, @generic={0x6c, 0x6, "8382aaafe48bcb6feec58df3612c29e176b1b7bd2c8a74afb8b52f5a4f1df6eb364ab5edc36b934ee524d33bccb66ccfce62bebf47d6ff39d8f08d45aecaad3aa3af63f8be23d5fc9604d54931a8be802ee5a3abfc85ca5a9fdd6f07a9bfdde0047ad0d6f974aab4a629"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xe1, 0x9, 0xf8, [@generic={0x71, 0x1, "1b95fb66cc94ba324d8133fc32177ee467ebc6083cae4892fb5a36bb92631795e7ddfaa5f299b7ab120bcaf50036968a40e8d0248feef4808a0da5a0369b888b4ee029f33165d01628beaa5306b3c10565de4374ea619db3774fe8130307d19b948747414b77bcbb3fa97c8bbdff14"}, @generic={0xa4, 0xf, "f4a85a90aadf14ce08eed7723e4c5407edafcb6b330f7adca5eb563f283debb0a6fd201e724a5701a8a00a4e6b46bac187f771f693c10db4f80e77ca01de56a1d378764045a80c06c4b68b522a5dcc4078504bab3946032f437b93d8c399a9e2b4f4862f6bcc439fb4e5dcb7dd531c564ec52b7e1785aedd24148b1f03bfe7803e3765bd30fdccca3405c466a140d150876ad79cfa22b2db3185d9e68688b43f86ba"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x1, 0xe0, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfd, 0xcb, 0x4, [@generic={0xf7, 0x24, "9e5dd82a5ff8a41ddf8823a42751d553b969a4d5cd4c4ad4d0474cfde6c89e84a1fb94cbb3b4fac55a7c1626e3322c93735b6b36024678c9d3381b59dccb7707731ee9c72f76b5d12ff4516ec134801d4be741782eed1179d4700ed00b0134bdc53cbbb698742045c8a3266ba5507fe9f819e96ccbbb2b8eb1739b171e9a4b91cd6bb278d41abcb4e601a71d4d73525e120f43a32657028d54a1a8484b2b38412a8a92e1ebe653119ce35b611e3c98d80d83e62f6a6ba17b2e2cc4e73b9ed7d526d09b7f5a7a51977fdc825eb0e02792ae8d64bcb501891663c167fb21edde75cd60c22c95172376f52c34138fa5faa5bd241b9de3"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x5, 0xc6, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0xbef, 0x3f, 0x40, 0x6, [@generic={0xe5, 0xe, "6372a1394098d7e5874ef7619f3d40d05b3923f95c322db6ee7d59ab2d5eef138f06ecc0389b8125a3f89b4b2013ad5d4075de6b5084c32bd877726531ba7fee4407de5026727bd5c65daa951312b545f85ac2dc8735bdd088f8a03efb3f79444f3e442d3bf8dfd9b144f5488b814b37d3772538dd22e24c9bb0db3cc4ee2065ff6c45badcf4b9a4db9bf23b0f9f79d50bccafdda1c7f7b259f80a63f70b4287632c1475e46e20a5a66b03bba174f3c3c993ca6bcd2af655423fefc77c343c57259b717a8680eed45e704acc5735ff3eab3fbe3aeb085c2835720017445ab25f182e76"}]}}, {{0x9, 0x5, 0xe, 0x14, 0x400, 0x80, 0x81, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x5, 0x81, 0x8}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0x9, 0x3, 0x10, 0x4}, 0x37, &(0x7f0000001080)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "acbcd9eb50ef82129196bb3002b94bb9"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f4dfa387c570877f6eb7cdd9cac00555"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x0, 0x2}, @ptm_cap={0x3}]}, 0x1, [{0xa, &(0x7f00000010c0)=@string={0xa, 0x3, "711791fe2ab5335f"}}]}) syz_usb_control_io$printer(r1, &(0x7f00000012c0)={0x14, &(0x7f0000001140)={0x0, 0x5, 0xf2, {0xf2, 0x21, "a69bb6bdcae2f9e8d5888369c3388790e8c7da654bfe1a8140f3d74c580e8e963039d8eb69fa115fa6b917af0127885a7cddb99fadfb84e292869335b297c59f3c98d8cf04a6c73c354d491f99039d0bb11b075647f36126574d296fd3dfa06ecf09f54aa8c9c212cfa76c044169aa4720662de993f857348eb70525d610eb0ab1f2279262ac0689d38c4a7cd3b3c021b53bc6b022523bb1a8c083422732f1292fce3d6f723783abbfa834102ac9da4493be729ee7e4b1cfd78b8c3cdd4416071882c6618136b353cfb717cc5c48b80a38f27cc35b5175a5d94424e053d6a0b87eef2ac429a25dc3e8771a63e22769de"}}, &(0x7f0000001240)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "c24684cdd7f785780fe69328d60ca553210aac9ea356a1b96fdddab57f4cfbb2126d7a340d5bfa8ffc16aa7234628a4088c208a2a6f3449113ea8350d41473dda409b1d97cc5e35fdec84f512e37b2aa10f390241ae9c04a287b"}}}, &(0x7f0000001500)={0x34, &(0x7f0000001300)={0x0, 0x6, 0x31, "ea04d0c701065e47460e6f9563af73c5e04d65215da36865957421f8120d52acc27b54b3a4489ca0e9aa3db1e6eed0349c"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000013c0)={0x20, 0x0, 0xab, {0xa9, "0483329f515c2137350c055d4f24466cb4c51401efb3dba80219d0a41b8c814d108a402104a49a1aafbf0d3ba37bd99067934c25b4b27526c659ae52f082cacdda8f0f45ad5d518c4001c040bd242df2e43f2a5cdaa90ed72dca4c7b2a958600aafd8ee442c9563dbd835b5801b5d090423f4dfab26c0cfe982a4801ae346314de212826aab47f405251433e545e9e81c749c3b7dafbbfec9fb54af14bdefeaaca87fd9e62f863f341"}}, &(0x7f0000001480)={0x20, 0x1, 0x1, 0x9d}, &(0x7f00000014c0)={0x20, 0x0, 0x1, 0x2}}) 23:03:12 executing program 0: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000100)={0x20, 0xfffffff7, 0x0, 0x7f, 0x5, 0x80}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x7c, {0x7c, 0x24, "2b65942b195b8a58a76171f28397540d9b681f4c9e76a78d4ee58f4a006cfb20dfe6c3200ffed554119bae0f65b703d152bb7a473188004ef4f0e1475d4bf59968c83248e77b97e53b108cc6fa43a703136d84d76b1e0f19f2bb0885cb9f2bf3cd8c967477677e9fe89eb0a9b505f54ec295f2d2ad0e89262641"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="0003040000000403c8bd47254d426bac9dda007014494263ffa010a12c774c479061ca124872a6cc4681681b75479fb0375c8c553c96c89972bf515c54b3b72413348b67ae9598f637beafd1c5aad4498058df5b188dd912ecdf80d4bcdf64cdf8d47d92229781f0ca4e957a232bd25ec1d4776f39f7828c51e35b743b3d629681c056048f00078278bbda69ff974a4b23dd92c77e24181505259926f88a410392b996597ffa3dd1f75dc9bf3fe7389b8739b3415a9a15"], &(0x7f0000001600)={0x0, 0xf, 0x198, {0x5, 0xf, 0x198, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x5, 0x8}, @generic={0x89, 0x10, 0xa, "c9a4f782056107daef84a4d99d8b650822c69ae0d9908da4c9c3d33574d5f8ac4d55082a42ab6ddde3297373fe228d82fd3aa1fe82045d393a6ad500394df8ad0d466ef049e4f5c45514ae8a28e3e00ddca4f70874e5e1882c4404a647fcec9a27c00733a546377c85baa329a9cd10998cd36fa0ca8cf40021678b4f8499f5c5bd3d740a38b7"}, @generic={0xe6, 0x10, 0xa, "bd54d34ad5d0915ee8499c6e8dcf38792483cb6101eabd531e9794652ed6af2d923e07203e506d63787f286d2bb59d4db53f936583d1f8a82650ccdbe373c3f9858f793587416bd284ada81642c95a81fe67787e57d7a6da0788735f38267ccd47a08e5030fae82402ae933d71e97da86f191631548ba8e77d49654df73ad3ca962b74d7d378003cf524a2352a308d410c6d8755541334336d7fcfde9bd0664b2f7126d9335f9d31429ba3c6e81798827ed59de97b36ca26841541120ed9c3f9628cf2f1dba5b032d5bd03edd48a71a789aa082a5272a5e0a3353cccc3d3f6ee29499b"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x19, 0x5, 0xfe, 0x401}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x4, 0x2, 0x7fd, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x5, 0x8, "9856e22d", "185e8479"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x4, 0xdb, 0x2, 0xb54, 0xdbab}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="4001c700000083922a0d151fdf5471344fb2db5b3033d3f8c2c3f97824f2430c91b0fc5530c85fb273c8ddf3f0770f348a54dd713014acc62d4a58d916f8e91151bf9e93da379ca068bd6d23f8054c1003a8258c767c91143303d0c4d4fb04b96102b7ac5205339040dc3aa40bc3b705e1bdbb2af1fe7652252cdae05c18410bab570bcd58c7e9898fff081f0cd1bcd0396bf1053f463328e47c45f2111df5452e1288248e69e8502be31b65b25d8f2bc8143e831504156b45762dfc5d229e4a344d15d517a7e0e4b1d0000000"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)=ANY=[@ANYBLOB="200008000000106aef82f0f00000"], &(0x7f0000000480)={0x40, 0x7, 0x2, 0xff52}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, ',x'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="14306e1cface"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "d89c"}, &(0x7f0000000640)={0x40, 0x1a, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x21, 0x1}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0xfd5, 0x40) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001580)=""/113) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000800)=0x5) r1 = syz_usb_connect(0x1, 0x765, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0xa4, 0x0, 0xf7, 0xff, 0x17ef, 0x3062, 0x652f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x753, 0x1, 0x4, 0x2, 0x90, 0x5, [{{0x9, 0x4, 0x3c, 0x6, 0xe, 0xff, 0x2d, 0x1b, 0x83, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x3ff, 0xb5, 0xc1, 0x3c, 0xc543}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x3ff, 0x15, 0x20, 0x4, 0x6}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "264db1832b20"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x1, 0x8}, [@obex={0x5, 0x24, 0x15, 0x528}]}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0xff, 0xa4, 0x7f}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xf8, 0xff, 0xf7}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x4, 0x80, [@generic={0xa4, 0x21, "661830184972487fe92691eb47725f23507b74089c206b2796f12de6d26fc692159aa1bf8634b7d11c0635296f8a0c4768b5481dfb780857b44d5957b3e7e3fcc94c66b9982050eda0fedecb335ab678738a545f31819d06728e4f8bf49fb3b449d9bdc02ae2307ed867d68c58e247ce760e9ebabbaa8a66b15019827447b331588b86c7bad97aa2ff3ca218934322bf2fe598c526401a7550fc65f060dcb58b3944"}, @generic={0xcd, 0xb, "94ce7820736d78006a8d496b979cf0d472e689d6358eb8e2d51b895b3a183b8b9479a123ae3aefce18128a45e7d23d699bd6a8d745c221b4cc53bf71197c7062c56812fede325fa6eedc6f13acd72962af2cadabc155a6326a29d4314fbe4b71c30556212c78ff0e8fba9a53fb674c5799c2bd57176f5cee12db9111f2a8e61953972e806c3ad193973bee4be90d90e0a423de8edd637003b4ce491114b6c6d9d96c08a8969a46e8a4d5a7453906ce2929e4f63d585fb26a06b23293301973fe563cf278a56db5a8745331"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8c, 0x20, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x65, 0xfc, 0x2, [@generic={0xa3, 0x3, "45fdcc434a76ca6ba7093d808e0c7edf4f1add4eed7bf92f5805268a9fdeff6c4d7aa2c2c5ec2214ec40c33ddd5a29ecf299dbf9c6aefb44eb75527a1909f07d5f0f8bf40ed2df917045b3a7cfabf757d472b37ed285b925ce3ca5c7c7775d330f7f706c3aa56dda5315034939e98957856c2cc359c18997ffea3d78d1e251fb2e399f82fcb37600ed48f0c4232d601571565560a8db2672a2d29dbbc70ba0e529"}, @generic={0xe6, 0xd, "87e8fb96de5ecc2007275a6c39f644e14c7662079d45af1596ef2dc714df8715161628c10d65beaf6a0ce1e3de72a1a89b9cf9d07725cc47a1684a90649d5c1b34f28398f23248e4ba9e27d5b02f673ede58d229cd369779ffbd518b22e8aacb88b056ed88697b6c891f8c722f0f9092e823b2d08a716e3f2bd0698731b0b034d8803ec4c372cee56dee103ac657b05d58d85f2eb2cd1075c8ce6ab1a88317cd46af6bb5a59e6a1e82bdc6e3ddeaf11cb52d86e53846cdffacb7769f87520de43f552237293dc5460d5ea2cce0934a4a67c2db729b99b505302d82698c2bb26c3039fcc3"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x6, 0x7, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}, @generic={0x6c, 0x6, "8382aaafe48bcb6feec58df3612c29e176b1b7bd2c8a74afb8b52f5a4f1df6eb364ab5edc36b934ee524d33bccb66ccfce62bebf47d6ff39d8f08d45aecaad3aa3af63f8be23d5fc9604d54931a8be802ee5a3abfc85ca5a9fdd6f07a9bfdde0047ad0d6f974aab4a629"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xe1, 0x9, 0xf8, [@generic={0x71, 0x1, "1b95fb66cc94ba324d8133fc32177ee467ebc6083cae4892fb5a36bb92631795e7ddfaa5f299b7ab120bcaf50036968a40e8d0248feef4808a0da5a0369b888b4ee029f33165d01628beaa5306b3c10565de4374ea619db3774fe8130307d19b948747414b77bcbb3fa97c8bbdff14"}, @generic={0xa4, 0xf, "f4a85a90aadf14ce08eed7723e4c5407edafcb6b330f7adca5eb563f283debb0a6fd201e724a5701a8a00a4e6b46bac187f771f693c10db4f80e77ca01de56a1d378764045a80c06c4b68b522a5dcc4078504bab3946032f437b93d8c399a9e2b4f4862f6bcc439fb4e5dcb7dd531c564ec52b7e1785aedd24148b1f03bfe7803e3765bd30fdccca3405c466a140d150876ad79cfa22b2db3185d9e68688b43f86ba"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x1, 0xe0, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfd, 0xcb, 0x4, [@generic={0xf7, 0x24, "9e5dd82a5ff8a41ddf8823a42751d553b969a4d5cd4c4ad4d0474cfde6c89e84a1fb94cbb3b4fac55a7c1626e3322c93735b6b36024678c9d3381b59dccb7707731ee9c72f76b5d12ff4516ec134801d4be741782eed1179d4700ed00b0134bdc53cbbb698742045c8a3266ba5507fe9f819e96ccbbb2b8eb1739b171e9a4b91cd6bb278d41abcb4e601a71d4d73525e120f43a32657028d54a1a8484b2b38412a8a92e1ebe653119ce35b611e3c98d80d83e62f6a6ba17b2e2cc4e73b9ed7d526d09b7f5a7a51977fdc825eb0e02792ae8d64bcb501891663c167fb21edde75cd60c22c95172376f52c34138fa5faa5bd241b9de3"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x5, 0xc6, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0xbef, 0x3f, 0x40, 0x6, [@generic={0xe5, 0xe, "6372a1394098d7e5874ef7619f3d40d05b3923f95c322db6ee7d59ab2d5eef138f06ecc0389b8125a3f89b4b2013ad5d4075de6b5084c32bd877726531ba7fee4407de5026727bd5c65daa951312b545f85ac2dc8735bdd088f8a03efb3f79444f3e442d3bf8dfd9b144f5488b814b37d3772538dd22e24c9bb0db3cc4ee2065ff6c45badcf4b9a4db9bf23b0f9f79d50bccafdda1c7f7b259f80a63f70b4287632c1475e46e20a5a66b03bba174f3c3c993ca6bcd2af655423fefc77c343c57259b717a8680eed45e704acc5735ff3eab3fbe3aeb085c2835720017445ab25f182e76"}]}}, {{0x9, 0x5, 0xe, 0x14, 0x400, 0x80, 0x81, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x5, 0x81, 0x8}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0x9, 0x3, 0x10, 0x4}, 0x37, &(0x7f0000001080)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "acbcd9eb50ef82129196bb3002b94bb9"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f4dfa387c570877f6eb7cdd9cac00555"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x0, 0x2}, @ptm_cap={0x3}]}, 0x1, [{0xa, &(0x7f00000010c0)=@string={0xa, 0x3, "711791fe2ab5335f"}}]}) syz_usb_control_io$printer(r1, &(0x7f00000012c0)={0x14, &(0x7f0000001140)={0x0, 0x5, 0xf2, {0xf2, 0x21, "a69bb6bdcae2f9e8d5888369c3388790e8c7da654bfe1a8140f3d74c580e8e963039d8eb69fa115fa6b917af0127885a7cddb99fadfb84e292869335b297c59f3c98d8cf04a6c73c354d491f99039d0bb11b075647f36126574d296fd3dfa06ecf09f54aa8c9c212cfa76c044169aa4720662de993f857348eb70525d610eb0ab1f2279262ac0689d38c4a7cd3b3c021b53bc6b022523bb1a8c083422732f1292fce3d6f723783abbfa834102ac9da4493be729ee7e4b1cfd78b8c3cdd4416071882c6618136b353cfb717cc5c48b80a38f27cc35b5175a5d94424e053d6a0b87eef2ac429a25dc3e8771a63e22769de"}}, &(0x7f0000001240)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "c24684cdd7f785780fe69328d60ca553210aac9ea356a1b96fdddab57f4cfbb2126d7a340d5bfa8ffc16aa7234628a4088c208a2a6f3449113ea8350d41473dda409b1d97cc5e35fdec84f512e37b2aa10f390241ae9c04a287b"}}}, &(0x7f0000001500)={0x34, &(0x7f0000001300)={0x0, 0x6, 0x31, "ea04d0c701065e47460e6f9563af73c5e04d65215da36865957421f8120d52acc27b54b3a4489ca0e9aa3db1e6eed0349c"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000013c0)={0x20, 0x0, 0xab, {0xa9, "0483329f515c2137350c055d4f24466cb4c51401efb3dba80219d0a41b8c814d108a402104a49a1aafbf0d3ba37bd99067934c25b4b27526c659ae52f082cacdda8f0f45ad5d518c4001c040bd242df2e43f2a5cdaa90ed72dca4c7b2a958600aafd8ee442c9563dbd835b5801b5d090423f4dfab26c0cfe982a4801ae346314de212826aab47f405251433e545e9e81c749c3b7dafbbfec9fb54af14bdefeaaca87fd9e62f863f341"}}, &(0x7f0000001480)={0x20, 0x1, 0x1, 0x9d}, &(0x7f00000014c0)={0x20, 0x0, 0x1, 0x2}}) 23:03:12 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105d00) 23:03:12 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000200)=[0x5, 0x354a4]) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000100)=""/183) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0xf7c7, 0x2000) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000000, 0x36a40) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x57, 0x2, 0x3, {0x7, 0x1}, {0x4a80, 0x400}, @period={0x58, 0x401, 0xff, 0x3f, 0x7, {0x1f, 0x90, 0x5, 0x14}, 0x4, &(0x7f0000000240)=[0x0, 0x4, 0x8, 0x1]}}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000040)={0x51, 0xd3, 0x42, {0x2}, {0x9, 0xc4}, @ramp={0x4, 0x1000, {0x1, 0x2, 0x100, 0x4}}}) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000001c0)=[0x8, 0x2]) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x0, 0xb7d7b0d]) r4 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000003c0)={0x17, 0x95, &(0x7f0000000300)="1f84ec5893c205ddc74e8a4f934488163e7beea97e335012b5884a57e533340c1f924eac4057283e6537c5ddf42b8faaac796846f70fb8692184641e8a8951ad24f2b8141c396bbde11aedfb8ab57d17650fcdfea55e99f9ddc5dc3c8acb2cd167c935a13f54f4ad6d5a76d3b6659ef61a717bb48948e4c6bd8221ec84cc9c501d0c9e7fc5e4f2558e3b939dd4738281308173f953"}) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f00000002c0)=""/23) 23:03:12 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/156) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x260380) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000140)=""/178) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000000c0)={0x54, 0x1000, 0x5, {0x2, 0x9}, {0x7, 0xff35}, @cond=[{0xf210, 0xdd3, 0x7, 0x1, 0x1, 0x6}, {0x7fff, 0x0, 0x1, 0x1, 0x8, 0x70}]}) [ 2846.294157][T20128] usb 2-1: selecting invalid altsetting 0 [ 2846.300084][T20128] usb 2-1: selecting invalid altsetting 0 [ 2846.341556][T20128] cdc_ncm 2-1:1.0: bind() failure 23:03:13 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10ff00) [ 2846.406569][T20128] cdc_ncm 2-1:1.4: CDC Union missing and no IAD found [ 2846.413458][T20128] cdc_ncm 2-1:1.4: bind() failure 23:03:13 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x6e, &(0x7f0000002d80)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x260180) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/35) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000580)={0x3, 0x7fffffff, 0x2d13, 0x9, 0x8, 0x3f}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/60) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000000c0)=0xa000) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) syz_usb_connect(0x6, 0x126, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0xaf, 0x59, 0xee, 0x10, 0x1e2d, 0x53, 0x2bf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x114, 0x1, 0xfb, 0x20, 0x40, 0x6, [{{0x9, 0x4, 0xcf, 0x42, 0x8, 0x87, 0xbf, 0xa4, 0x3f, [@hid_hid={0x9, 0x21, 0x4, 0x20, 0x1, {0x22, 0x39b}}, @uac_control={{0xa, 0x24, 0x1, 0xfffc, 0x1f}, [@extension_unit={0xa, 0x24, 0x8, 0x6, 0x200, 0x7, "1c08a3"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x6, 0x3, 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x0, "4dcd"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x3, "f33ec442"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x4, 0xc, 0xfff, 0x1, 0x8}]}], [{{0x9, 0x5, 0x0, 0x4, 0x20, 0x1, 0x3, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x4, 0x7fff}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x4, 0xc2, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xa4, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x800}]}}, {{0x9, 0x5, 0xd, 0x8, 0x7f7, 0x7f, 0xff, 0xa}}, {{0x9, 0x5, 0xf, 0x1a, 0x0, 0x4, 0x40, 0x6, [@generic={0x2d, 0x21, "47428cc02330475df43c29fb7477c9c1d362d79ea576d3b644766e6d07c71685f5df8bf9b174d832a4898d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3f8b}]}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x96, 0x5, 0xe0}}, {{0x9, 0x5, 0x0, 0x3, 0x0, 0x9, 0x1, 0x2}}, {{0x9, 0x5, 0xe, 0x2, 0x258, 0x72, 0x40, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x66, 0x8}, @generic={0x29, 0xa, "946160a7678047c62767bc65a9cea0f30719187df82c51cc451b1d5348f52e440ad9512cc3bb9f"}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x7f, 0x52, 0x8, 0x10}, 0x34, &(0x7f00000002c0)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x3, 0xf000, 0x2, [0x3f0f]}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x79ca, 0xf, 0x3f, [0xffff, 0xc030, 0xffc027, 0xff0000]}, @ptm_cap={0x3}]}, 0x4, [{0xb5, &(0x7f0000000300)=@string={0xb5, 0x3, "e7c0da0597b29b5f33491702831e58f3ff21db4531968d2dfd517ef078c70188a02a754f3c440c54566e11043726eb217381ca2311846e2180cebeccfa3fbb754ec13328e5223c3ae5e54fb33e88edc2d519f798ca102ec70c0a4385c814324f130f1b3d4686e731353150abac2f80365e7ca7d2f27a24b36d3a7e12734a34c9b69dadba03ec65fee80cb12a09b197fa3f2ad74bcbb85ee55d8010a24902ed9cb510af6dc6793fe603c48ddf87a8c5d3646b63"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3401}}, {0xaa, &(0x7f0000000440)=@string={0xaa, 0x3, "03d0aa1f2e9a5257edceb67cd32ae24a61bb27bf0a90bae583caf333a15e31f82b881265b7933bd32dcdc8fbb3ff9563706f6e864d606f1af8156b4a3061e556da7be7f7634a03ff7c2698bea52b7a0c3a62644423e66e3e8498625cc7751ac2629e104e520ef5c2dc65932a9c0676b69bc121a5ef54155b8ca85a276590264a8f05699a78d8efa96e158e2cf950f69f427ff5c746f7e96d9b04adfb88ab7244559462826f3680bc"}}]}) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000100)={0x180, 0x8001, 0x4, 0x3ff, 0x8, 0x1}) [ 2846.492027][T20128] usb 2-1: selecting invalid altsetting 0 [ 2846.498550][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2846.525202][T20128] usb 2-1: selecting invalid altsetting 0 [ 2846.547728][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2846.573112][T20128] usb 2-1: selecting invalid altsetting 0 [ 2846.579274][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:03:13 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x400000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x583e, 0x81]) [ 2846.596398][T20128] usb 2-1: USB disconnect, device number 96 23:03:13 executing program 2: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000040)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/63) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:13 executing program 3: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) syz_open_dev$evdev(0xfffffffffffffffc, 0x7ffffffffffffffd, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x31, 0x280001) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/30) 23:03:13 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xc5, 0x260800) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000001c0)=""/156) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/134) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/147) [ 2846.894119][ T2686] usb 1-1: new low-speed USB device number 117 using dummy_hcd [ 2846.901918][ T32] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 2847.014105][T20128] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 2847.154190][ T2686] usb 1-1: Invalid ep0 maxpacket: 512 [ 2847.159813][ T32] usb 5-1: Invalid ep0 maxpacket: 512 [ 2847.314167][ T32] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 2847.321762][ T2686] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 2847.434153][T20128] usb 2-1: config 1 has an invalid interface number: 5 but max is 1 [ 2847.442462][T20128] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2847.451658][T20128] usb 2-1: config 1 has no interface number 2 [ 2847.458431][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2847.469978][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2847.481009][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2847.491137][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2847.500971][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2847.584091][ T32] usb 5-1: Invalid ep0 maxpacket: 512 [ 2847.589968][ T2686] usb 1-1: Invalid ep0 maxpacket: 512 [ 2847.596141][ T2686] usb usb1-port1: attempt power cycle [ 2847.601636][ T32] usb usb5-port1: attempt power cycle [ 2847.684168][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2847.693565][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2847.702351][T20128] usb 2-1: Product: syz [ 2847.706599][T20128] usb 2-1: Manufacturer: syz [ 2847.711191][T20128] usb 2-1: SerialNumber: syz [ 2847.735493][T28638] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:14 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0xf}}}}]}}, 0x0) [ 2847.984044][T20128] usb 2-1: selecting invalid altsetting 0 [ 2847.989841][T20128] usb 2-1: selecting invalid altsetting 0 [ 2847.998417][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2848.012604][T20128] cdc_ncm 2-1:1.5: CDC Union missing and no IAD found [ 2848.019768][T20128] cdc_ncm 2-1:1.5: bind() failure [ 2848.025396][ T32] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 2848.033132][ T2686] usb 1-1: new low-speed USB device number 119 using dummy_hcd [ 2848.052445][T20128] usb 2-1: selecting invalid altsetting 0 [ 2848.062434][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2848.074097][T20128] usb 2-1: selecting invalid altsetting 0 [ 2848.080082][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2848.092057][T20128] usb 2-1: selecting invalid altsetting 0 [ 2848.100968][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2848.110671][T20128] usb 2-1: USB disconnect, device number 97 [ 2848.134215][ T2686] usb 1-1: Invalid ep0 maxpacket: 512 [ 2848.139697][ T32] usb 5-1: Invalid ep0 maxpacket: 512 [ 2848.294009][ T2686] usb 1-1: new low-speed USB device number 120 using dummy_hcd [ 2848.301991][ T32] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 2848.394659][ T2686] usb 1-1: Invalid ep0 maxpacket: 512 [ 2848.400342][ T32] usb 5-1: Invalid ep0 maxpacket: 512 [ 2848.406758][ T2686] usb usb1-port1: unable to enumerate USB device [ 2848.413233][ T32] usb usb5-port1: unable to enumerate USB device [ 2848.473969][T20128] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 2848.874010][T20128] usb 2-1: config 1 has an invalid interface number: 15 but max is 1 [ 2848.882116][T20128] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2848.891244][T20128] usb 2-1: config 1 has no interface number 2 [ 2848.897542][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2848.908573][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2848.919531][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2848.929413][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2848.939274][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2849.114483][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2849.123982][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2849.131992][T20128] usb 2-1: Product: syz [ 2849.136746][T20128] usb 2-1: Manufacturer: syz [ 2849.141349][T20128] usb 2-1: SerialNumber: syz [ 2849.175331][T28682] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:16 executing program 4: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) syz_open_dev$evdev(0xfffffffffffffffc, 0x7ffffffffffffffd, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x31, 0x280001) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/30) 23:03:16 executing program 0: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000040)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/63) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:16 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/64) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210201) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x100, 0xb04, 0x0, 0xc89, 0x1ff, 0x8}) 23:03:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffb, 0x5) 23:03:16 executing program 5: syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x69, &(0x7f0000000000)="33b33d96c56aa52ca669cd71e99272f7ffac6a9c02c002015e27a90df517b76c038d44dcfa450dd11542369210f0d202114118ee440f520dc92f1b37426d033337a3c8126508ade59bd5a11ac7773afcfd7df04014ba6025807d9d35e2cf563266739796b8e891ffbc") syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:16 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x10}}}}]}}, 0x0) 23:03:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x98740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:16 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0xd5cedf5cdf624210) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) syz_usb_connect_ath9k(0x3, 0xfffffffffffffdb1, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe75}}]}}, 0x0) 23:03:16 executing program 4: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) syz_open_dev$evdev(0xfffffffffffffffc, 0x7ffffffffffffffd, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x31, 0x280001) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/30) [ 2849.454293][T20128] usb 2-1: selecting invalid altsetting 0 [ 2849.460128][T20128] usb 2-1: selecting invalid altsetting 0 [ 2849.490188][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2849.523738][T20128] cdc_ncm 2-1:1.15: CDC Union missing and no IAD found [ 2849.530905][T20128] cdc_ncm 2-1:1.15: bind() failure 23:03:16 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/64) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210201) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x100, 0xb04, 0x0, 0xc89, 0x1ff, 0x8}) 23:03:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x105042) [ 2849.604713][T20128] usb 2-1: selecting invalid altsetting 0 [ 2849.629542][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2849.647027][T20128] usb 2-1: selecting invalid altsetting 0 23:03:16 executing program 4: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) syz_open_dev$evdev(0xfffffffffffffffc, 0x7ffffffffffffffd, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x31, 0x280001) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/30) [ 2849.667835][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2849.675186][T20128] usb 2-1: selecting invalid altsetting 0 [ 2849.681110][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2849.696275][T20128] usb 2-1: USB disconnect, device number 98 23:03:16 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/64) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210201) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x100, 0xb04, 0x0, 0xc89, 0x1ff, 0x8}) 23:03:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x5ff482) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x101, 0x44400) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x9, 0x0, 0x2, 0x6, "4196b88b9d6a548dba0782cfcc5b286608f0c84da6917041ed84fdfb20c4d2b0"}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x7fff, 0x8001) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x4]) 23:03:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x105042) 23:03:16 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/156) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x260380) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000140)=""/178) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000000c0)={0x54, 0x1000, 0x5, {0x2, 0x9}, {0x7, 0xff35}, @cond=[{0xf210, 0xdd3, 0x7, 0x1, 0x1, 0x6}, {0x7fff, 0x0, 0x1, 0x1, 0x8, 0x70}]}) [ 2849.844011][ T6374] usb 3-1: new high-speed USB device number 120 using dummy_hcd 23:03:16 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2850.143850][T20128] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 2850.253942][ T6374] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2850.262139][ T6374] usb 3-1: can't read configurations, error -22 [ 2850.413841][ T6374] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2850.544531][T20128] usb 2-1: config 1 has an invalid interface number: 16 but max is 1 [ 2850.552890][T20128] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2850.561907][T20128] usb 2-1: config 1 has no interface number 2 [ 2850.568325][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2850.579444][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2850.590383][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2850.600264][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2850.610040][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2850.804599][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2850.813871][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2850.821916][T20128] usb 2-1: Product: syz [ 2850.824485][ T6374] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2850.826157][T20128] usb 2-1: Manufacturer: syz [ 2850.834057][ T6374] usb 3-1: can't read configurations, error -22 [ 2850.838702][T20128] usb 2-1: SerialNumber: syz [ 2850.845290][ T6374] usb usb3-port1: attempt power cycle [ 2850.875259][T28718] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:17 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:03:17 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x6, 0x94, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x5, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "1fe0c03ea3b7"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x81, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x3ef6}, @dmm={0x7, 0x24, 0x14, 0x0, 0xf6}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x200, [0x5, 0x2, 0x3, 0x40, 0x7, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x3f, 0x37}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x5, 0x7f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0x2d, 0x54, 0x20, 0x3}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x48, "0f4f2989b8519a03565c8b438c75f4f5"}]}, 0x5, [{0xaf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="af034028c3f27c45fc77a33169d421e645e8384654840b9f8392a01732b3ba739a859d5fe1c4fd46156501d7613da806c7b558dc2f3bec38a078ef7c30c6e500fc4a5b5d5db37fc1b9100b5a4653d25c7c57e61e5ad75cf63f6ee3227071d07e84a1c0a208713ea10873ad4f181895496a885f723e5491f811142f164bae734936e10e88ebffbee087506ee18a7857239f9ef42966db18db4a1dfb70208842bab28fbf36a4f48b90ef43fd82b3f1380d176f69c37205a43af4c0861171a8b523754d833a54b22ffb8756a64a0ec28244fbefeabe934d99bc66c4ee0b1e67afc3bbdad885d294cb7c05f29e403be892c6de736de2ccefd3b6111686fb3416c8f0dfcf44e93c230ee33d2e0a167bb90814f2c378dc4475018163b49396fdb6b528b578881191d671b9f698c4beaec4fca58b8e3da5a55b3e68e92256ea313f8e"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xa, 0xcf, {0xcf, 0x2, "308a0c49bacbb909d1cce8f4780f155f2aa09ee325386f3efc35b1d176de062dccfbbea342698c6991a3f7c1e5c6fa7c22db532249e16ba58ce967989bdb36632b428249a100135f28a47e64ea48077b0dadd7c6c77e1bdaccf7cd412976bbd0a6a0bfeeec3dbdbdc95ea7c4a5af33dc17eec1a43c5937e418293fcdb1ab689b58f19548dd9288604409ca639a90482af74df8f05e45df635a54328df37da38df84a9f314597da0572789a8573f9de4087cded4282b74dcded5876a11cb72105de9da55f8a3e2f66f88192b819"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f00000004c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x81, 0x2}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1e, 0x60, 0x7f, 0x80, "85ddc607", "73f5742c"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x80, 0x8, 0xe1, 0x2, 0x6, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)={0x20, 0xb, 0x51, "76fc090885231cf6b24c6355cf465320286134bbc5ca1fd02a783f8641131a55a1343a9aa5148badfa07d17d82fad6956e3b4555dcd26f79d7db3116d8dce54fa84df63ba77addb2c19275fca4c128579b"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xda}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x80, 0x80}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "3f1e"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xffe0}, &(0x7f0000000840)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "16fc"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c40)={0x24, &(0x7f0000000140)={0x40, 0x3, 0x32, {0x32, 0x5, "7c70a0586941567697c28775c169e60b608788d5fd768696435d1748270d0b9547ff1059fb304ff4e215763e91c1d65a"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f00000001c0), &(0x7f0000000c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf1f, 0x8, 0x1, {0x22, 0x649}}}}, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)={0x20, 0x6}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6f}, &(0x7f0000000d40)={0x20, 0x1, 0x90, "ac294b7d20a3d099bf32783660e69d1a4082ef6e528ab8a18083544ba3e0fc90bbdaad94418b6062ba7dae19cea730f37953cdc7eb9dfeeb22f2184c5b12361fea0a8c9a19c45c8f5124ddba5ce157f26734a7ae44e49ebca434f4d1f860bd9b1c20d3abdb02dbdee1d82a91e158cd7f8479e4ccd003cec3e6b976930a1d5df08f46cb3bf8cfe387c5be98c343fb8021"}, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0x80}}) r1 = syz_usb_connect(0x2, 0x9af, &(0x7f0000000e80)={{0x12, 0x1, 0x300, 0xa9, 0xc5, 0x8f, 0x20, 0x2770, 0x9050, 0x2b4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99d, 0x2, 0x1c, 0x1, 0x10, 0x2, [{{0x9, 0x4, 0xe6, 0x3f, 0x9, 0xb3, 0x8d, 0xca, 0x5, [@generic={0x32, 0x3, "1cbef9b2d56fb7d3cf4ecf3df05e810e65e7631ae1aa424e214f51a61fd361a2daf9590d8d0119be67bb79fd8723ec51"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d15a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x401, 0xb775, 0xff53, 0x5}, [@obex={0x5, 0x24, 0x15, 0x8001}, @mdlm_detail={0x21, 0x24, 0x13, 0x7, "daf761e436556070f0c62d0c0de123a8c79f2d02e89dffb14180206511"}]}], [{{0x9, 0x5, 0xa, 0x8, 0x400, 0xe0, 0x9c, 0xff, [@generic={0xa7, 0x21, "9ab3b96f88aa911891065836aa0b3db920aad3a2d6f24e12fbdac10124a7a8a76f628e9e1ba6d0ecac04be12bab5fc6b494f861a775aa25e18511332ccf0f6f2985a39fcff7f7dacc6e5632317a5e538e5e742909aa3165bc1cd9137863a92ac51b7db1a2246f97e2d203d8736f95040ee28a731b5f7a6286fd9db4a904eaea8d826a3955af8e53810a1359a0daf0667cbd2f9b872e13386c3019d9230a0dc966c23101936"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3a5e6ef224cc3fae, 0xaf, 0x40, 0x9, [@generic={0xd2, 0x3, "86a2f080dd234410bc8a513f05973ad0d1131c4ea6b836bfe3bab7804bae1d6ce8a458cb2d55d024b45e8a943b917627b6b060251ae516432b21c623d7b473125c35de2b603e28078ccc06cb9ae0b0029b93f2506f68cc0a45888effb749417a30826f450945654ca4575f967b636b08ccd869edbd91da4c217a17fccf2722e29135e003cfbfbad851d0cd061cdc6d3c0cb09f1ce6896cfda48005d396233814aeff7568526580396d6ecd5778f5478717257bfb90b1c95550a8680f55613240fc1a3d04de42ada36b3cffbc1c8c8c0c"}, @generic={0xe3, 0x5, "87ac6203f2873eada298de4e28b2c1cff23e9eff53ae0fe1a7ee1be0f23ac17f9bdbaa60edd36ce5414060a1da1c78062f67e52af107382bdd88bcafe7989c4298df77a2af525a45a12c59840a16ff0f6ace12d18fad8d1cc367026fded597610b1b45170fd8c42b453edb066a089449f8cc6e54d5d9574e09bd1a1580c0af19cebad913acbd8978a2c995dbed6e190d8b65ee9f02e3aef664a8250c73ad776f8b95b2f47de63f6ed5b067efa0453f4df976aa9b7c68308af9d0f82040b4596e92c1597797356d7494425baa59a0a917d14756f721a81f12d5af231c10f9d5e3c8"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xee, 0x0, 0x6, [@generic={0x101, 0x5, "53726f5a076f5a3ab614be174705194e490b3eda1f19e1d50378aa0c61e5f9d1dc301f2e2415303329ea26cd90a206154246c18bd1af5082f49faac4c2de102918d96077956bb64e646f3b505258d636165be3345cfa60a1822320840402e7be7f0d80cf8aef612081138a5da33120da385a4998f7a82dca1829cd81e37c33f428ddf0fa3ef738c4d16ba41ff9deabe68e5b8bbe173c94242dfcc843e6394e1f50979abc73526244d12bcd152aed86f40df51f35d681d5b7886a6fbf998150ef7a8cc0d8fc595f69bbe63a988cf358483709078793ca1225aaee9f5f460d4163224f9544f42d6276457a3a27a304d7936e6f24af179dc2d2481b93f367f0ea"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x8, 0x43, 0x20}}, {{0x9, 0x5, 0x0, 0x0, 0x28, 0xe1, 0x40, 0x7, [@generic={0xe1, 0x22, "973ce2caeb1c9d5345df14e3b8f4c18285ac22717461bf8457b0f7a026fb9caf7d2a239f1dee35bd90048dc0799ba93ad2c4a6d04791b3abd5846c1f0565acaa2590d506694b1bc2a931052c2f87e5432252933498cbda1476e7dc3b14fe9d2c5228f9a5dd46132d39c54b205334fa3b418a69008136dd146f5ba73d844adaed7c190f828aa014ac39b1e1c0d9d39d6380382c3336538eff49f1f05986f8ba5168dad9e5d00fec1c20eb160243208b9eb7e2012042913e8fe3581a5e8fdbb255736a47243cee3122058ec81b9aa37eb9d08ea1de09a2eabc0d86486438a72e"}, @generic={0xad, 0xc, "ec8b3e7d8c9f1e36cb22b1c01363e5b3528f997cbda96f462e8b81cc0504c71828b9a7be0fa6a9d19948d2f2f7880363a26d942820229214db645ab09b1b81c3a47d298d27bf5520b1e0b0530dc6ea7fd7c4a547d482056c598a55b9467a0c5392bbfe9c45807dfb176074f44442b99d7399df48610f63e3dfa4c3d4b7541ccfdcfc3466e9bce4898c8d73a90d2f3ae9444d14fea569ec2ca2690ba293ce021a5a476383852d7f88d22641"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x40, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x3f}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x0, 0x2f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}, @generic={0x78, 0xf, "c9b0cf7ffe2074c31facecb14e35d48ef4fadca7574ca33d632e8777dea2fc1c402bf8deae35728460ac1e32b420c0910f0a4e8b4cef41ccbff6202ad6d5865bc669218294e59c7fbd83817e5a80d577da39cea055c865dbfefa863481951d4a877c1a22248c31fd5835ec10aa6a9253433ee060df0d"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x0, 0x6, 0x2, [@generic={0x6c, 0x1, "48dbd577401326fe6710dcea2482adefdeb38389ead929ad62fb4854c5416c43255d4d6ec431dc0d2c8bdafdf4d68dafaf2ba45685916fbe35ad52884bc512749fee354c411bb43897dc6feca36e159a1a860f58f1f9555425c45eb0cf7381b5d65c0f9fa5c184b781f8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfd, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x1, 0x7f, 0xf1, [@generic={0xcb, 0x22, "08fdc714232fc759a728f2b10b409ef38071dbfd4a22a0b425a28738ee9db354a757fe58bca4f67baf209e168d80e23b4d45d8bc68db96e144b265463ac6e3c4827a777bcde5946bad4ac33c6250cadcb81e511b1b94e3050974b80abed9b17b3cbc1f8faf577cad6cb054205657f6781469ee7af90406e6f18a2256408a0e63b505226dbf5cd2a71180d101422f1ac4b38ae41515613a0f1efd32debb82c2350960889d949e386dbd1e443a703eeebec85dfe9e0b3dd779cc7b95103e855a6a66d9d515985b38909b"}]}}]}}, {{0x9, 0x4, 0x2c, 0x4, 0x5, 0x6b, 0x3c, 0xd0, 0x5, [@generic={0xdc, 0xd, "661a45be5658e74368044a5f5c22fca53e99a5c502cffee0263935e8f18d92c33d62354b8ac71e9f68f8fa3ae687c36c7dda6e056d71ac1dab63b5daf1a2818a3ebf68449088e9fc70d589b396811595f400f7e4ba2ddf33829877cc61c90f6b2f18aed1a685da9a90b6a1d6c27095c513d3054e396e9cf8bc69f209102c5de5e4af7837dcd49c9aef63db814ff1d85f2f79e117ba1a16e4d912cbb638d03b797c82a912c2246609ae717845cd6037a16a1b4608b3e56e162eb9109e47064a5b43bbec417eb9a3fab9ce16d4ae45a5b7e7baaf523c5d15d5b15e"}], [{{0x9, 0x5, 0xccafed2f10d74035, 0x0, 0x10, 0x20, 0x80, 0x7, [@generic={0xbc, 0x21, "17fc76cd83e24082fa4fe4baf630046a5d26788ee5ad8ba4285e1d3ce13ccc0ea0135434c04c1128f0da7b8e5bad503e6237bf170ba79966c460ecaf7b3310f7a679e50d58f338a13cd17a68ece7a02261f65901c81eb278f7395dc34044acbe837adb30f43c7cec415db5aede30c531f67b0054af1e22cc9c4bfea7f00ab084863b1bd0cd635d9d64526392e4ba1c6cfcd86420543427f63d4e140562ba3d8e8cb3d6d0e06f76be0c5f883269cdc5501db5cac882ce2afffceb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfff8}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x6, 0x0, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x8d, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8d, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4010}]}}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0x20, 0x81, 0x2, [@generic={0x30, 0x7c05ff51a2182600, "32c43b5c127b939ea06cc3896f59b04cde763dc1349446398e78cd1d0161a9213e3f107b49c8083e84863ca7abbc"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x0, 0x7, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}]}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x250, 0x10, 0x7, 0xb3, 0xa9b3beb7d46b969d, 0x6}, 0x26, &(0x7f0000001880)={0x5, 0xf, 0x26, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x7, 0x2}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x46, 0x40, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0x9, 0x1}, @ptm_cap={0x3}]}, 0x7, [{0xd, &(0x7f00000018c0)=@string={0xd, 0x3, "7ee9076346f9f3882c2038"}}, {0x7c, &(0x7f0000001900)=@string={0x7c, 0x3, "c6e3c52f54fe3766faeb70e0655252e0ed43ec2b378e09ee4bf1aa25c02e70bcf377dd01212144c16c9e6f7496e76e011476e04c4cc331f42624a99d9d05bd09c86355155dc4d5180c48a3544e5ebd9ff807fa9007f653b6855964d2ac808912bb91d445118d5b7ed497d3a70955bf399f2dca84cdebfe58a031"}}, {0xdf, &(0x7f0000001980)=@string={0xdf, 0x3, "0568dc08368352f03e00d04f447f25a0f4aaa7a7033017d6b7a10ce09eb4c06739b6f2c0840128c434da60d1d8bfc1256d0902806a8e8a14e91886cb28dea494064c18bac4f21ecfef21fd52d0d5925e1263022a299af94ac287f01a5c4ea19ea9a3cf3ab52b6e8bdb5b266b43581b2c4a22c78ffca12248628dbaa94849e156446b768ac46db4dbe05d18a766e958db20a4080da2c57139b882a7f66d3e4105853e4592eb95de852d5937c743f25ec75edc346d7c561d8a5025c3d44f38e48317867d6df685dfc04cc21e253218da1e152ace593611e182f57a4d9aa1"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x405}}, {0xb, &(0x7f0000001ac0)=@string={0xb, 0x3, "f42348e3d32b5ccc67"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001d40)={0x24, &(0x7f0000001c00)={0x0, 0x24, 0x52, {0x52, 0xb, "4997e2860070485b1b8c23d0a4d2d12ae12b02f951e8a9086c6aea7e3d60d4185cd6415fb74f388ef2ab83fb2e0bc62bfdf59a2a7c07d7026f29ea511506ed8fd84a18454df7aece6362b0d9c9a0a0ea"}}, &(0x7f0000001c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000001cc0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x8, 'f'}]}}, &(0x7f0000001d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x40, 0x1, {0x22, 0xbe7}}}}, &(0x7f0000001f80)={0x2c, &(0x7f0000001d80)={0x40, 0x10, 0x89, "d1d5b0a867e5518ef76b13d7bb164e2cdaf2953b1fe9dec7b3a45ac3e8c2064bc3c93ac594f8ec27b4f32f2a2865a26c87976e82d1f03049e1fa936d3006a5cbb602008de0b3f07868ed6cfb744d3422fce4f8f0fdae3549477ce1eb2efff3c44eec334f5f9b9b1588e0e5cd6ea4029c19c0df65fa74291f19338865154bbc77b58c7459fcf5d77dca"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001ec0)={0x20, 0x1, 0x52, "c724f2318fcad932fd8a58defcbff2c44f51eae05d2a186716a5c8dd940dc64356a3376185659d2364af4af2d65a0f5a57877da6d3944027217cd04a9f0c6333ff1d49c541df7837a35f04d0a4a0709f33a7"}, &(0x7f0000001f40)={0x20, 0x3, 0x1}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2851.114069][T20128] usb 2-1: selecting invalid altsetting 0 [ 2851.119870][T20128] usb 2-1: selecting invalid altsetting 0 [ 2851.140135][ T33] kauditd_printk_skb: 76 callbacks suppressed [ 2851.140152][ T33] audit: type=1800 audit(1623020597.820:1371): pid=28767 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15050 res=0 errno=0 [ 2851.148123][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2851.199240][T20128] cdc_ncm 2-1:1.16: CDC Union missing and no IAD found [ 2851.206270][T20128] cdc_ncm 2-1:1.16: bind() failure [ 2851.221543][T20128] usb 2-1: selecting invalid altsetting 0 [ 2851.235330][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2851.246351][T20128] usb 2-1: selecting invalid altsetting 0 [ 2851.252444][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2851.259682][T20128] usb 2-1: selecting invalid altsetting 0 [ 2851.265751][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2851.274852][T20128] usb 2-1: USB disconnect, device number 99 [ 2851.294301][ T6374] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2851.463805][T15081] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 2851.583870][ T6374] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2851.591832][ T6374] usb 3-1: can't read configurations, error -22 [ 2851.643759][T20128] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 2851.753918][ T6374] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2851.903828][T15081] usb 4-1: not running at top speed; connect to a high speed hub [ 2852.023932][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2852.024606][ T6374] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2852.034966][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2852.042889][ T6374] usb 3-1: can't read configurations, error -22 [ 2852.054811][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2852.062886][T15081] usb 4-1: config 28 has an invalid interface number: 230 but max is 1 [ 2852.069838][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2852.087798][T15081] usb 4-1: config 28 has an invalid descriptor of length 1, skipping remainder of the config [ 2852.098242][T15081] usb 4-1: config 28 has 1 interface, different from the descriptor's value: 2 [ 2852.107564][T15081] usb 4-1: config 28 has no interface number 0 [ 2852.113963][ T6374] usb usb3-port1: unable to enumerate USB device [ 2852.121027][T15081] usb 4-1: config 28 interface 230 altsetting 63 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2852.132232][T15081] usb 4-1: config 28 interface 230 altsetting 63 endpoint 0xF has invalid maxpacket 1966, setting to 64 [ 2852.143624][T15081] usb 4-1: config 28 interface 230 altsetting 63 endpoint 0x87 has invalid maxpacket 866, setting to 64 [ 2852.154864][T15081] usb 4-1: config 28 interface 230 altsetting 63 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2852.166407][T15081] usb 4-1: config 28 interface 230 altsetting 63 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 2852.179844][T15081] usb 4-1: config 28 interface 230 has no altsetting 0 [ 2852.253833][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2852.263302][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2852.271581][T20128] usb 2-1: Product: syz [ 2852.275822][T20128] usb 2-1: Manufacturer: syz [ 2852.280426][T20128] usb 2-1: SerialNumber: syz [ 2852.305212][T28770] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2852.373819][T15081] usb 4-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=2b.4e [ 2852.382993][T15081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2852.391214][T15081] usb 4-1: Product: 栅ࣜ茶>俐罄ꀥꫴꞧ〃혗ꆷ뒞柀똹샲Ƅ쐨텠뿘◁७耂蹪ᒊᣩ쮆钤䰆먘켞⇯勽헐庒挒⨂騩䫹蟂᫰乜麡ꎩ㫏⮵譮寛欦塃Ⱋ≊过ꇼ䠢赢ꦺ䥈囡歄詶淄巠ꜘꐠഈ얢㥱芸㹭Ձ㺅鉅闫藞夭윷읞洴噼訝═퓃㡏菤蘗浽藶샟쉌┞ᠲỚ⨕姎ᄶ苡竵驍 [ 2852.422657][T15081] usb 4-1: Manufacturer: ⿅﹔昷剥䏭⯬踷▪⻀뱰石ǝ℡셄鹬瑯Ů瘔䳠썌␦鶩֝ঽ揈ᕕ쑝ᣕ䠌咣幎龽߸郺뙓妅퉤肬኉醻䗔贑繛韔ꟓ唉㦿⶟蓊壾ㆠ [ 2852.442609][T15081] usb 4-1: SerialNumber: Ѕ 23:03:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x5ff482) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x101, 0x44400) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x9, 0x0, 0x2, 0x6, "4196b88b9d6a548dba0782cfcc5b286608f0c84da6917041ed84fdfb20c4d2b0"}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x7fff, 0x8001) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x4]) 23:03:19 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84007) 23:03:19 executing program 0: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/61) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x56, 0x7ff, 0xd68, {0x1, 0x400}, {0x5, 0xfffd}, @ramp={0x1000, 0xf4c6, {0x5, 0xff7f, 0xe31, 0x200}}}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2000000000, 0x2240) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/169) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000002740)=""/4087) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x2d, 0x1, 0x2, 0x7fff, 0x7ff, 0x10001}) 23:03:19 executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0xa9, {0x9, 0x21, 0x1000, 0x9, 0x1, {0x22, 0xd5e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x50, 0x3}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xb, 0x1, 0x3, 0x20, 0x1}, 0x54, &(0x7f00000001c0)={0x5, 0xf, 0x54, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xf9, 0x1, 0x6, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xe0, "6e0fa07851f2081392c6f5f7b2ca15b6"}, @ss_container_id={0x14, 0x10, 0x4, 0xd4, "af944a0e19789642f3d2c715c0b730ea"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa2, 0x20, 0x9, 0x4577}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x80, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xa, 0xa, 0x8000}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc6deb85d738be8b5}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}, {0xde, &(0x7f0000000300)=@string={0xde, 0x3, "59b928e84d5be0a058b31a1565b41034112051124cfa925af3d37d191858d210d3e6883ba4edd92c067e933424844457e06fba08100da50dbac6ed2618a1793644eeced9a0433886b9355b48bb6057837a1e71a1f8563dc57f090b11607b525030bc9fbc0dae1ecea3fb624a366d9d2ed706fab35c81965c503266db5245e09045dbee7257ee03f821983f80a23b225e0615057f7ef5d3ea5e2df5dca2c42260ed73ed011c68f0d0a828d865eef386de21c607a3636c9bd5cdb8543439f1caeeee387f78c407d14b9177508286a0c824e801a6b64f602c2b346f2152"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc0a}}, {0xac, &(0x7f0000000440)=@string={0xac, 0x3, "769c0dae9b11ef736aa8d2c7a2d03db133250605dd66d853c9f80fe8344559add68cc8153920eb6626283d59f064d8310a62ecb6d8b702165d9042a8d856fa89e52dd470bc2fc71930cb171428d2d5c73e9320c2fa9ebc5011660bad98b2e7dce887cad2cd9a1f67d0ddbe04a9fe900a200b181f228e5c6400d1b7de5daf3f356f433ee7f248ea33f25c116a9917224e97835c4af0dc76bb991b6508452132b1197e3493560dfd4dfe0a"}}, {0x26, &(0x7f0000000500)=@string={0x26, 0x3, "f4fbbca5e8faab7f4c745dbf7be8c544c772596dcd6e2e94cc35f2b469e4b3e67ea756f9"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x441}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000600)={0x0, 0x7, 0x27, {0x27, 0x7, "236a488585a078ad12debe49d13c0ea008618e3d4169e0fc57854e8b796f5af06e310fda4f"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000680)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x0, "f8f60057"}, @main=@item_012={0x1, 0x0, 0x8, "18"}, @local=@item_4={0x3, 0x2, 0x0, "4d1dc00c"}, @global, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x5bc}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="200e3300000043c157ff4b13fb07d9e54d0e86f14f551616916e7521cd9b09d6001952c73f6cdf6b5aacf86108ab3068d6c261057025873491ecd8bc5de32c32ae3018ee"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000800)={0x20, 0x1, 0x9f, "647e2ee981e5fcf292717693d1b421a3b9444fa6cf35605d40788e38ce09cae7b43f4c8de7914b6693917b584c7da638b72db51ae1a8d8521320865762279f96d5d9fa4970ec67e348f18a9900aaf8d191ae0204a910afc364ada47e8eb9bdb3139dfc336eb244e56ed2bcfdd1a294a348850a50e0906a1a4cfac367d9cd75dde9a0cac9a5b00c5ceae4d29e8f6dd2ce41c42b8c94f9aeb1bdc2a45667469a"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xe1}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2a1, 0x20000) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000940)=""/180) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/255) 23:03:19 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x2}}}}]}}, 0x0) [ 2852.585211][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2852.613440][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2852.620463][T20128] cdc_ncm 2-1:1.1: bind() failure 23:03:19 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/61) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x56, 0x7ff, 0xd68, {0x1, 0x400}, {0x5, 0xfffd}, @ramp={0x1000, 0xf4c6, {0x5, 0xff7f, 0xe31, 0x200}}}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2000000000, 0x2240) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/169) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000002740)=""/4087) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x2d, 0x1, 0x2, 0x7fff, 0x7ff, 0x10001}) [ 2852.672999][T20128] usb 2-1: USB disconnect, device number 100 [ 2852.675599][ T33] audit: type=1800 audit(1623020599.350:1372): pid=28805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15072 res=0 errno=0 23:03:19 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000000000000, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:19 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x29270380, 0x7, 0x4, 0xfffff000, 0x10001, 0x800}) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/69) 23:03:19 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x51, 0x4, 0x81, {0x6, 0xffc0}, {0xfffa}, @period={0x58, 0x3, 0x4, 0x94e, 0x2, {0x100, 0x33, 0x172, 0x1}, 0x1, &(0x7f0000000000)=[0x800]}}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x206804) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000100)=""/216) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/26) [ 2852.797693][ T33] audit: type=1804 audit(1623020599.410:1373): pid=28805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343937362F48C7C060 dev="sda1" ino=15072 res=1 errno=0 23:03:19 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/74) [ 2852.853281][ T33] audit: type=1800 audit(1623020599.490:1374): pid=28821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15053 res=0 errno=0 [ 2852.877685][T15081] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 2852.913906][T15081] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 2852.921479][T15081] sq905c 4-1:28.230: Get version command failed [ 2852.951745][T15081] sq905c: probe of 4-1:28.230 failed with error -71 23:03:19 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x80000) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x0, 0x101, 0xfffffffb, 0x6, 0x8001, 0x10001}) 23:03:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/153) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/231) [ 2852.953772][ T32] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2852.960042][ T33] audit: type=1800 audit(1623020599.500:1375): pid=28821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15053 res=0 errno=0 [ 2852.997244][T15081] usb 4-1: USB disconnect, device number 105 23:03:19 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000240)=[0x4, 0x76]) syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000002, 0x720120) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x515080) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000200)={0x12, 0x57, &(0x7f0000000180)="2eb09f4e1e1d1315eac4f037aebf48fa74aba4670d01bbccb50e71916e0035253df7dfc837907cade7f52314a84e7c2a7e62a259bf4784387b9d83ce07efb4b2fc521e33a80d0d3ade691cae47d84855a4e00ebe7d6454"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0x3, 0x7]) r4 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000000c0)=""/83) [ 2853.013142][ T33] audit: type=1800 audit(1623020599.500:1376): pid=28821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15053 res=0 errno=0 [ 2853.034232][T20128] usb 2-1: new full-speed USB device number 101 using dummy_hcd 23:03:19 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/74) 23:03:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/153) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/231) [ 2853.113033][ T33] audit: type=1800 audit(1623020599.520:1377): pid=28819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15055 res=0 errno=0 [ 2853.175432][ T33] audit: type=1804 audit(1623020599.550:1378): pid=28819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F353034342F48C7C060 dev="sda1" ino=15055 res=1 errno=0 [ 2853.226282][ T33] audit: type=1804 audit(1623020599.570:1379): pid=28822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353331322F48C7C060 dev="sda1" ino=15036 res=1 errno=0 [ 2853.257861][ T33] audit: type=1804 audit(1623020599.580:1380): pid=28827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353331322F48C7C060 dev="sda1" ino=15036 res=1 errno=0 [ 2853.403679][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2853.415039][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2853.426484][ T32] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2853.439590][ T32] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2853.446336][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2853.456300][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2853.466443][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2853.603801][ T32] usb 6-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 2853.612872][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2853.621033][ T32] usb 6-1: Product: ⠁ [ 2853.625344][ T32] usb 6-1: Manufacturer: У [ 2853.629874][ T32] usb 6-1: SerialNumber: 륙孍ꃠ던ᔚ둥㐐‑ቑ社媒폳᥽堘გ㮈ⳙ縆㒓萤坄濠ࢺഐඥ욺⛭ꄘ㙹䎠蘸㖹䡛悻荗Ṻꅱ囸씽ॿᄋ筠偒배벟긍츞ﮣ䩢洶⺝ۗ돺腜岖㉐䕒郠狮頡耿㮢帢ᔆ缅ⵞ쒢怢班ǭ栜탰⢨旘옡ꌇ汣햛룍㑔㣮硿߄䯑瞑艐ꂆⓈǨ뚦恏⬬漴刡 [ 2853.661533][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2853.670819][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2853.678865][T20128] usb 2-1: Product: syz [ 2853.683029][T20128] usb 2-1: Manufacturer: syz [ 2853.687671][T20128] usb 2-1: SerialNumber: syz [ 2853.717076][T28807] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:20 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:03:20 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xee, 0x400) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/35) 23:03:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x28040) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105406) 23:03:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffe, 0x28087) 23:03:20 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x3}}}}]}}, 0x0) [ 2853.963822][T20128] usb 2-1: selecting invalid altsetting 0 [ 2854.004043][T20128] usb 2-1: selecting invalid altsetting 0 [ 2854.046335][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2854.099058][T20128] usb 2-1: selecting invalid altsetting 0 [ 2854.128781][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:03:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2887) syz_open_dev$evdev(&(0x7f0000000000), 0xcbf, 0x202) 23:03:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105403) 23:03:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x40, 0x90140) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) [ 2854.166426][T20128] usb 2-1: selecting invalid altsetting 0 [ 2854.177690][ T32] usbhid 6-1:1.0: can't add hid device: -71 [ 2854.185088][ T32] usbhid: probe of 6-1:1.0 failed with error -71 23:03:20 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x26000) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000040)="d0d44095343cbe9f5d485107ef1f8f983735e9424d2d0f232fe0c678f3cfe15da24e7df68eed4666c0412ad32e743a4cca825f61a9b2bc5ca263eea323c27167abc52252a21a73f3331a7c9e4361e09d16e11a8b28dcfb4d68ead08e46d755b379c423590e6c6fa6e12e574ed58356f62e51533aa15b1129a8f3abf671b494053b9b1da18c4a95f43330125dd1f75cdf") syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x4f0800) r2 = syz_open_dev$hidraw(&(0x7f0000000240), 0x800, 0x400000) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000280)) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/20) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x800) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000180)=""/134) 23:03:20 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xff7fffffffbffffe, 0x10241) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x9aa87) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x240401) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001700)=""/4079) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000080)=""/4096) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/46) syz_open_dev$hidraw(&(0x7f0000000000), 0x6, 0xb4000) r4 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000002700)=""/4096) [ 2854.219911][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2854.235806][ T32] usb 6-1: USB disconnect, device number 120 [ 2854.266625][T20128] usb 2-1: selecting invalid altsetting 0 [ 2854.296428][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:03:21 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/129) [ 2854.348975][T20128] usb 2-1: USB disconnect, device number 101 23:03:21 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x800, 0x20c1) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x2, 0x3, 0x0, {0x1, 0xffe0}, {0x6e4b, 0x1}, @rumble={0x70f, 0x8}}) 23:03:21 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x5) 23:03:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0xb3, 0x8000, 0x7f, 0x3, 0x7, 0x17}) 23:03:21 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000, 0x12fd00) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x4, 0x6, 0x1f, 0x7fff, "f7730fa382f4eb1d590996ec2407e9bce00ff34a89fe38ee1370baf9b2d275cb"}) [ 2854.753586][T20128] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 2855.124147][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2855.135211][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2855.147325][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2855.157314][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2855.167050][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2855.334081][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2855.343416][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2855.351504][T20128] usb 2-1: Product: syz [ 2855.355899][T20128] usb 2-1: Manufacturer: syz [ 2855.360506][T20128] usb 2-1: SerialNumber: syz [ 2855.394681][T28879] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:22 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x4}}}}]}}, 0x0) 23:03:22 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x89b, 0x100) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/251) 23:03:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0xb3, 0x8000, 0x7f, 0x3, 0x7, 0x17}) 23:03:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x6) 23:03:22 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x53, 0x1, 0x53f, {0x8000, 0xd2ce}, {0x9}, @ramp={0x1f, 0x1, {0x63de, 0x2, 0x7ff, 0x2}}}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/210) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x2c0c01) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000180)=""/188) 23:03:22 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x12, 0x23, &(0x7f0000000080)="c6d8cf7cfd1484bbf7649f420456b6067f0b3c0004bf0d8852f8794a5679e755f88eb6"}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/65) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x12180) [ 2855.666181][T20128] usb 2-1: selecting invalid altsetting 0 [ 2855.672107][T20128] usb 2-1: selecting invalid altsetting 0 [ 2855.724027][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2855.770811][T20128] usb 2-1: selecting invalid altsetting 0 [ 2855.807345][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2855.814746][T20128] usb 2-1: selecting invalid altsetting 0 23:03:22 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e50b, [{{0x9, 0x2, 0xffffffffffffff6f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x414, &(0x7f0000000080)={[{0xed, 0x4e00, "1e96151e1699e4d0d8dfb558a1de721bb5dfca8091c9a7e4ca758c381a496cf77310937189e4a0d0565cb420cd15f6f7be790ff8d1d68044b750c8b82f36c96d3dbb7e6046e4bd3ab3eb14324a466e4786d75752defb282464d0325d6f314d2f91f75eabbffeabb900706160d12f9850871b5cffa7c79ec7c417f3d5926057c1b15a7ea8368d1209947a57b1be274c2bac4210c1aaa0d8cbd014d8bbdbc8470c09f44425598b3ca7e8f32ccdf64b3cd85e7781eb4900bc5886c68e0e5aa77beb7fe86d7fcf9b3f2a18039241fdf3fb5b4bedb0243aef022f28ba57c9b26269458255f7a52213c98641b1d5533e"}, {0x82, 0x4e00, "0ebc9e1ce6adafbf3d20ecd4d2fb6145f94a35d2d2c187f5fae638f56b3c632bd6261448df1c4d60ee628fd75309451b35b34958ac51fd206ec1333dd67197dbcb829e9813a82011a7b41e0de5199cf972c0e1968e2f1613fd6e5e1f0cbd509f5111ca631710f17fa51042566228b81558edf1c0d27d98463b0e432c34462e29c03f"}, {0x7a, 0x4e00, "5397dd58b550ec9568498e0fa743d1a55a3796da0e82bec9c54a5eca50dc0032c1ff9fac4d6a5238c773a29cc4428c1348ab830eaa559ec990c6f04cdad2a86bf06b315831525e20bb251bdc6049748ade74ad88e3fca79296817a3f7f4aa1ef730ff90d341c4d005f9b79ff955129f7f1c226f21ac92a27b0a7"}, {0xdb, 0x4e00, "c830ed320298c5378f5e102dd268c24379735ce0203d64b63f485dedd89108e997f2c37f294ca8ddee899c12499f7fb821508666ba3a865b40cfea09b7f16357fc2e464cb5ed023f7bcea8549dd73b285e41afefc3f3f50e6d5e3835dc34277fc7b27a3b62ccaf56c4243e6cfd517e3ebde826e879b1f4c25785c59af7409ad3cb37b771529c257d10b19b7b477eb3259dd0d2a6033738adae11040c637d4085ce2153ca7630b8da925e4b76f8fb14cb070c5b6078a5bcd95f397f85830de1ea229b9adef244d3a7737b87fb39c1131fded131532bee16eb58a2b3"}, {0xf1, 0x4e00, "eabd6c637ba57432a513754cfaf07c25f6d93cf0dac84a25002102a1ae73febf86e8a4abd761eba2919af1c22ea1e50379ef3be4bd75138c8ed46c1f838bde241ea49ba1f1f4472a21fabd3d05d66b47800df4697f5f434fc48bd2f5f11bde0f3d9bda040e00aba1a93cb584fb26b4bb1a5ba9d95126eb6fc8b789802ca3fb92245a49e5fc5d969d73b3322f59330b303d7921c9fd854dfceac1a93cfd1aa9a9607d5564d1300605c712e324e65c19a43d5bd087149064c34fbd933e44ef72ecdf5a7ea83b68e64f2449df62cc1fea26ff76b246afb8e2f98c44b549f07e5734499a65ddd16f7271692562e9a28fe1ae3b"}, {0x3a, 0x4e00, "d7145c6d5c8a8a0fb6b6a8bc4167ebd35e124c84eb0946cb3b45371c087ffa65b0352000abc88021f70ac4b5c784c02a18f00c8949c4ac6f6cf4"}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2855.820764][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2855.833251][T20128] usb 2-1: selecting invalid altsetting 0 [ 2855.843299][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2855.853208][T20128] usb 2-1: USB disconnect, device number 102 23:03:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x16000000, 0x105400) 23:03:22 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x27, 0x10200) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/218) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x7) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x16, 0xe3, &(0x7f0000000140)="a9feaee031e5aca50017718f8f085236498423513ee07e99c82f0ea8135059c9d3d7826081617f7a46f928ca46df18dcaa6506f56a5e31768301c852056f9053b564228d6241ad9969e9ae7f8b8387a3ba854d1cfd3c590fbdd0af26ab6f29ef1df61317886b39641830e2f935aa01131e00d2a2511851464bc87cdbd04b55c3a4744e251fbd845db5711d0e080631736a810aed572dd3ed493ca2d8c9d8c551790457109420485adc3c77acbf5e58e5e34d2014da07f18a8ab4fe04b509e1451ae597cce36bf10436d3e35f439f17eec2b635cc7b4a874e6eca600a59c54ea6ad1701"}) 23:03:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x6) 23:03:22 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x400) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/245) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0x2ca005) 23:03:22 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/73) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/222) [ 2856.213512][T15081] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2856.243491][T20128] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 2856.523719][T15081] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 2856.613624][T15081] usb 4-1: config index 0 descriptor too short (expected 65391, got 122) [ 2856.622279][T15081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2856.624125][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2856.643620][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2856.654650][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2856.664469][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2856.674164][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2856.703749][T15081] usb 4-1: config index 1 descriptor too short (expected 65391, got 122) [ 2856.712232][T15081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2856.793682][T15081] usb 4-1: config index 2 descriptor too short (expected 65391, got 122) [ 2856.802219][T15081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2856.863973][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2856.873323][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2856.881371][T20128] usb 2-1: Product: syz [ 2856.883708][T15081] usb 4-1: config index 3 descriptor too short (expected 65391, got 122) [ 2856.885596][T20128] usb 2-1: Manufacturer: syz [ 2856.894085][T15081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2856.898644][T20128] usb 2-1: SerialNumber: syz [ 2856.934940][T28940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2856.983540][T15081] usb 4-1: config index 4 descriptor too short (expected 65391, got 122) [ 2856.992137][T15081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2857.073644][T15081] usb 4-1: config index 5 descriptor too short (expected 65391, got 122) [ 2857.082213][T15081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 23:03:23 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x5}}}}]}}, 0x0) 23:03:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x301a42) syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x4200) 23:03:23 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x4010000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:23 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x400) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/245) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0x2ca005) 23:03:23 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x6, 0x22d320b3]) [ 2857.164703][T15081] usb 4-1: config index 6 descriptor too short (expected 65391, got 122) [ 2857.173314][T15081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2857.183780][T20128] usb 2-1: selecting invalid altsetting 0 [ 2857.189818][T20128] usb 2-1: selecting invalid altsetting 0 [ 2857.246349][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2857.291769][T20128] usb 2-1: selecting invalid altsetting 0 [ 2857.322626][ T33] kauditd_printk_skb: 60 callbacks suppressed 23:03:24 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x6) [ 2857.322645][ T33] audit: type=1800 audit(1623020604.001:1441): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=16378 res=0 errno=0 [ 2857.337199][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2857.350618][T15081] usb 4-1: config index 7 descriptor too short (expected 65391, got 122) [ 2857.365338][T15081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2857.424114][T20128] usb 2-1: selecting invalid altsetting 0 [ 2857.437708][ T33] audit: type=1800 audit(1623020604.021:1442): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=16378 res=0 errno=0 [ 2857.449596][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2857.462359][ T33] audit: type=1804 audit(1623020604.021:1443): pid=28983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353331392F48C7C060 dev="sda1" ino=16842 res=1 errno=0 [ 2857.479006][T20128] usb 2-1: selecting invalid altsetting 0 [ 2857.506908][ T33] audit: type=1800 audit(1623020604.191:1444): pid=28987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=13888 res=0 errno=0 [ 2857.512327][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2857.537931][T20128] usb 2-1: USB disconnect, device number 103 [ 2857.545864][ T33] audit: type=1804 audit(1623020604.191:1445): pid=28988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723637333838393131362F73797A6B616C6C65722E31574C6546562F353035332F48C7C060 dev="sda1" ino=13888 res=1 errno=0 [ 2857.633492][T15081] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2857.642619][T15081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.650779][T15081] usb 4-1: Product: syz [ 2857.655006][T15081] usb 4-1: Manufacturer: syz [ 2857.659607][T15081] usb 4-1: SerialNumber: syz [ 2857.704173][T15081] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2857.913392][T20128] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 2858.273918][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2858.283440][T15081] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2858.285104][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2858.305116][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2858.315082][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2858.324802][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 23:03:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000be1, 0x38803) 23:03:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x6) 23:03:25 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x16000) 23:03:25 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x8, 0x80000001, 0x7b0}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4c085) 23:03:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x105400) [ 2858.493427][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2858.502532][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2858.510622][T20128] usb 2-1: Product: syz [ 2858.512111][ T5] usb 4-1: USB disconnect, device number 106 [ 2858.514844][T20128] usb 2-1: Manufacturer: syz [ 2858.514865][T20128] usb 2-1: SerialNumber: syz [ 2858.555132][T28979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2858.582235][ T33] audit: type=1800 audit(1623020605.261:1446): pid=29010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14115 res=0 errno=0 23:03:25 executing program 5: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2858.684231][ T33] audit: type=1800 audit(1623020605.261:1447): pid=29010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14115 res=0 errno=0 [ 2858.715102][ T33] audit: type=1800 audit(1623020605.261:1448): pid=29013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14146 res=0 errno=0 [ 2858.737498][ T33] audit: type=1804 audit(1623020605.261:1449): pid=29013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343938352F48C7C060 dev="sda1" ino=14146 res=1 errno=0 23:03:25 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x6}}}}]}}, 0x0) 23:03:25 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x789540) syz_open_dev$evdev(0xfffffffffffffffc, 0xad, 0x18b405) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) 23:03:25 executing program 4: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x8, 0x80000001, 0x7b0}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4c085) 23:03:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/205) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000000)=""/116) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/230) 23:03:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000be1, 0x38803) 23:03:25 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x64a5, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff, 0x1]) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/249) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x400041) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/151) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x9]) [ 2858.767985][ T33] audit: type=1800 audit(1623020605.291:1450): pid=29012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14162 res=0 errno=0 [ 2858.817186][T20128] usb 2-1: selecting invalid altsetting 0 [ 2858.823017][T20128] usb 2-1: selecting invalid altsetting 0 23:03:25 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x301583) [ 2858.863193][T20128] cdc_ncm 2-1:1.0: bind() failure 23:03:25 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x103ac5) 23:03:25 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x64a5, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff, 0x1]) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/249) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x400041) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/151) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x9]) 23:03:25 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x64a5, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff, 0x1]) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/249) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x400041) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/151) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x9]) [ 2858.919991][T20128] usb 2-1: selecting invalid altsetting 0 [ 2858.944530][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2858.964416][T20128] usb 2-1: selecting invalid altsetting 0 23:03:25 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/246) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2858.986239][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2859.030708][T20128] usb 2-1: selecting invalid altsetting 0 [ 2859.063378][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:03:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x10641) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/11) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) [ 2859.076066][T20128] usb 2-1: USB disconnect, device number 104 [ 2859.363374][T15081] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2859.370344][T15081] ath9k_htc: Failed to initialize the device [ 2859.376773][ T5] usb 4-1: ath9k_htc: USB layer deinitialized [ 2859.463326][T20128] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 2859.843798][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2859.855029][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2859.867004][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2859.876953][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2859.886995][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2860.063752][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2860.072891][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2860.080971][T20128] usb 2-1: Product: syz [ 2860.085379][T20128] usb 2-1: Manufacturer: syz [ 2860.089963][T20128] usb 2-1: SerialNumber: syz [ 2860.114709][T29038] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:27 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x7}}}}]}}, 0x0) 23:03:27 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x74, 0x1017c0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:27 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000100, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x105400) 23:03:27 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x105400) 23:03:27 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x6) 23:03:27 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x3fffc00000000000, 0xeb7ed70f05639cf4) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2860.360190][T20128] usb 2-1: selecting invalid altsetting 0 [ 2860.377440][T20128] usb 2-1: selecting invalid altsetting 0 [ 2860.407544][T20128] cdc_ncm 2-1:1.0: bind() failure 23:03:27 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/30) 23:03:27 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x29ea81) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/80) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/112) [ 2860.437995][T20128] usb 2-1: selecting invalid altsetting 0 [ 2860.452740][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:03:27 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x101642) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000001700)=""/4096) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0xff, 0xec, 0x3, 0x0, 0x5, 0x7}) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000040)=""/142) [ 2860.485796][T20128] usb 2-1: selecting invalid altsetting 0 [ 2860.513315][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 23:03:27 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0xfffffffffffffffe, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4093) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000017c0)=0xffbffff8) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000001080)=""/235) r4 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000001800)=""/51) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001040)=0x1ff) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r5 = syz_open_dev$evdev(&(0x7f0000001700), 0x9, 0x80) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000001740)=""/75) 23:03:27 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x105400) [ 2860.541803][T20128] usb 2-1: selecting invalid altsetting 0 23:03:27 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/238) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2860.588229][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2860.609412][T20128] usb 2-1: USB disconnect, device number 105 [ 2860.963236][T20128] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 2861.333735][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2861.344732][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2861.356287][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2861.366396][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2861.376110][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2861.553720][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2861.562786][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2861.570965][T20128] usb 2-1: Product: syz [ 2861.575305][T20128] usb 2-1: Manufacturer: syz [ 2861.580152][T20128] usb 2-1: SerialNumber: syz [ 2861.604633][T29089] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:28 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x8}}}}]}}, 0x0) 23:03:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/133) syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffff, 0x400000) 23:03:28 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000100)=""/23) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/241) 23:03:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x101642) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000001700)=""/4096) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0xff, 0xec, 0x3, 0x0, 0x5, 0x7}) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000040)=""/142) 23:03:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x6) 23:03:28 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x9313, 0x105400) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x3, 0x3cb102) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x4, 0x1f]) [ 2861.843206][T20128] usb 2-1: selecting invalid altsetting 0 [ 2861.848995][T20128] usb 2-1: selecting invalid altsetting 0 [ 2861.895859][T20128] cdc_ncm 2-1:1.0: bind() failure 23:03:28 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x3, 0x6, 0x3, 0x3, 0x1ff, 0x6}) syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x210e00) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x151006) [ 2861.949056][T20128] usb 2-1: selecting invalid altsetting 0 [ 2861.984894][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:03:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x5) 23:03:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/239) [ 2862.011693][T20128] usb 2-1: selecting invalid altsetting 0 [ 2862.020463][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2862.032877][T20128] usb 2-1: selecting invalid altsetting 0 [ 2862.045310][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:03:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8000, 0x185221) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/36) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0x406041) [ 2862.070231][T20128] usb 2-1: USB disconnect, device number 106 23:03:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:28 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/174) [ 2862.453098][T20128] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 2862.833595][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2862.844622][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2862.855943][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2862.865805][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2862.875532][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2863.033660][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2863.042714][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2863.050761][T20128] usb 2-1: Product: syz [ 2863.054991][T20128] usb 2-1: Manufacturer: syz [ 2863.059714][T20128] usb 2-1: SerialNumber: syz [ 2863.084470][T29136] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:30 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x18}}}}]}}, 0x0) 23:03:30 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x1, 0x6b]) 23:03:30 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x6) 23:03:30 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x2000) read$hidraw(r0, &(0x7f0000000040)=""/140, 0x8c) read$hiddev(0xffffffffffffffff, &(0x7f0000000100)=""/240, 0xf0) 23:03:30 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7400, 0x105400) 23:03:30 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x44000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x6808) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2863.331259][T20128] usb 2-1: selecting invalid altsetting 0 [ 2863.346849][T20128] usb 2-1: selecting invalid altsetting 0 [ 2863.352751][ T33] kauditd_printk_skb: 61 callbacks suppressed [ 2863.352766][ T33] audit: type=1800 audit(1623020610.031:1512): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14833 res=0 errno=0 [ 2863.401071][T20128] cdc_ncm 2-1:1.0: bind() failure 23:03:30 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6c00, 0x105400) 23:03:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x140) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/242) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2863.436705][T20128] usb 2-1: selecting invalid altsetting 0 [ 2863.473941][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 23:03:30 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2863.500782][T20128] usb 2-1: selecting invalid altsetting 0 [ 2863.503605][ T33] audit: type=1800 audit(1623020610.051:1513): pid=29174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14881 res=0 errno=0 [ 2863.534813][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 23:03:30 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7400, 0x105400) 23:03:30 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x10100000000, 0x402) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="120a0000020000002505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01000000000000000000090582020000000000090503020000000000"], 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x165e02) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000000)={0x3, 0x200, 0x0, 0x4, 0x0, 0x7}) [ 2863.556253][ T33] audit: type=1804 audit(1623020610.051:1514): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723830303039353538332F73797A6B616C6C65722E4C75565541672F343939322F48C7C060 dev="sda1" ino=14833 res=1 errno=0 [ 2863.594569][T20128] usb 2-1: selecting invalid altsetting 0 [ 2863.600461][T20128] usbtest: probe of 2-1:1.1 failed with error -22 23:03:30 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0xff, 0x82) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/209) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/193) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) [ 2863.659891][T20128] usb 2-1: USB disconnect, device number 107 [ 2863.671238][ T33] audit: type=1804 audit(1623020610.051:1515): pid=29174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F353036332F48C7C060 dev="sda1" ino=14881 res=1 errno=0 [ 2863.770755][ T33] audit: type=1800 audit(1623020610.071:1516): pid=29174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14881 res=0 errno=0 [ 2863.795636][ T33] audit: type=1800 audit(1623020610.111:1517): pid=29176 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14993 res=0 errno=0 [ 2863.818552][ T33] audit: type=1800 audit(1623020610.121:1518): pid=29177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15010 res=0 errno=0 [ 2863.840306][ T33] audit: type=1800 audit(1623020610.131:1519): pid=29177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15010 res=0 errno=0 [ 2863.862220][ T33] audit: type=1800 audit(1623020610.141:1520): pid=29177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15010 res=0 errno=0 [ 2863.884473][ T33] audit: type=1804 audit(1623020610.141:1521): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353332392F48C7C060 dev="sda1" ino=15026 res=1 errno=0 [ 2863.963037][ T5] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2864.073070][T20128] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 2864.232980][ T5] usb 3-1: device descriptor read/64, error 18 [ 2864.453137][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2864.464508][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2864.475968][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2864.485779][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2864.495609][T20128] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2864.622973][ T5] usb 3-1: device descriptor read/64, error 18 [ 2864.653498][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2864.662558][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2864.670763][T20128] usb 2-1: Product: syz [ 2864.675130][T20128] usb 2-1: Manufacturer: syz [ 2864.679734][T20128] usb 2-1: SerialNumber: syz [ 2864.704476][T29184] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:31 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 23:03:31 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x6800, 0x105400) 23:03:31 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x800) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/230) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0x1, 0x4, 0x800, 0x1f, 0x3, 0x40}) 23:03:31 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x7400, 0x105400) 23:03:31 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/232) [ 2864.892991][ T5] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2864.954086][T20128] usb 2-1: selecting invalid altsetting 0 [ 2864.959878][T20128] usb 2-1: selecting invalid altsetting 0 [ 2865.006954][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2865.037150][T20128] usb 2-1: selecting invalid altsetting 0 [ 2865.078694][T20128] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2865.090747][T20128] usb 2-1: selecting invalid altsetting 0 [ 2865.106088][T20128] cdc_mbim: probe of 2-1:1.1 failed with error -22 23:03:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x8, 0x181000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6a49bba6, 0x80000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/106) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x6, 0x15, 0x7, 0x9, "5fe198cd755159965f6ccd4c92e6b903101944669b24c705e192be840f98bf00"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x480741) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x105400) [ 2865.123632][T20128] usb 2-1: selecting invalid altsetting 0 23:03:31 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x18}}}}]}}, 0x0) 23:03:31 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:31 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x200, 0x6) [ 2865.150793][T20128] usbtest: probe of 2-1:1.1 failed with error -22 [ 2865.164698][T20128] usb 2-1: USB disconnect, device number 108 23:03:31 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84701) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2865.213064][ T5] usb 3-1: device descriptor read/64, error 18 [ 2865.532936][T20128] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 2865.540674][ T32] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 2865.622951][ T5] usb 3-1: device descriptor read/64, error 18 [ 2865.753051][ T5] usb usb3-port1: attempt power cycle [ 2865.923657][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2865.934914][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2865.947112][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2865.958155][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2865.969201][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2865.979014][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2865.988971][ T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2865.998872][ T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2866.008597][ T32] usb 1-1: config 1 interface 1 has no altsetting 0 [ 2866.162997][ T5] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2866.183004][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2866.192211][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2866.200277][T20128] usb 2-1: Product: syz [ 2866.204525][T20128] usb 2-1: Manufacturer: syz [ 2866.209321][T20128] usb 2-1: SerialNumber: syz [ 2866.214033][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2866.223151][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2866.231307][ T32] usb 1-1: Product: syz [ 2866.235520][ T32] usb 1-1: Manufacturer: syz [ 2866.240233][ T32] usb 1-1: SerialNumber: syz [ 2866.264427][T29226] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2866.284250][T29244] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2866.333384][ T5] usb 3-1: device descriptor read/8, error -61 [ 2866.543555][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2866.548937][ T32] usb 1-1: selecting invalid altsetting 0 [ 2866.556685][ T32] usb 1-1: selecting invalid altsetting 0 [ 2866.565797][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2866.572748][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2866.579171][ T32] cdc_ncm 1-1:1.0: bind() failure [ 2866.588143][ T32] usb 1-1: selecting invalid altsetting 0 23:03:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x8001) 23:03:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x6) 23:03:33 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x5e91, 0x800, 0x4b, 0x0, 0xdb7, 0x3}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x54, 0xa8b6, 0x7e4, {0x4, 0x20}, {0x1f, 0xfffa}, @rumble={0xfffa, 0x6}}) 23:03:33 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x2}}}}]}}, 0x0) 23:03:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4800, 0x105400) [ 2866.597421][T20128] usb 2-1: USB disconnect, device number 109 [ 2866.603453][ T5] usb 3-1: device descriptor read/8, error -61 [ 2866.610101][ T32] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 2866.617287][ T32] usb 1-1: selecting invalid altsetting 0 [ 2866.636750][ T32] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 2866.667279][ T32] usb 1-1: selecting invalid altsetting 0 [ 2866.704537][ T32] usbtest: probe of 1-1:1.1 failed with error -22 [ 2866.729196][ T32] usb 1-1: USB disconnect, device number 121 23:03:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x610c81) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/233) 23:03:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84741) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x4800, 0x105400) 23:03:33 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x9, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000100)=""/102) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/7) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x480000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/71) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/39) 23:03:33 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x400) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/37) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x9, 0x2000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000240)=[0x2, 0x1]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x9) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/221) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000001c0)=[0x1, 0x2]) 23:03:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84741) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x2d0202) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/254) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000180)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/66) 23:03:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2867.133066][T20128] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 2867.523792][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2867.534906][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2867.546563][T20128] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2867.559771][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2867.569641][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2867.733331][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2867.742554][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2867.750709][T20128] usb 2-1: Product: syz [ 2867.754955][T20128] usb 2-1: Manufacturer: syz [ 2867.759548][T20128] usb 2-1: SerialNumber: syz [ 2867.794196][T29280] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:34 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x3}}}}]}}, 0x0) 23:03:34 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x56, 0x1, 0xffe1, {0x1, 0x3}, {0xfff, 0x8}, @cond=[{0x2, 0x3f, 0xba, 0xfff, 0x3, 0x400}, {0x8, 0x5, 0x3, 0xfffd, 0xc06, 0x81}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x81, 0xe725ac7f66d65d48) syz_open_dev$evdev(&(0x7f0000000040), 0xc3, 0x4800) 23:03:34 executing program 2: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x2, 0x5a, &(0x7f0000000000)="50477854cfe58d60b687a4f945fd5123c9cf94fbc25bb384a61e8b377a6a956fc1b8b8709c9fb0d751f64e3b85d9c64e4ad92ffdec08485301b04c7bc7ec1c6b34adb8988f670865fa1e11e52b715edd91b00aa4004549b88137"}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000000c0)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:34 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84741) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:34 executing program 4: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}}]}}, 0x0) 23:03:34 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x6) [ 2868.072903][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2868.097841][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2868.104803][T20128] cdc_ncm 2-1:1.1: bind() failure 23:03:34 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x281) [ 2868.190936][T20128] usb 2-1: USB disconnect, device number 110 23:03:34 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x84741) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:34 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x4000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/189) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:34 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/143) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:35 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/22) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x81) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0xc725, 0x20000) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000200)={0x20, 0x6, 0x8000, 0x6, 0x14, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000000, 0xd732b5c198740799) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/229) 23:03:35 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2868.357957][ T33] kauditd_printk_skb: 70 callbacks suppressed [ 2868.357975][ T33] audit: type=1804 audit(1623020615.041:1592): pid=29362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353333352F48C7C060 dev="sda1" ino=13839 res=1 errno=0 [ 2868.418818][ T33] audit: type=1800 audit(1623020615.071:1593): pid=29365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15233 res=0 errno=0 [ 2868.440282][ T33] audit: type=1804 audit(1623020615.071:1594): pid=29365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F353037332F48C7C060 dev="sda1" ino=15233 res=1 errno=0 [ 2868.472183][ T33] audit: type=1800 audit(1623020615.081:1595): pid=29361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15071 res=0 errno=0 [ 2868.495228][ T33] audit: type=1800 audit(1623020615.081:1596): pid=29361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15071 res=0 errno=0 [ 2868.517947][ T33] audit: type=1800 audit(1623020615.081:1597): pid=29366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15071 res=0 errno=0 [ 2868.539712][ T33] audit: type=1800 audit(1623020615.091:1598): pid=29365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15233 res=0 errno=0 [ 2868.572785][ T32] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2868.622807][T20128] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 2868.963513][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2868.974559][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2868.985947][ T32] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2868.995776][ T32] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2869.022859][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2869.034372][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2869.046801][T20128] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2869.060408][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2869.070275][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2869.172869][ T32] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2869.182248][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2869.190299][ T32] usb 5-1: Product: syz [ 2869.194754][ T32] usb 5-1: Manufacturer: syz [ 2869.199359][ T32] usb 5-1: SerialNumber: syz [ 2869.225123][T29334] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2869.252866][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2869.262168][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2869.270497][T20128] usb 2-1: Product: syz [ 2869.274740][T20128] usb 2-1: Manufacturer: syz [ 2869.279424][T20128] usb 2-1: SerialNumber: syz [ 2869.304133][T29341] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:36 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x4}}}}]}}, 0x0) 23:03:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/140) 23:03:36 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x5) 23:03:36 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x149100) 23:03:36 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:36 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/143) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2869.492763][ T32] cdc_ncm 5-1:1.0: bind() failure [ 2869.500237][ T32] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2869.507167][ T32] cdc_ncm 5-1:1.1: bind() failure [ 2869.516482][ T32] usb 5-1: USB disconnect, device number 20 [ 2869.573005][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2869.608627][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2869.615717][T20128] cdc_ncm 2-1:1.1: bind() failure 23:03:36 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2869.648845][ T33] audit: type=1800 audit(1623020616.331:1599): pid=29397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15601 res=0 errno=0 [ 2869.686403][T20128] usb 2-1: USB disconnect, device number 111 23:03:36 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x80, 0x40000) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000100)={0x182, "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"}) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) write$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f00000002c0)={0x3f0, "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"}) r3 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x1, 0x10800) write$hidraw(r3, &(0x7f0000000700)="cb4aa41a33981e762f7ea5c23d4021a32ea8f200b64513c9b87064bea3ae5d504d7a59c31a875fd1034d8e02337c0aecffa08d03a408747246813bdd523899c92a59d455f85005c1e6a59a9bd074e287307e1b276e2ec184e7cf8f0e80fa1cea53c97ceb8761ea7c53cdd0c80238eea62c9cd739e414acad2f5888cbb4de6a9887d98e3de3ff", 0x86) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/182) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:36 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/143) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:36 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x57, 0x3f, 0x0, {0x8001, 0x4}, {0x6}, @period={0x5a, 0x0, 0x1, 0x1, 0x0, {0x8, 0x2, 0x0, 0x5}, 0x2, &(0x7f0000000000)=[0x5a94, 0x3]}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2869.766241][ T33] audit: type=1804 audit(1623020616.331:1600): pid=29397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F353037342F48C7C060 dev="sda1" ino=15601 res=1 errno=0 23:03:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000000000, 0x119000) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:36 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84741) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2869.911000][ T33] audit: type=1800 audit(1623020616.331:1601): pid=29397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15601 res=0 errno=0 [ 2870.072700][T20128] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 2870.433198][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2870.444215][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2870.455426][T20128] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2870.468699][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2870.478533][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2870.653213][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2870.662600][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2870.670708][T20128] usb 2-1: Product: syz [ 2870.674918][T20128] usb 2-1: Manufacturer: syz [ 2870.679657][T20128] usb 2-1: SerialNumber: syz [ 2870.713747][T29405] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:37 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x5}}}}]}}, 0x0) 23:03:37 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x42) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/94) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x80000001, 0x800) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0x10001, 0x7, 0x7, 0x3c7, 0x7ff, 0x1}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x7fffffff, 0x3, 0xfffffe01, 0x28d, 0x73e2}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:37 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x80, 0x40000) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000100)={0x182, "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"}) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) write$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f00000002c0)={0x3f0, "8ff4e2848482215c192340d9833a9d5a5675391e96b7cff92eedc20e9eeaca27e00c2e0f2bc83103a8fbc96263d18fc0bb2b5c54d2f44b910dd12cc5ec328194182bf60417a90a8513676fceba77bcf4914a51d4454b854c318fea5ad2de27aa96c8e7b828d5aa1f6c0cc151565a0e3238ae9381a14facc437c26321b666b361c5ecc873ac5799423ad9d25223abeb6ac5e5904e1fae637d3c66f8de45b8ed29ee7677e92109c4a3c563915ce5efb8c76c1095b9a9abd52df9bc58c2d3d9c9a7c340b5c6346bab91749b92a9036e823130cda15569b5aa8a9958bf25500896a4bb4dedd3c1c4265459684247869b2840fba2b5bedab4e68b55e796b0153e24db015c228e1349fd8f289c375ac62b18f004fd409568f3fd7511c95550e6a81341cb043ac44b9b288e0eb7c1e5eb8912f5d5b7af496310eb8100eec7508ddbe5b788d06ed3a4ae20a3676f9a73a4b158b199dcb26adfe8356ab4436ce404848a8398e8ca0c6009d32c4dbc0289050fe3567ecbe40025059387cbe8a203c8bd7e40f9f13f06c9a0040542acbf7afad1bad91179671434e9f96ce966ae3267272db1be7743579fad090a7ad0e57c29921dfd8ac3a86d964959d2f0920827988648984c6b5172f1d6e0e86eaf8a9cd78b3a2840b4bf671a6ed15cd20b98e2b4f35604376b1424e7b7bd9914203fb0e095f1fb4e18b31498ea4d57834bb56bdc941a9dae9a933cfad3bc77ae14fe3c5a92e1c2fda7bd95fbe90ecebf1e14287737f121decb53fe03e28245e232b3cf98670054f6e459af69cdf57c2250c6d16a9084f17b74121489952627adef75ca6cefd4d1cfd8ed25877e8918a266ef89f1cd06e8a57c6137ec00454e8ef41cef1fa2dfe0f9d10660c33002021a10caa074d036c462acda0fc857093b82954a06d5577e3a6b564512fa153112d66e72acad7b66d205087d7fbd3e6f0cd3583469aa241cbefc0f4c89a225f93b9a652bb85a503cb4c6717cd1424169c5dfb2e35f82a7b88147e0edf2c29d9a18aad2d141028bed001508276cbeb3b10c35a45ebb8d9f5e1beac8b934d34a34faff0cfe8468cdbfe072c601d41d5d8e13ba15a89b5a955c87ae43543de8cf01b53306d6d216243aa503b36df100a77b826a51c81796fa6921ef7f20bcb4ad6c1b9ea25703d82f0bbca1e3b71b748f214ee565974d6c92d080943133edc86f217b0f43a08a0890cbd52df266006e840eb2b4d9c1b6b40abe0be5e611ca2ae9755618e445039832e3aae4339651fcebbe11b9dbf6b62a86c60c7b11f63e20b4d8092949e5d7e1bb0f060bd92aeac01bb9988271e2175d052d00afb8735c68f3a924503f3d38ee34a8b4a7c61bac93765247f79cee31c73ea6ba7faa72a1d7d6c835ad81b5ac1d01e8b27287e7b793c7a3ddc46a4ccb13bd65ff"}) r3 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x1, 0x10800) write$hidraw(r3, &(0x7f0000000700)="cb4aa41a33981e762f7ea5c23d4021a32ea8f200b64513c9b87064bea3ae5d504d7a59c31a875fd1034d8e02337c0aecffa08d03a408747246813bdd523899c92a59d455f85005c1e6a59a9bd074e287307e1b276e2ec184e7cf8f0e80fa1cea53c97ceb8761ea7c53cdd0c80238eea62c9cd739e414acad2f5888cbb4de6a9887d98e3de3ff", 0x86) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/182) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:37 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:37 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x8a, 0x103c40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x20040) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x73d]) [ 2870.992885][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2871.015014][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2871.021914][T20128] cdc_ncm 2-1:1.1: bind() failure 23:03:37 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:37 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x30d640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2871.112923][T20128] usb 2-1: USB disconnect, device number 112 23:03:37 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x9, 0x4, 0x1, 0x4, 0xffff}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/175) 23:03:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x70000000, 0x2a0c40) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xffff]) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/1) 23:03:37 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x412200) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001040)={0x15, 0x1000, &(0x7f0000000040)="42d1a24eb7536f478cdd127963f88357ce38e701de78b47820b6339fd879143de66cd1e91997723c590db38dc15315ea8532f8551ec1006a0a089a04ab4d18685638cf2a7db5965e1975e6dae8166eb0a123964934e2e23c73d6c550fa49944607365b08a558a7e3ea8a44cdb037f917550a3f460d9da387c7792b8e26d03cdb6016980637b91b1f15327d0ab2f5adbf15620a8c0b40dd6d20cb56e3daa9029620d2f2803f2de40ba431e25dcee50233d8ee47f65012dbb114107b0382628cba09cb353acf3a2668e1b13d79d1c865296325297614f669baa35eed87e1197239d9fd2495509653634b1a00d6dde389498cf40851c1dd7a784b554d9df66b4c9ea2f6bab079cf4a1ef36c976c2fc8fcdbcc7d625e6fa3c949cfc9ec430384b86b31f3ae70e1d1f19826011975d5d81f4d8837cf546a4970ad4c3746a67a7f1431538d1c619c55385212774d283e0e091ec100d5ef00a7cb44f2ed16a11d1e4178eeb00259b99939e0ffadf09cb7dadfb39d968dd8f381dfb04ae948646691d02d6e1d265b3e0336659f8f47266ef65c4a51b63f554c9010aa60557fc404800fa0d7446f7e40862fcc63e1b71f7d03c6e629ab8cc3c5399a1b83a01a171ef694e0d648c2ff842b2b2583196b9861f22a1b7980c50a57cf5df00589e385c6492f4ff26da343d3add0588c8e9a8337b183b94c7b4552c8f4f151eaa976ec042c5788bd05342bcc154248bc356a80cdd6a703315617cef7041a83ef157b236e562d1efadb379e8c316616eb8cb37d2a38c3793bbe8cace17857321fb1a7e605d7eb83ebd201aef348cf0107f78764702e22919fd82734e93c6e8dfa6ab0783fa0874cef644f8c4270ef58210567799aa07610b1d6b2e0d16d115a96324dc915cb18c6206e80a66f65bd38bdfd770ab77b7c56606673441c3e6e416d3993f374875fb28221e0bd0be3ee2a1f473067da7230b0c46d8ea46123c3a2a22932b1681149cd1d85b4321b6c1d85a5c86dca4f180deaeb158fd09d27b2f39eafa792689ece8b321186fcc372ee73238293967a740845b2fcf9af84b11af124e272752c3a48a38b3efb857fadff9582cc0744d1075f307704fb853da7c757583838ece35991b0cf6691e6081d6dfb342c8e4cebd480904424514c94f6ec0975d91394969d729d776053dc4334dca24c208885ca8e207778f424c38c6dc01a5654957ecfbdccc4885a89a104345b62f992d6df403b7b53c951c2be300cb9be210d496afe520ca704604793b2c306385bafa822a13519a1fdefc2ebf0e0120a7004a4f28accadcfe37dc70f9a559181b9bb62d2017ea520b35811e064d727e11735e94d861ceb1f61c6c7473d9b04c25093c5e98c48c5e664aa5da7b3fa1d676eee2cd35c20467c071171cdd4d38c5282e6d51688c4e820417167d38cd41d4fc9a34797168a15df8a217b3a36b37d7ed3dc02ef79f221714f1801c1be1ac883359ce4263b66e83678390480b169cc4a70c3d09adf0d750a319471e9b5660e728418b155961b2472fde86725f9654e78980f5c4b461956bf19bdb21cd13485c74cc30c8db22217de7cad1ff0d9ceb57c50c1d5635477c1fe1b9f2880a51fb74a7774b545366d5a762f01f04fef9623a54ad48a74a3c1cc4866900c280c0af525e90396adfa8cb90473ff9eb633bfe11a02f7681520ac5e4da80bb1b14c09e28ceb6933a27388ca958402e55450533048e67eaf84eefc2d9df513a798b54ff59bf49d5ddbb5a40ee555e451cd0d7133db65e6f8e44fd876a6e37b568e0c4215fa8c16d9499de8776b41212e73b67bfe3c97f90b220a463bd94d19c5dd5ef9561fa7058e6b01c2c03ef6034a1d2edc9f6d4ba267343e4950d34c070aa1a7635c6bfa18563838ad99a81bb791355ba4d932f518ae2cca9e61d66ff797ecd61456735b0a8489868ebde2fd154231c9d1c908935307de9411528ee278335d98a0260eb488adb8bde5289165ad86309e131bec7606c0a11ab6fd9f9a804e8445dca0987f5e692111155f44a8ba6d4f5de9ad41457189603b1a0432f898c22a23f3da386e977538d2ed70e6a731acb5e5a76bdb1ec24873deeedc94e747c115600a12515630e9add6fba431fe3ca7595bbc87514a9dc0fe10ce450cd417cf41ad1f7ba3df09d882b1fda85a23ab8bf1e39ec3ceb5eee9dbc843082ac35202934add5c16728147913ef5659c9f1460037962bca7b36def1ab3c6a924e854abfe184c430e5c7776c45485c558e5bdd5de7534b5df51cf2edffd21cdda19838a1e0978f4a2d53cafc5b7df7eebf8eb32cda05392294f5dfafe7ba7ff0cfbffd6014c9154fea5787943447c48cac8e7f8e4c765eb96d184228cc632f05926d6963c97ad85a005285c56bc3f29fb8702a548e9945438a8dba9af3b68d478015ad63e83e3b1f90452fe3b8252f980df18889cf8d96f2afa43fbc9af94eb8b86cfb252d49df2e34fd3087ee138650c96d797b1ab83af5d26e1a48c6fa3430ac10a65b46450e17155e14aba8bcad3b90b72cd03008f397e9b471ef92e0f4a5066d55cd7fbc62aaf37e8905c6492d88d2da9a753e77a2643942105368d6c935baf46ad16536efdb1451048a4bfc2acff093921b8704c27a8f4545cc59ccb2ca9d33c4ce2218a2f42f62b19ccc7748c0ffc48f6419908b58b9ce05eba0bf2b9cc04bec990c7f7733a2fdec9fbc13be5f610451d05ddebff9fa10dacb88c955094d2d288a04724d1e5af28bd5b3a5fda0c11b70cf1e170df7bb8b35527f51e1599f21fef7b5c4008b0422d652f3ef84ad28d448ca00f4deb444c0c30934dd5e0dbf91376213c1fe724b3a7fcb8afd82551380d005165f08a69ea10742335ded8008ce55bdd8d4b1c2ebb9002b6a2cee7ecc52f5ac29d119227e2de4186d58ffccc51ce9cf1f6dbc8a815107ff1e69ff5f182128b427f66a24971805c6e4b4127bfd5eebf075df9cc7d737ecfdc31319d919756a009d3dac0484e060f597305ce8017d97bcfd8ecf006b2cdd70dc2442550545e2d3080e458e430df06e10fcf9f5062ffdc401ef61e280de3729daf718e59e165c142f3839e26a81ef87dc26a60cd4abb44355120f95c1618d1013d52ed3552a7b1fed5fd0322b5dd07ba7c073af48f9cd5156ad513b5b868790c06740a0e8424ec8fcfef6a580d3c2be0d63d0545d26445d832634b91bdc64f750f95a0a8c3f1f73e8728b5b9a9d533c2eb9f314b28ce4a97ffeb908f92476731625fd96003322d4572e284c40a64403d1e7747e9479c6ddea64e0b977ae11ac4d8ce10dce4da6a95cb6605c2ec10da2f86d22a7cc0356560e0714af11d7aff3da7b14dbd976c9f6a8b0d57f35e180b3e7f753c5f9cfc0a0459b54b162998c19b2446bed9f3e4dc7c5f116a8b4dd1c6061c0c958b25b13629f6ab9390cdc03b6a74e85dcdf90952c3bb4539b34a1219ff0943cc3da08e7c14b1f134e437f0c3b83f6e6a69076b73b48178c9eeb072dd6dcc69fcc1729e89d288043ff94dcfaace2f0817373d85dd6f1d2061af96172284ffc0400fcc4db5b486432a9936d738ec1cbb34158bef6923c43202ed9e697edc0a5f2a727b4b923f62580e64e166316d22c5ac430334c02b08df674843e76e5d4f77f8cc7ff2ae8a867a92c7f16f947e36684ad42dd33c7c2b929358a3ab756799b9aa0aef5bfca7b4b28bb86ae8c98a07ab236389c087ca506ada3502929d341b80b1d9a3f3492db6a73b128361ceae0d6761018ef6bfa816ecdc2ef46b1f972b201210a790d6d35728ba809bcdc3ada512fd179eb0f4b58f98f40510292f87ab9ca832bbb811b0bd88c2ad3119ee4b31a7d4649440974fef713a82ea464a36bd0def8143823b4ca1717e7cbc887fa0b2f2b95020a0ce0ab6e1e870d954b1ba9ecf597a3619c6fc653b496e9308b4d2f68d1921758e90a8372569d2b82f54fa577c897ed1cf25ba44be8e1905706bbb2ff8957c1a2c49673c657bc342e821ad755dba3bdfd9492b011b941fb0bcf475d159867cf06c817d7af0d3a0031c506abc3bad1d3873ac6ee07723501ef32084fd39626dfbe69983cf6a6c348e9eabb42a39f74b32d35786b6e0fa6d7c6ac3ff93f5e0b40cd038bc0f3b6c4677c39eec255550a99dfcd565f7228357100e2ff7663bfcf7ea1125a13a5deaa69176fc497fd08ebe4d0311d427da8a127f0f67d638f85a3f9f5b239cbd147b21c63c586ec16e0670609e45f1043b88641babe26e7c7ce6e2661ffe9a5d0bfccc4d838e9cad477edf0257c9c5b64a71b63015be26a2fb9c538389dc81419fee9381ad08be15c3cbbab0f1a341996b09a1c37be79369c1e691ea4584a6330ead3e8ce3dd37252bba081ba4fed26c7c5fc893ecb751b68d94f8c0bc48674c62cb2b36d241f335126852caa52008c0a48a09773c086c26f050390ca29770a0e265c2ba9ccf2be427acddb98e26fbdbddcf4e9bc00bcd7ad67cfb7ff3ff60651d293d54eac713778bc15fa7ba5abe36a1025db50b42d55570297e7cda7801f78b7a26028576c9b11045ec52e7b9da54c516558f5a0004f4a333177fd4ce613f020f8da41d448256e9d2fd33e988da44f926fe8294ea66d5236f956720475cdde1697ccf3a420d8f8e8c8e723cf356c2188b9899103033aeab5f1c90f60d595dab4f82df609c6ac24b2e580c95399a09044d20ad70f83a65e9275ffb474193b3d4eef3e80db2a5a05842291325912517b18a69c70c848f2ade7bdaa8e9aeb5b354ec391d44a755210f07cb1187b8aea295d15e34eba438814f34dde15a4e582d2a774239cb3660e8b06e2109325ddb2f2ffc6b322558fe247aa3c60903f6636156a11137bc6d812a34115cd4c91e007bf93cd9fa495f996dfd08b2cc2837d4af0a41057a0676fe10038d62f2294959791bdc981923097302137e41d3ec6a8845c0f9a4f33a0e2a3eecee66ebd75a8542396f8cf7681cd878379edecd6ba59815b0409ec2218110bb25cc0d913d853e7e6039798bff32a8498b8577a098de2db3adbe1c0e9659b0033c6aac20a1cb3434e8bdcf924637d4621c8bcdb33032f7ae8525135c06debaa86c5a87fe403946ce3b380a9fca7c2e21873aa84912bfee31147dd7ec55a831d6a8be7d3172af65ff240b1d4edb6a4951bd638b54ee09fa4d9129530c3daabafb4c09e4cf849be8c436cc3abe205f9f21cf4158668ed890e9dc6e884e105d7d29de83be6a07d562dfc11f34feee0e240ebf2dd2181c306b63472573ac3c3d95abd650d258ed30f8793913b94283729def613c9a05899aea3cdedd9634e94eee9aaef038d0f9e84566140e9464ff078800bbe76d59ea37bfa26b77c477be7b946439964698282adc39180ef6a904f6d680e5a349e70a3e7dc9f8873bfe02c8e3b98f78d85e597232f2c9024d770e9b4e533754e981ef020a37437561edd7c98dbe3519beb63c0b76f1d583a7a7476cb3dd1801c2a7459d172837b80744e2d80bbdae16ade53c698207bcac17e81d8957dd36c54e743ecb0c104fa7ea7dea452c957f166f208e8813fe9ab1d6c3057710a422ac042c11174fbcb22ab44871c600f863f8557ef8b3f04174463595d29f875ca5b92ba819bc88b6ccfa3c78a5432f33168a3e59d1cad30135a5595f5174bee5dfb4312da6455e23f07c4c8578e35b4d5e8345cc6265c919384910bc8de773693e74f93bc65c499c07264551d28032bd1117bb3778ebb3b9df44720dd657e9916cec636ed0fdd9e67b1e88fc200306d90d4896723063b898a691a15e0875caf638d14b"}) 23:03:37 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2871.532613][T20128] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 2871.892612][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2871.903663][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2871.915658][T20128] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2871.929363][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2871.939264][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2872.103086][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2872.112270][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2872.120366][T20128] usb 2-1: Product: syz [ 2872.124633][T20128] usb 2-1: Manufacturer: syz [ 2872.129229][T20128] usb 2-1: SerialNumber: syz [ 2872.154003][T29447] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:39 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x6}}}}]}}, 0x0) 23:03:39 executing program 2: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x10001) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/233) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0xa6, &(0x7f0000000000)="b9e0fc98b4b89cf475310cb4edc26c8c57673b1cd0153166b9d20b8a6531fa14c885ef92598fb393db1942baa777885dc4f6f246a449fc861ef7d01a851e8d7a94bf023079f1b7c44fb78b04a8037f4d4c64170b5eb2c2ba847dca13ac282a95235fc3cffa4aa036f81b4926f37cc9e074274e5d6acc866bd03fca2f2276cce0f28e53f62e5cd9ae907e3864f41d87bd225917490e73de9363f800f800b410e79aca0cc9694b"}) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x4, 0xc0001) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000280)=""/241) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x57, 0x5, 0x81, {0x4, 0x400}, {0xed, 0x927}, @cond=[{0x2, 0xa30, 0x1, 0x1, 0x7fff, 0x4}, {0x8, 0x40, 0x2, 0x40, 0x9a6, 0x1}]}) 23:03:39 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84741) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 23:03:39 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4e6805) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x6, 0x200]) 23:03:39 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb87f, 0x561201) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/37) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:39 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffff7f, 0x33aa81) [ 2872.424983][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2872.468834][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2872.475757][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2872.518428][T20128] usb 2-1: USB disconnect, device number 113 23:03:39 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x2, 0x1, 0x2, 0x0, 0x8, 0xb6}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0x40, 0xdb4f, 0x8, 0x0, 0x60d, 0x6}) 23:03:39 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20400) 23:03:39 executing program 5: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/206) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6, 0x200400) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000240)=0x4) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000001c0)=""/49) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/151) 23:03:39 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4e6805) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x6, 0x200]) 23:03:39 executing program 0: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x10001) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/233) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0xa6, &(0x7f0000000000)="b9e0fc98b4b89cf475310cb4edc26c8c57673b1cd0153166b9d20b8a6531fa14c885ef92598fb393db1942baa777885dc4f6f246a449fc861ef7d01a851e8d7a94bf023079f1b7c44fb78b04a8037f4d4c64170b5eb2c2ba847dca13ac282a95235fc3cffa4aa036f81b4926f37cc9e074274e5d6acc866bd03fca2f2276cce0f28e53f62e5cd9ae907e3864f41d87bd225917490e73de9363f800f800b410e79aca0cc9694b"}) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x4, 0xc0001) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000280)=""/241) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x57, 0x5, 0x81, {0x4, 0x400}, {0xed, 0x927}, @cond=[{0x2, 0xa30, 0x1, 0x1, 0x7fff, 0x4}, {0x8, 0x40, 0x2, 0x40, 0x9a6, 0x1}]}) 23:03:39 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xb43) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x500) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/220) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) [ 2873.032509][T20128] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 2873.412979][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2873.424019][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2873.435523][T20128] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2873.448936][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2873.459011][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2873.623044][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2873.632512][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.640506][T20128] usb 2-1: Product: syz [ 2873.644779][T20128] usb 2-1: Manufacturer: syz [ 2873.649389][T20128] usb 2-1: SerialNumber: syz [ 2873.673938][T29496] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:40 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x7}}}}]}}, 0x0) 23:03:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x435, 0x44500) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x7, 0xaa000) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000400)=""/139) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000380)=""/42) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/203) r3 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x80) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000000c0)={0x2, 0x1, &(0x7f0000000040)="01"}) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0xeff0, 0x20000) r5 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x8200) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f00000001c0)=""/235) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000180)=[0x2, 0x1ff]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000300)=""/72) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:40 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffff7f, 0x33aa81) 23:03:40 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1c6, 0x80000) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000080)={{0x2, 0x100, 0xac, 0x4, 0x7f, 0x843}, 0x204, [0x89f1, 0x6, 0x0, 0x52a39245, 0x20, 0xffffff85, 0x9, 0x0, 0xffffff80, 0x401, 0x3, 0x8, 0x4, 0x8, 0x9, 0x9, 0xffffffb7, 0x10001, 0x7, 0x6, 0x7, 0x40, 0x2, 0x80, 0x1, 0x4, 0x6, 0xffffffff, 0xdb7, 0x80000000, 0x1000, 0x8, 0x37ab, 0x6, 0xa4b6, 0x9, 0x3, 0x45, 0x0, 0xfff00000, 0x3ff, 0x8, 0x9, 0x62, 0x7, 0x7fff, 0x3f, 0x8, 0x7fffffff, 0x0, 0x7fff, 0x5, 0x2, 0x401, 0x1, 0x2, 0x7ff, 0x4, 0x3, 0x5, 0x4e, 0x1, 0x0, 0x7, 0x8000, 0x6, 0x1, 0x8, 0x10001, 0x2, 0x492, 0x3, 0x9, 0x7, 0x8, 0x8, 0x7f, 0x0, 0x200, 0x9, 0x65f, 0x8, 0x1000, 0x1, 0x6, 0xffff, 0x2, 0x7, 0xc3, 0xfffffff9, 0x0, 0x80000000, 0xdf, 0x20, 0x1, 0x1f, 0xe68, 0xffff4c33, 0xfffff7cc, 0x1000, 0x100, 0x7, 0xe284, 0x4, 0x2, 0xd83, 0x7fff, 0x0, 0x9, 0x200, 0x3f, 0xfff, 0x7fff, 0x1, 0x5, 0x1, 0x57d43051, 0x7fff, 0x1, 0x169f, 0x7, 0x7ff, 0xfffffa52, 0x1, 0x5df, 0x0, 0x7fffffff, 0x50000, 0x5, 0x5, 0x8, 0x7, 0x0, 0x40, 0x80, 0x0, 0xec1, 0x24e3, 0xb2a, 0x3, 0xffffffff, 0x7ff, 0x4e9, 0x10000, 0x8, 0x5, 0x8, 0x1, 0xd961, 0x200, 0x0, 0x9, 0x0, 0x7, 0x0, 0x6, 0xffffffff, 0x80, 0x826c876, 0x8, 0x7f, 0x8, 0x7f, 0xfffffff8, 0x7, 0x4, 0x5, 0x7ff, 0x401, 0x1000, 0x5, 0x4, 0x76, 0x6, 0x9, 0x8d, 0x10001, 0x80000000, 0x8, 0x10001, 0x800, 0x10000, 0xb42, 0x0, 0x31, 0xa, 0x3, 0x7, 0x2, 0x10000, 0x65, 0xab, 0x1, 0x1ff, 0x7ff, 0x400, 0x6, 0x4a, 0x20000, 0x7fffffff, 0x3, 0x6, 0xb9ee, 0x6, 0x4381d92a, 0x3, 0x4140, 0x5, 0x2, 0x4, 0xfb3, 0x4, 0x80000001, 0x200, 0x0, 0x8, 0x2, 0x9ae, 0x1f, 0x10000, 0xffffffff, 0x3, 0x3, 0x9, 0x4, 0x6, 0x20, 0x5, 0x4, 0x101, 0x1, 0x5, 0x400, 0x8, 0x901, 0x8c, 0x42, 0xffffffff, 0x5, 0x101, 0x0, 0x1, 0x5, 0x3d, 0x9, 0xffff8000, 0x1, 0xfffffffb, 0x800, 0x1, 0x7, 0x7, 0x5, 0x7, 0x938f, 0x20, 0x4, 0x6, 0x20, 0x40, 0x3, 0x7, 0x200, 0x2, 0x0, 0x9, 0x1800000, 0x81, 0x3a9, 0x0, 0x1, 0xdee, 0x6, 0x7, 0x9, 0xffffffff, 0x2, 0x1, 0x4, 0x2, 0x607, 0x21, 0x1000, 0x10000, 0x7f, 0x7, 0x8001, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x4, 0x9, 0x1, 0x3, 0x0, 0x7, 0x1, 0x3, 0x5, 0xfff, 0x0, 0x9bb7, 0x2, 0x8, 0x4, 0x8a8, 0x1000000, 0x8000, 0x4, 0x4, 0x825, 0x0, 0x6, 0x9517, 0x4, 0x5, 0x9, 0xffff, 0x1ff, 0x3ff, 0x8001, 0x2, 0x9, 0x0, 0x3ff, 0x1ff, 0xd2c, 0x9, 0x1, 0x7ff, 0x5, 0xff, 0x6, 0xb9f, 0x1, 0x8000, 0x6, 0x6, 0x1de, 0x6, 0x3, 0xfffffffd, 0x832c, 0x4, 0xb06, 0x7fff, 0x20, 0x10001, 0x7, 0x504, 0x0, 0x80, 0xffffff4f, 0x6, 0x7, 0x0, 0x40, 0x7, 0x4, 0x3, 0x2, 0x6, 0x800, 0x2, 0x2, 0x4, 0xdda1, 0x0, 0x310, 0x9, 0xc0, 0xfffffbd0, 0x5, 0x3ff, 0x87, 0x7, 0x9, 0x7, 0xa1f6, 0x200000, 0x2, 0x0, 0x5, 0x3, 0x2, 0x9, 0xff000000, 0x1f, 0x1, 0x7, 0x7, 0x10001, 0x4, 0x5, 0x3, 0x6, 0x7, 0x80000001, 0x2, 0x2, 0x4, 0x6, 0x0, 0x6, 0x1000, 0x3, 0x9, 0x0, 0x8, 0x0, 0x5, 0x4, 0x2, 0x4, 0x6, 0x4, 0x4, 0x7, 0x7f, 0x7ff, 0x6, 0x7fff, 0xfffffffd, 0x5, 0xff, 0x29, 0x3ff, 0x4, 0xff, 0x2, 0x5, 0x10000, 0x5, 0xff, 0x3, 0x8, 0x5, 0xffff, 0x1, 0xffffff6b, 0x1, 0x4, 0x20, 0x10000, 0x8, 0x3, 0x9, 0x4, 0x1, 0x0, 0x1, 0x4, 0x0, 0x9b, 0x8a, 0x1c000, 0x80, 0x5, 0x7ce, 0xfe, 0x10000, 0x0, 0xfff, 0x0, 0x0, 0xfffffff9, 0x9, 0x2, 0x7, 0x5, 0x7f, 0x5, 0x81, 0x8, 0x3, 0xfff, 0x9, 0x7, 0x6, 0xee7, 0x7, 0x4, 0x3, 0x8, 0xfffff359, 0x7fffffff, 0x7, 0x40, 0x0, 0x6, 0x3, 0x8, 0x4, 0x0, 0x401, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x8, 0xad3, 0x10000, 0x1f, 0x4, 0x80000001, 0x5, 0x0, 0x7, 0x1, 0x9, 0x8, 0x0, 0xfffffffe, 0xae, 0x5, 0x8000, 0x1f, 0x7f, 0xdd7, 0x20, 0x3, 0x1, 0x5, 0x7, 0x7fffffff, 0x800, 0xfffff001, 0xffffffff, 0x30, 0x9, 0x101, 0x9, 0x7, 0x6, 0x8001, 0x1, 0x3f, 0x1f, 0xeed, 0xf7b, 0x6, 0x2, 0xffffffff, 0x7, 0x4, 0x7, 0x5, 0x81, 0x9, 0x2, 0x9, 0x0, 0x89, 0x800, 0x4, 0x53, 0xfffffffe, 0x0, 0xbd, 0x40, 0x1000, 0x5, 0x5, 0x0, 0x7fff, 0x800, 0x5, 0x3ff, 0x50, 0x498, 0x4000000, 0x200, 0x6, 0x80000001, 0x5, 0xffff, 0xbe0, 0x1, 0xff, 0xb560, 0x7, 0x3e3, 0x100, 0x80, 0xffffffe0, 0x4, 0x5, 0x8000, 0x1, 0x7, 0xff, 0x20, 0x0, 0x8, 0xd6, 0x8000, 0x8000, 0x8, 0x800, 0x8, 0xffffffff, 0x3ff, 0x2, 0x2, 0x1, 0x0, 0x8, 0x81, 0xaa94, 0x2, 0x20a, 0x5, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0x5, 0x100, 0x8, 0x2, 0x8, 0x8000, 0x200, 0xf05, 0x6, 0x8, 0x3, 0x2, 0x20, 0x1, 0x3, 0x2, 0x27, 0x2, 0x3b29, 0x8001, 0xe1, 0x0, 0x80000000, 0x7c5, 0x99a, 0x100, 0x3, 0xff, 0xba, 0x3, 0x5, 0x3f, 0x1, 0x2, 0x5, 0x43c, 0x401, 0x7f, 0x6, 0x5, 0x3, 0x0, 0xd4, 0x42, 0x5, 0x1, 0x3, 0x7, 0x6, 0x80000001, 0xdb77, 0x0, 0x7, 0xfffff889, 0x10000, 0x0, 0x768, 0x6, 0x4, 0x10000, 0x3, 0x80000001, 0x800, 0x20, 0x3ff, 0x2, 0xf2f, 0xfffff000, 0x81, 0xf46, 0xfffffff8, 0x6, 0x7d, 0x9, 0xffff, 0x9, 0x9, 0x0, 0x7f, 0x7, 0x8000, 0x1, 0x0, 0x7fff, 0x3, 0x6, 0x2a, 0xe8e6, 0x8, 0x1, 0x0, 0x3, 0x895, 0x3, 0x8, 0xffffffe1, 0x11a, 0x1f, 0x80000001, 0x9, 0x1, 0x10000, 0x20, 0x5, 0x4, 0x0, 0x4, 0xffffffff, 0x100, 0x8, 0x1f44, 0x4, 0x67e, 0x5, 0x922a, 0x80, 0xff, 0xfffffff8, 0x0, 0x1000, 0x6, 0x1, 0x7, 0x3f, 0xffff9935, 0x27c8, 0xcd85, 0x3, 0x3ff, 0xc2fa, 0x8, 0x1, 0x8, 0x800, 0x1, 0x9, 0x22, 0x80000000, 0x2, 0x401, 0x9, 0x7, 0x2, 0x3, 0x5, 0x4, 0x3, 0x1000, 0x7ff, 0x4, 0xffffffff, 0x2, 0x8, 0x9, 0x239, 0x73a, 0x0, 0x8, 0x400, 0x9, 0x52, 0xcb0, 0x400, 0x8000, 0x101, 0x9, 0xc19, 0x2, 0x2, 0x8, 0x7, 0x10001, 0x31d, 0xbf88, 0x1, 0x81, 0x2, 0x7, 0x6, 0x40, 0x200, 0xbb1, 0x5, 0x1c800000, 0x1, 0x4, 0xfffffffe, 0x1ce4fe8e, 0x40, 0x5, 0x10000, 0xde, 0x1ff, 0x2, 0x0, 0x8, 0x5, 0x628d, 0x8000, 0x3, 0x3, 0x5, 0x6, 0x3, 0xfffffffb, 0x9, 0x4, 0x9, 0x10001, 0x9e, 0x4, 0x400, 0xca1, 0x8, 0x4, 0x10001, 0x4, 0x7, 0x5, 0x9, 0x9, 0x9, 0x2, 0x3, 0x5, 0x8, 0x6, 0x42, 0xffffff20, 0x200, 0x6, 0xe9, 0xff, 0x5d2e9eb5, 0x7, 0x7fffffff, 0xd9db, 0x9, 0x200, 0x5, 0x401, 0x5, 0xf56f, 0x4, 0x10000, 0x0, 0x6, 0x1, 0x10001, 0x401, 0x6, 0x401, 0xfffffffa, 0x1, 0x0, 0x800, 0x0, 0x9, 0x4, 0x6, 0x2, 0x9, 0x2, 0x0, 0x8, 0x6, 0x7, 0x3, 0x6, 0x1, 0x1, 0x0, 0x0, 0x3, 0x80, 0x9, 0x7, 0x6, 0x6, 0x7fff, 0x73, 0x2b655687, 0x8, 0x1, 0x5, 0x6, 0x9, 0x8, 0xd1ad, 0x1, 0x1, 0x40, 0x4, 0x2, 0x2, 0x3f, 0x7, 0x100, 0x40, 0x3ff, 0x9, 0xa1c, 0x3, 0x5024, 0xffffffcd, 0x7fffffff, 0x212, 0x8, 0x2, 0xd30a, 0x820, 0x2, 0x8, 0x20, 0x9, 0x200, 0x10001, 0x5, 0x7ff, 0xab9, 0x100, 0x9, 0x2, 0x80000000, 0x2, 0x0, 0xda1, 0xffff26fe, 0x401, 0x5, 0x4c, 0x1, 0x8000, 0x1, 0x1000, 0x3, 0x5, 0x1, 0x0, 0x4617, 0x8, 0x10000, 0x401, 0x4, 0x0, 0x1, 0x4, 0x1ff, 0x3ec, 0x40, 0x8, 0x800, 0x7, 0xfffffff9, 0xafb1, 0x3e0, 0x3, 0x4, 0x6b00, 0x2, 0x9, 0x401, 0x401, 0x3, 0x730, 0xd9, 0x7, 0x9, 0x1, 0x80000001, 0x7, 0x7fffffff, 0x5, 0x0, 0x584d, 0x5, 0x200, 0x44, 0x2c1de22e, 0xc860, 0x32cd, 0x6, 0x7fff, 0xffffffc1, 0x3, 0x5, 0x9, 0x7, 0x0, 0x6, 0x209, 0xfa, 0x8, 0x5, 0x3, 0x1, 0x4, 0x9, 0x100, 0x4, 0x1aa4a043]}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:40 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x5}}}}]}}, 0x0) 23:03:40 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/118) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x7, 0x3) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/77) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x7fffffff, 0x121100) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000280)=""/161) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000080)=""/216) [ 2873.955806][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2873.997186][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2874.004109][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2874.024000][ T33] kauditd_printk_skb: 54 callbacks suppressed [ 2874.024016][ T33] audit: type=1800 audit(1623020620.712:1656): pid=29532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15911 res=0 errno=0 [ 2874.058585][T20128] usb 2-1: USB disconnect, device number 114 23:03:40 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x80000000000000, 0x101640) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000002c0)) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x561040) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000001c0)=""/239) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/207) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000140)={0x10000, 0xfc, 0x2, 0x3, 0x100, 0x4}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000100)={0x1, 0x1, 0xe5, 0x2, 0xfffffffe, 0x3}) 23:03:40 executing program 3: ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f00000001c0)=""/65) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000100)=""/186) syz_open_dev$evdev(0xfffffffffffffffc, 0x100080000, 0x9712b714dc99f65) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/201) 23:03:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x4000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/29) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x80000) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x5) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40004) 23:03:40 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1c6, 0x80000) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000080)={{0x2, 0x100, 0xac, 0x4, 0x7f, 0x843}, 0x204, [0x89f1, 0x6, 0x0, 0x52a39245, 0x20, 0xffffff85, 0x9, 0x0, 0xffffff80, 0x401, 0x3, 0x8, 0x4, 0x8, 0x9, 0x9, 0xffffffb7, 0x10001, 0x7, 0x6, 0x7, 0x40, 0x2, 0x80, 0x1, 0x4, 0x6, 0xffffffff, 0xdb7, 0x80000000, 0x1000, 0x8, 0x37ab, 0x6, 0xa4b6, 0x9, 0x3, 0x45, 0x0, 0xfff00000, 0x3ff, 0x8, 0x9, 0x62, 0x7, 0x7fff, 0x3f, 0x8, 0x7fffffff, 0x0, 0x7fff, 0x5, 0x2, 0x401, 0x1, 0x2, 0x7ff, 0x4, 0x3, 0x5, 0x4e, 0x1, 0x0, 0x7, 0x8000, 0x6, 0x1, 0x8, 0x10001, 0x2, 0x492, 0x3, 0x9, 0x7, 0x8, 0x8, 0x7f, 0x0, 0x200, 0x9, 0x65f, 0x8, 0x1000, 0x1, 0x6, 0xffff, 0x2, 0x7, 0xc3, 0xfffffff9, 0x0, 0x80000000, 0xdf, 0x20, 0x1, 0x1f, 0xe68, 0xffff4c33, 0xfffff7cc, 0x1000, 0x100, 0x7, 0xe284, 0x4, 0x2, 0xd83, 0x7fff, 0x0, 0x9, 0x200, 0x3f, 0xfff, 0x7fff, 0x1, 0x5, 0x1, 0x57d43051, 0x7fff, 0x1, 0x169f, 0x7, 0x7ff, 0xfffffa52, 0x1, 0x5df, 0x0, 0x7fffffff, 0x50000, 0x5, 0x5, 0x8, 0x7, 0x0, 0x40, 0x80, 0x0, 0xec1, 0x24e3, 0xb2a, 0x3, 0xffffffff, 0x7ff, 0x4e9, 0x10000, 0x8, 0x5, 0x8, 0x1, 0xd961, 0x200, 0x0, 0x9, 0x0, 0x7, 0x0, 0x6, 0xffffffff, 0x80, 0x826c876, 0x8, 0x7f, 0x8, 0x7f, 0xfffffff8, 0x7, 0x4, 0x5, 0x7ff, 0x401, 0x1000, 0x5, 0x4, 0x76, 0x6, 0x9, 0x8d, 0x10001, 0x80000000, 0x8, 0x10001, 0x800, 0x10000, 0xb42, 0x0, 0x31, 0xa, 0x3, 0x7, 0x2, 0x10000, 0x65, 0xab, 0x1, 0x1ff, 0x7ff, 0x400, 0x6, 0x4a, 0x20000, 0x7fffffff, 0x3, 0x6, 0xb9ee, 0x6, 0x4381d92a, 0x3, 0x4140, 0x5, 0x2, 0x4, 0xfb3, 0x4, 0x80000001, 0x200, 0x0, 0x8, 0x2, 0x9ae, 0x1f, 0x10000, 0xffffffff, 0x3, 0x3, 0x9, 0x4, 0x6, 0x20, 0x5, 0x4, 0x101, 0x1, 0x5, 0x400, 0x8, 0x901, 0x8c, 0x42, 0xffffffff, 0x5, 0x101, 0x0, 0x1, 0x5, 0x3d, 0x9, 0xffff8000, 0x1, 0xfffffffb, 0x800, 0x1, 0x7, 0x7, 0x5, 0x7, 0x938f, 0x20, 0x4, 0x6, 0x20, 0x40, 0x3, 0x7, 0x200, 0x2, 0x0, 0x9, 0x1800000, 0x81, 0x3a9, 0x0, 0x1, 0xdee, 0x6, 0x7, 0x9, 0xffffffff, 0x2, 0x1, 0x4, 0x2, 0x607, 0x21, 0x1000, 0x10000, 0x7f, 0x7, 0x8001, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x4, 0x9, 0x1, 0x3, 0x0, 0x7, 0x1, 0x3, 0x5, 0xfff, 0x0, 0x9bb7, 0x2, 0x8, 0x4, 0x8a8, 0x1000000, 0x8000, 0x4, 0x4, 0x825, 0x0, 0x6, 0x9517, 0x4, 0x5, 0x9, 0xffff, 0x1ff, 0x3ff, 0x8001, 0x2, 0x9, 0x0, 0x3ff, 0x1ff, 0xd2c, 0x9, 0x1, 0x7ff, 0x5, 0xff, 0x6, 0xb9f, 0x1, 0x8000, 0x6, 0x6, 0x1de, 0x6, 0x3, 0xfffffffd, 0x832c, 0x4, 0xb06, 0x7fff, 0x20, 0x10001, 0x7, 0x504, 0x0, 0x80, 0xffffff4f, 0x6, 0x7, 0x0, 0x40, 0x7, 0x4, 0x3, 0x2, 0x6, 0x800, 0x2, 0x2, 0x4, 0xdda1, 0x0, 0x310, 0x9, 0xc0, 0xfffffbd0, 0x5, 0x3ff, 0x87, 0x7, 0x9, 0x7, 0xa1f6, 0x200000, 0x2, 0x0, 0x5, 0x3, 0x2, 0x9, 0xff000000, 0x1f, 0x1, 0x7, 0x7, 0x10001, 0x4, 0x5, 0x3, 0x6, 0x7, 0x80000001, 0x2, 0x2, 0x4, 0x6, 0x0, 0x6, 0x1000, 0x3, 0x9, 0x0, 0x8, 0x0, 0x5, 0x4, 0x2, 0x4, 0x6, 0x4, 0x4, 0x7, 0x7f, 0x7ff, 0x6, 0x7fff, 0xfffffffd, 0x5, 0xff, 0x29, 0x3ff, 0x4, 0xff, 0x2, 0x5, 0x10000, 0x5, 0xff, 0x3, 0x8, 0x5, 0xffff, 0x1, 0xffffff6b, 0x1, 0x4, 0x20, 0x10000, 0x8, 0x3, 0x9, 0x4, 0x1, 0x0, 0x1, 0x4, 0x0, 0x9b, 0x8a, 0x1c000, 0x80, 0x5, 0x7ce, 0xfe, 0x10000, 0x0, 0xfff, 0x0, 0x0, 0xfffffff9, 0x9, 0x2, 0x7, 0x5, 0x7f, 0x5, 0x81, 0x8, 0x3, 0xfff, 0x9, 0x7, 0x6, 0xee7, 0x7, 0x4, 0x3, 0x8, 0xfffff359, 0x7fffffff, 0x7, 0x40, 0x0, 0x6, 0x3, 0x8, 0x4, 0x0, 0x401, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x8, 0xad3, 0x10000, 0x1f, 0x4, 0x80000001, 0x5, 0x0, 0x7, 0x1, 0x9, 0x8, 0x0, 0xfffffffe, 0xae, 0x5, 0x8000, 0x1f, 0x7f, 0xdd7, 0x20, 0x3, 0x1, 0x5, 0x7, 0x7fffffff, 0x800, 0xfffff001, 0xffffffff, 0x30, 0x9, 0x101, 0x9, 0x7, 0x6, 0x8001, 0x1, 0x3f, 0x1f, 0xeed, 0xf7b, 0x6, 0x2, 0xffffffff, 0x7, 0x4, 0x7, 0x5, 0x81, 0x9, 0x2, 0x9, 0x0, 0x89, 0x800, 0x4, 0x53, 0xfffffffe, 0x0, 0xbd, 0x40, 0x1000, 0x5, 0x5, 0x0, 0x7fff, 0x800, 0x5, 0x3ff, 0x50, 0x498, 0x4000000, 0x200, 0x6, 0x80000001, 0x5, 0xffff, 0xbe0, 0x1, 0xff, 0xb560, 0x7, 0x3e3, 0x100, 0x80, 0xffffffe0, 0x4, 0x5, 0x8000, 0x1, 0x7, 0xff, 0x20, 0x0, 0x8, 0xd6, 0x8000, 0x8000, 0x8, 0x800, 0x8, 0xffffffff, 0x3ff, 0x2, 0x2, 0x1, 0x0, 0x8, 0x81, 0xaa94, 0x2, 0x20a, 0x5, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0x5, 0x100, 0x8, 0x2, 0x8, 0x8000, 0x200, 0xf05, 0x6, 0x8, 0x3, 0x2, 0x20, 0x1, 0x3, 0x2, 0x27, 0x2, 0x3b29, 0x8001, 0xe1, 0x0, 0x80000000, 0x7c5, 0x99a, 0x100, 0x3, 0xff, 0xba, 0x3, 0x5, 0x3f, 0x1, 0x2, 0x5, 0x43c, 0x401, 0x7f, 0x6, 0x5, 0x3, 0x0, 0xd4, 0x42, 0x5, 0x1, 0x3, 0x7, 0x6, 0x80000001, 0xdb77, 0x0, 0x7, 0xfffff889, 0x10000, 0x0, 0x768, 0x6, 0x4, 0x10000, 0x3, 0x80000001, 0x800, 0x20, 0x3ff, 0x2, 0xf2f, 0xfffff000, 0x81, 0xf46, 0xfffffff8, 0x6, 0x7d, 0x9, 0xffff, 0x9, 0x9, 0x0, 0x7f, 0x7, 0x8000, 0x1, 0x0, 0x7fff, 0x3, 0x6, 0x2a, 0xe8e6, 0x8, 0x1, 0x0, 0x3, 0x895, 0x3, 0x8, 0xffffffe1, 0x11a, 0x1f, 0x80000001, 0x9, 0x1, 0x10000, 0x20, 0x5, 0x4, 0x0, 0x4, 0xffffffff, 0x100, 0x8, 0x1f44, 0x4, 0x67e, 0x5, 0x922a, 0x80, 0xff, 0xfffffff8, 0x0, 0x1000, 0x6, 0x1, 0x7, 0x3f, 0xffff9935, 0x27c8, 0xcd85, 0x3, 0x3ff, 0xc2fa, 0x8, 0x1, 0x8, 0x800, 0x1, 0x9, 0x22, 0x80000000, 0x2, 0x401, 0x9, 0x7, 0x2, 0x3, 0x5, 0x4, 0x3, 0x1000, 0x7ff, 0x4, 0xffffffff, 0x2, 0x8, 0x9, 0x239, 0x73a, 0x0, 0x8, 0x400, 0x9, 0x52, 0xcb0, 0x400, 0x8000, 0x101, 0x9, 0xc19, 0x2, 0x2, 0x8, 0x7, 0x10001, 0x31d, 0xbf88, 0x1, 0x81, 0x2, 0x7, 0x6, 0x40, 0x200, 0xbb1, 0x5, 0x1c800000, 0x1, 0x4, 0xfffffffe, 0x1ce4fe8e, 0x40, 0x5, 0x10000, 0xde, 0x1ff, 0x2, 0x0, 0x8, 0x5, 0x628d, 0x8000, 0x3, 0x3, 0x5, 0x6, 0x3, 0xfffffffb, 0x9, 0x4, 0x9, 0x10001, 0x9e, 0x4, 0x400, 0xca1, 0x8, 0x4, 0x10001, 0x4, 0x7, 0x5, 0x9, 0x9, 0x9, 0x2, 0x3, 0x5, 0x8, 0x6, 0x42, 0xffffff20, 0x200, 0x6, 0xe9, 0xff, 0x5d2e9eb5, 0x7, 0x7fffffff, 0xd9db, 0x9, 0x200, 0x5, 0x401, 0x5, 0xf56f, 0x4, 0x10000, 0x0, 0x6, 0x1, 0x10001, 0x401, 0x6, 0x401, 0xfffffffa, 0x1, 0x0, 0x800, 0x0, 0x9, 0x4, 0x6, 0x2, 0x9, 0x2, 0x0, 0x8, 0x6, 0x7, 0x3, 0x6, 0x1, 0x1, 0x0, 0x0, 0x3, 0x80, 0x9, 0x7, 0x6, 0x6, 0x7fff, 0x73, 0x2b655687, 0x8, 0x1, 0x5, 0x6, 0x9, 0x8, 0xd1ad, 0x1, 0x1, 0x40, 0x4, 0x2, 0x2, 0x3f, 0x7, 0x100, 0x40, 0x3ff, 0x9, 0xa1c, 0x3, 0x5024, 0xffffffcd, 0x7fffffff, 0x212, 0x8, 0x2, 0xd30a, 0x820, 0x2, 0x8, 0x20, 0x9, 0x200, 0x10001, 0x5, 0x7ff, 0xab9, 0x100, 0x9, 0x2, 0x80000000, 0x2, 0x0, 0xda1, 0xffff26fe, 0x401, 0x5, 0x4c, 0x1, 0x8000, 0x1, 0x1000, 0x3, 0x5, 0x1, 0x0, 0x4617, 0x8, 0x10000, 0x401, 0x4, 0x0, 0x1, 0x4, 0x1ff, 0x3ec, 0x40, 0x8, 0x800, 0x7, 0xfffffff9, 0xafb1, 0x3e0, 0x3, 0x4, 0x6b00, 0x2, 0x9, 0x401, 0x401, 0x3, 0x730, 0xd9, 0x7, 0x9, 0x1, 0x80000001, 0x7, 0x7fffffff, 0x5, 0x0, 0x584d, 0x5, 0x200, 0x44, 0x2c1de22e, 0xc860, 0x32cd, 0x6, 0x7fff, 0xffffffc1, 0x3, 0x5, 0x9, 0x7, 0x0, 0x6, 0x209, 0xfa, 0x8, 0x5, 0x3, 0x1, 0x4, 0x9, 0x100, 0x4, 0x1aa4a043]}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2874.182182][ T33] audit: type=1800 audit(1623020620.712:1657): pid=29532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15911 res=0 errno=0 23:03:40 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/172) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:41 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/42) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x3) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000040)={0x200, 0x5fb, 0x7ff, 0x800000}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2a000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x4, 0x800]) [ 2874.254670][ T33] audit: type=1804 audit(1623020620.752:1658): pid=29530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353334322F48C7C060 dev="sda1" ino=15903 res=1 errno=0 [ 2874.375370][ T33] audit: type=1800 audit(1623020620.772:1659): pid=29531 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15915 res=0 errno=0 [ 2874.382383][T12689] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 2874.406158][ T33] audit: type=1800 audit(1623020620.772:1660): pid=29532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15911 res=0 errno=0 [ 2874.438359][ T33] audit: type=1804 audit(1623020620.772:1661): pid=29541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723230303930313736362F73797A6B616C6C65722E674865644D302F353334322F48C7C060 dev="sda1" ino=15903 res=1 errno=0 [ 2874.469458][ T33] audit: type=1804 audit(1623020620.782:1662): pid=29531 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D746573746469723731303935393437372F73797A6B616C6C65722E5759596C794F2F353038302F48C7C060 dev="sda1" ino=15915 res=1 errno=0 [ 2874.500719][ T33] audit: type=1800 audit(1623020620.792:1663): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15916 res=0 errno=0 [ 2874.522679][ T33] audit: type=1800 audit(1623020620.792:1664): pid=29547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15911 res=0 errno=0 [ 2874.532513][T20128] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 2874.544257][ T33] audit: type=1800 audit(1623020620.802:1665): pid=29550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=15915 res=0 errno=0 [ 2874.822444][T12689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2874.833686][T12689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2874.844764][T12689] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2874.857943][T12689] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2874.867778][T12689] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2874.932521][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2874.944108][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2874.956579][T20128] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2874.970376][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2874.980521][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2875.032511][T12689] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2875.041584][T12689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2875.049693][T12689] usb 1-1: Product: syz [ 2875.053922][T12689] usb 1-1: Manufacturer: syz [ 2875.058521][T12689] usb 1-1: SerialNumber: syz [ 2875.083893][T29537] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2875.142473][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2875.151658][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2875.159888][T20128] usb 2-1: Product: syz [ 2875.164131][T20128] usb 2-1: Manufacturer: syz [ 2875.168737][T20128] usb 2-1: SerialNumber: syz [ 2875.193954][T29540] raw-gadget gadget: fail, usb_ep_enable returned -22 23:03:42 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x8}}}}]}}, 0x0) 23:03:42 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/4096) [ 2875.352611][T12689] cdc_ncm 1-1:1.0: bind() failure [ 2875.360462][T12689] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2875.367401][T12689] cdc_ncm 1-1:1.1: bind() failure [ 2875.377358][T12689] usb 1-1: USB disconnect, device number 122 23:03:42 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1c6, 0x80000) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000080)={{0x2, 0x100, 0xac, 0x4, 0x7f, 0x843}, 0x204, [0x89f1, 0x6, 0x0, 0x52a39245, 0x20, 0xffffff85, 0x9, 0x0, 0xffffff80, 0x401, 0x3, 0x8, 0x4, 0x8, 0x9, 0x9, 0xffffffb7, 0x10001, 0x7, 0x6, 0x7, 0x40, 0x2, 0x80, 0x1, 0x4, 0x6, 0xffffffff, 0xdb7, 0x80000000, 0x1000, 0x8, 0x37ab, 0x6, 0xa4b6, 0x9, 0x3, 0x45, 0x0, 0xfff00000, 0x3ff, 0x8, 0x9, 0x62, 0x7, 0x7fff, 0x3f, 0x8, 0x7fffffff, 0x0, 0x7fff, 0x5, 0x2, 0x401, 0x1, 0x2, 0x7ff, 0x4, 0x3, 0x5, 0x4e, 0x1, 0x0, 0x7, 0x8000, 0x6, 0x1, 0x8, 0x10001, 0x2, 0x492, 0x3, 0x9, 0x7, 0x8, 0x8, 0x7f, 0x0, 0x200, 0x9, 0x65f, 0x8, 0x1000, 0x1, 0x6, 0xffff, 0x2, 0x7, 0xc3, 0xfffffff9, 0x0, 0x80000000, 0xdf, 0x20, 0x1, 0x1f, 0xe68, 0xffff4c33, 0xfffff7cc, 0x1000, 0x100, 0x7, 0xe284, 0x4, 0x2, 0xd83, 0x7fff, 0x0, 0x9, 0x200, 0x3f, 0xfff, 0x7fff, 0x1, 0x5, 0x1, 0x57d43051, 0x7fff, 0x1, 0x169f, 0x7, 0x7ff, 0xfffffa52, 0x1, 0x5df, 0x0, 0x7fffffff, 0x50000, 0x5, 0x5, 0x8, 0x7, 0x0, 0x40, 0x80, 0x0, 0xec1, 0x24e3, 0xb2a, 0x3, 0xffffffff, 0x7ff, 0x4e9, 0x10000, 0x8, 0x5, 0x8, 0x1, 0xd961, 0x200, 0x0, 0x9, 0x0, 0x7, 0x0, 0x6, 0xffffffff, 0x80, 0x826c876, 0x8, 0x7f, 0x8, 0x7f, 0xfffffff8, 0x7, 0x4, 0x5, 0x7ff, 0x401, 0x1000, 0x5, 0x4, 0x76, 0x6, 0x9, 0x8d, 0x10001, 0x80000000, 0x8, 0x10001, 0x800, 0x10000, 0xb42, 0x0, 0x31, 0xa, 0x3, 0x7, 0x2, 0x10000, 0x65, 0xab, 0x1, 0x1ff, 0x7ff, 0x400, 0x6, 0x4a, 0x20000, 0x7fffffff, 0x3, 0x6, 0xb9ee, 0x6, 0x4381d92a, 0x3, 0x4140, 0x5, 0x2, 0x4, 0xfb3, 0x4, 0x80000001, 0x200, 0x0, 0x8, 0x2, 0x9ae, 0x1f, 0x10000, 0xffffffff, 0x3, 0x3, 0x9, 0x4, 0x6, 0x20, 0x5, 0x4, 0x101, 0x1, 0x5, 0x400, 0x8, 0x901, 0x8c, 0x42, 0xffffffff, 0x5, 0x101, 0x0, 0x1, 0x5, 0x3d, 0x9, 0xffff8000, 0x1, 0xfffffffb, 0x800, 0x1, 0x7, 0x7, 0x5, 0x7, 0x938f, 0x20, 0x4, 0x6, 0x20, 0x40, 0x3, 0x7, 0x200, 0x2, 0x0, 0x9, 0x1800000, 0x81, 0x3a9, 0x0, 0x1, 0xdee, 0x6, 0x7, 0x9, 0xffffffff, 0x2, 0x1, 0x4, 0x2, 0x607, 0x21, 0x1000, 0x10000, 0x7f, 0x7, 0x8001, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x4, 0x9, 0x1, 0x3, 0x0, 0x7, 0x1, 0x3, 0x5, 0xfff, 0x0, 0x9bb7, 0x2, 0x8, 0x4, 0x8a8, 0x1000000, 0x8000, 0x4, 0x4, 0x825, 0x0, 0x6, 0x9517, 0x4, 0x5, 0x9, 0xffff, 0x1ff, 0x3ff, 0x8001, 0x2, 0x9, 0x0, 0x3ff, 0x1ff, 0xd2c, 0x9, 0x1, 0x7ff, 0x5, 0xff, 0x6, 0xb9f, 0x1, 0x8000, 0x6, 0x6, 0x1de, 0x6, 0x3, 0xfffffffd, 0x832c, 0x4, 0xb06, 0x7fff, 0x20, 0x10001, 0x7, 0x504, 0x0, 0x80, 0xffffff4f, 0x6, 0x7, 0x0, 0x40, 0x7, 0x4, 0x3, 0x2, 0x6, 0x800, 0x2, 0x2, 0x4, 0xdda1, 0x0, 0x310, 0x9, 0xc0, 0xfffffbd0, 0x5, 0x3ff, 0x87, 0x7, 0x9, 0x7, 0xa1f6, 0x200000, 0x2, 0x0, 0x5, 0x3, 0x2, 0x9, 0xff000000, 0x1f, 0x1, 0x7, 0x7, 0x10001, 0x4, 0x5, 0x3, 0x6, 0x7, 0x80000001, 0x2, 0x2, 0x4, 0x6, 0x0, 0x6, 0x1000, 0x3, 0x9, 0x0, 0x8, 0x0, 0x5, 0x4, 0x2, 0x4, 0x6, 0x4, 0x4, 0x7, 0x7f, 0x7ff, 0x6, 0x7fff, 0xfffffffd, 0x5, 0xff, 0x29, 0x3ff, 0x4, 0xff, 0x2, 0x5, 0x10000, 0x5, 0xff, 0x3, 0x8, 0x5, 0xffff, 0x1, 0xffffff6b, 0x1, 0x4, 0x20, 0x10000, 0x8, 0x3, 0x9, 0x4, 0x1, 0x0, 0x1, 0x4, 0x0, 0x9b, 0x8a, 0x1c000, 0x80, 0x5, 0x7ce, 0xfe, 0x10000, 0x0, 0xfff, 0x0, 0x0, 0xfffffff9, 0x9, 0x2, 0x7, 0x5, 0x7f, 0x5, 0x81, 0x8, 0x3, 0xfff, 0x9, 0x7, 0x6, 0xee7, 0x7, 0x4, 0x3, 0x8, 0xfffff359, 0x7fffffff, 0x7, 0x40, 0x0, 0x6, 0x3, 0x8, 0x4, 0x0, 0x401, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x8, 0xad3, 0x10000, 0x1f, 0x4, 0x80000001, 0x5, 0x0, 0x7, 0x1, 0x9, 0x8, 0x0, 0xfffffffe, 0xae, 0x5, 0x8000, 0x1f, 0x7f, 0xdd7, 0x20, 0x3, 0x1, 0x5, 0x7, 0x7fffffff, 0x800, 0xfffff001, 0xffffffff, 0x30, 0x9, 0x101, 0x9, 0x7, 0x6, 0x8001, 0x1, 0x3f, 0x1f, 0xeed, 0xf7b, 0x6, 0x2, 0xffffffff, 0x7, 0x4, 0x7, 0x5, 0x81, 0x9, 0x2, 0x9, 0x0, 0x89, 0x800, 0x4, 0x53, 0xfffffffe, 0x0, 0xbd, 0x40, 0x1000, 0x5, 0x5, 0x0, 0x7fff, 0x800, 0x5, 0x3ff, 0x50, 0x498, 0x4000000, 0x200, 0x6, 0x80000001, 0x5, 0xffff, 0xbe0, 0x1, 0xff, 0xb560, 0x7, 0x3e3, 0x100, 0x80, 0xffffffe0, 0x4, 0x5, 0x8000, 0x1, 0x7, 0xff, 0x20, 0x0, 0x8, 0xd6, 0x8000, 0x8000, 0x8, 0x800, 0x8, 0xffffffff, 0x3ff, 0x2, 0x2, 0x1, 0x0, 0x8, 0x81, 0xaa94, 0x2, 0x20a, 0x5, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0x5, 0x100, 0x8, 0x2, 0x8, 0x8000, 0x200, 0xf05, 0x6, 0x8, 0x3, 0x2, 0x20, 0x1, 0x3, 0x2, 0x27, 0x2, 0x3b29, 0x8001, 0xe1, 0x0, 0x80000000, 0x7c5, 0x99a, 0x100, 0x3, 0xff, 0xba, 0x3, 0x5, 0x3f, 0x1, 0x2, 0x5, 0x43c, 0x401, 0x7f, 0x6, 0x5, 0x3, 0x0, 0xd4, 0x42, 0x5, 0x1, 0x3, 0x7, 0x6, 0x80000001, 0xdb77, 0x0, 0x7, 0xfffff889, 0x10000, 0x0, 0x768, 0x6, 0x4, 0x10000, 0x3, 0x80000001, 0x800, 0x20, 0x3ff, 0x2, 0xf2f, 0xfffff000, 0x81, 0xf46, 0xfffffff8, 0x6, 0x7d, 0x9, 0xffff, 0x9, 0x9, 0x0, 0x7f, 0x7, 0x8000, 0x1, 0x0, 0x7fff, 0x3, 0x6, 0x2a, 0xe8e6, 0x8, 0x1, 0x0, 0x3, 0x895, 0x3, 0x8, 0xffffffe1, 0x11a, 0x1f, 0x80000001, 0x9, 0x1, 0x10000, 0x20, 0x5, 0x4, 0x0, 0x4, 0xffffffff, 0x100, 0x8, 0x1f44, 0x4, 0x67e, 0x5, 0x922a, 0x80, 0xff, 0xfffffff8, 0x0, 0x1000, 0x6, 0x1, 0x7, 0x3f, 0xffff9935, 0x27c8, 0xcd85, 0x3, 0x3ff, 0xc2fa, 0x8, 0x1, 0x8, 0x800, 0x1, 0x9, 0x22, 0x80000000, 0x2, 0x401, 0x9, 0x7, 0x2, 0x3, 0x5, 0x4, 0x3, 0x1000, 0x7ff, 0x4, 0xffffffff, 0x2, 0x8, 0x9, 0x239, 0x73a, 0x0, 0x8, 0x400, 0x9, 0x52, 0xcb0, 0x400, 0x8000, 0x101, 0x9, 0xc19, 0x2, 0x2, 0x8, 0x7, 0x10001, 0x31d, 0xbf88, 0x1, 0x81, 0x2, 0x7, 0x6, 0x40, 0x200, 0xbb1, 0x5, 0x1c800000, 0x1, 0x4, 0xfffffffe, 0x1ce4fe8e, 0x40, 0x5, 0x10000, 0xde, 0x1ff, 0x2, 0x0, 0x8, 0x5, 0x628d, 0x8000, 0x3, 0x3, 0x5, 0x6, 0x3, 0xfffffffb, 0x9, 0x4, 0x9, 0x10001, 0x9e, 0x4, 0x400, 0xca1, 0x8, 0x4, 0x10001, 0x4, 0x7, 0x5, 0x9, 0x9, 0x9, 0x2, 0x3, 0x5, 0x8, 0x6, 0x42, 0xffffff20, 0x200, 0x6, 0xe9, 0xff, 0x5d2e9eb5, 0x7, 0x7fffffff, 0xd9db, 0x9, 0x200, 0x5, 0x401, 0x5, 0xf56f, 0x4, 0x10000, 0x0, 0x6, 0x1, 0x10001, 0x401, 0x6, 0x401, 0xfffffffa, 0x1, 0x0, 0x800, 0x0, 0x9, 0x4, 0x6, 0x2, 0x9, 0x2, 0x0, 0x8, 0x6, 0x7, 0x3, 0x6, 0x1, 0x1, 0x0, 0x0, 0x3, 0x80, 0x9, 0x7, 0x6, 0x6, 0x7fff, 0x73, 0x2b655687, 0x8, 0x1, 0x5, 0x6, 0x9, 0x8, 0xd1ad, 0x1, 0x1, 0x40, 0x4, 0x2, 0x2, 0x3f, 0x7, 0x100, 0x40, 0x3ff, 0x9, 0xa1c, 0x3, 0x5024, 0xffffffcd, 0x7fffffff, 0x212, 0x8, 0x2, 0xd30a, 0x820, 0x2, 0x8, 0x20, 0x9, 0x200, 0x10001, 0x5, 0x7ff, 0xab9, 0x100, 0x9, 0x2, 0x80000000, 0x2, 0x0, 0xda1, 0xffff26fe, 0x401, 0x5, 0x4c, 0x1, 0x8000, 0x1, 0x1000, 0x3, 0x5, 0x1, 0x0, 0x4617, 0x8, 0x10000, 0x401, 0x4, 0x0, 0x1, 0x4, 0x1ff, 0x3ec, 0x40, 0x8, 0x800, 0x7, 0xfffffff9, 0xafb1, 0x3e0, 0x3, 0x4, 0x6b00, 0x2, 0x9, 0x401, 0x401, 0x3, 0x730, 0xd9, 0x7, 0x9, 0x1, 0x80000001, 0x7, 0x7fffffff, 0x5, 0x0, 0x584d, 0x5, 0x200, 0x44, 0x2c1de22e, 0xc860, 0x32cd, 0x6, 0x7fff, 0xffffffc1, 0x3, 0x5, 0x9, 0x7, 0x0, 0x6, 0x209, 0xfa, 0x8, 0x5, 0x3, 0x1, 0x4, 0x9, 0x100, 0x4, 0x1aa4a043]}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:42 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7ff, 0x4, 0x0, 0x10001, 0x1, 0xb48}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/9) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xfebd40a3b0554374) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xeaf8, 0x20a200) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000180)=""/48) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/176) 23:03:42 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x80000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/118) syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000, 0x5) 23:03:42 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/42) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x3) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000040)={0x200, 0x5fb, 0x7ff, 0x800000}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2a000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x4, 0x800]) [ 2875.452492][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2875.469671][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2875.476605][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2875.573957][T20128] usb 2-1: USB disconnect, device number 115 23:03:42 executing program 3: syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x70, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xe4, 0x3f}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x1, 0x80}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3f, 0x8, 0x3, 0x40, 0x3}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="000f0400005124aa509d92a315e1d4c5e6cfce9f43b570c33191c28b5fb82b90c7270b68d9e9a7dab6e0026f1c18ef5a00d2982f271f637112d52e2b687a68de48d310b0d5"], 0x1, [{0x3, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x812}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10040) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000140)) syz_usb_connect(0x0, 0x2e3, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xb7, 0x43, 0x28, 0x10, 0x61d, 0xc140, 0x3fd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d1, 0x1, 0xc0, 0x4, 0x20, 0x20, [{{0x9, 0x4, 0x6, 0x4, 0x8, 0x7b, 0xad, 0xf5, 0x3, [@generic={0xb1, 0x1, "85d0ba9c2ec1ec8984be237f67f93a1c67b6de69735e3bd74a9c46f5d06df00d0a4f06d073333e599a91ba7616787986e25b1018d291765c2818cbc7a7eac5ed2468d28c6b3eb99c3c1e8616f1999b2716849f4dfff1e1ad39608a758ab47308a6c1a32d010a36fa9e3d0c31cb6ca7f8ae948dddb7b9c1a9b1f8c820c38895541202a50b973d889da74792d7759c1ca7144e60876cb9fa15b301e0a5dcab5e44288ed06d223ee96f352a8611398f00"}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "6690ca"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x5, 0xd}, {0x6, 0x24, 0x1a, 0x3, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0x1, 0x52}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x9c, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0xd5, 0x60, 0x4, 0x9}, @acm={0x4, 0x24, 0x2, 0x8}, @country_functional={0x8, 0x24, 0x7, 0x3e, 0x1, [0x6]}, @obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x3, 0x0, 0x48, 0xa, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4}, @generic={0xa3, 0x23, "7b4ea02e6e4e4578c111e9781dc2a63dd3b4dcf300422d1adc48c2d736e3df9e37c9b52b3a56b0a6d565bdb2ad05ef98678844f8322da79d1cde2f0e74200925ba3875a3e2d6fb79d7054da76a9f66bdb73f919ad22d33b4e4a76c87c65d5cc0b2d9f1c7b4e88e2fcefbd446773ca46b0ed3c259d8d37f074ff13d1e5923b051775e0e941983e83f0d3a46b0adc08a36099b3473061fd3a5d9cdc3ed5dc4643a26"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x7, 0xc0, 0x2, [@generic={0x7d, 0xb, "1f8ab0ce3706d9d8ad8e39145353f77f77407fc8c8c8cf4629c48f6c562526352de546845af5de770f546dc40c366ae85e65511d8775fd4c1ef444540eac26f67ffae1ef37303de5f11b9c9f1f4ffb7fd94b87732d90cb4dff76e2ddfe363dcc57e8798e44dddc8e32c5a66de4fc00619e9d86803b4259029b0c94"}, @generic={0x2b, 0x7, "a4ab90c71e731ac0e25dddebaf7ab7ab2953c9e48e4c88acb3d8bc9d68de6bb9a616c7038260fc4082"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xc0, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x3f, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x1b, 0xff, 0x6, [@generic={0x26, 0x1, "fdf2035f6c4457f84a1ac8ddf3317e7386f44ed40ba35fcbca02807f34ea80acdc2fdfc4"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x101}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x8, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xf0, 0x0, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x4, 0x3, 0x3f}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x49, 0x80, 0x40, 0x8, 0x7}, 0xc, &(0x7f0000000500)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0xc, 0x5}]}, 0x4, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x426}}, {0x38, &(0x7f0000000580)=@string={0x38, 0x3, "a85887ff36028369e2c4035557802a9088357c2040572a3db363d586a27dd17d1a1c4c24e7ad6c29d115d3bcfff29ee232660a7e3fe9"}}, {0xf4, &(0x7f00000005c0)=@string={0xf4, 0x3, "a2576ca4e29ebeb86b22543685539175084bdae8506410ee072d413cf9f0b297cd3cf4b17cf308b485ec332d17d8b470b38581d47beea66408b5d4a3348999702604af944e9b64efeed0cd014ee34a25ebc551a17451e74d9ee48da1ff3c31c2ac8db01671fdd8eb338be79c3afad3847bf95fee5e09b2697e2b232ff848d85d59b748052d250679e333d22e622b2f87cc65849700f2830c77d9a4d06341e8ba2875f6b255bf707cc9582fd2ae8a322fc26a9836af720204124c39b55070db9174f8faa08a8aa39d934ef97b432a4fe31fd0ad1912f92be913ee8bac50a2f9c88236f9d1796be86ecb0435b49ffb36d47361"}}, {0xef, &(0x7f00000006c0)=@string={0xef, 0x3, "aa0de5a612026a461a69079d51c7e7b6c4f2720a2676577dd61d06362335b5b5668b209062b5126b438a2507a1c4f3b1d13ee379b7817453a4c2275a0139b0940722e4dabd933dd4292b48cd7fc67f4d12a960ad1ebdfd668ca1a57836899c6f6f924d9c9703cf627e106b722dd053154e0b8faa3f71b4a5a8bdd6ed0312e46c334941180e8273a87f2da2e714806fbe71bda9202c019fa60dc6c44154fdc6eeb012b79c6ff42d2015615e8567bb4159feb1b9738fe59d78791e21f2af363147d56ce59848b6fad6eea9c0ad0449f9a032a769f9fa198038c78b7baf3dc8063799a36ac8ab1c8719d9d9850bf9"}}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000840)="c079764fb8040a42232ed94e36f6ce477a040535487e6cc540165a85bd097a428cbe68558f4b7bcf42b04b02d61defcc8d3db49d8da3fa457916c09b0b4f972afa70d112950eb66ae54ada473ff8d81c55fdb8eed050038fa91190281ee6afb22d8acc5192", 0x65) 23:03:42 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x3ff, 0xb0400) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000000)=""/195) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/6) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:42 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x7}}}}]}}, 0x0) 23:03:42 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x70000000, 0x2a0c40) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xffff]) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/1) 23:03:42 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0xfffffffffffffff9, 0x80) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000580)=[0x1, 0x4]) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x300) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000080)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000006c0)={0x0, 0xed, &(0x7f00000005c0)="365fca291454352b748ef9b0556114282fd99db593a78aec4839cc7f6419a1677759f0b3bc9865f173a005d4561c841c9f3fdaa3a19593f2965556e02c05d8fa738fd45f8c758e779a7f3015165c394aaeea0248b71430b751c95f50a1d9edca7d63977c8b0b031b28b9c0a72d1c6e0ff6ce42101ed9c8e769c784b31ecb5d81639b9be803fbbe47b92f2570d3b29639920e90c7796abdbe33ef5dc1125eb0fe99079e5315c1e4cb46ad933e5184875ecee175b92619cae78fe67c78479239ce13efc8bab03341a37c2bdd173e7b8d955beb8ebb50abb59b7ad58fc2fb6f59d4fa46b896b2aa7c2a7d40cf7f90"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0xff, 0xe, 0x0, 0xfffffffe, "c3d8155cf6211e3b05f5b020525ac85a836c4f20848b62964934d248cf81545a"}) 23:03:42 executing program 2: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x804) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8000, 0x18000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/87) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x56, 0x5, 0x9, {0x1, 0x6}, {0x8, 0x9}, @rumble={0x2, 0x101}}) [ 2875.972390][T20128] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 2876.022344][T12689] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2876.072378][ T32] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 2876.262271][T12689] usb 4-1: Using ep0 maxpacket: 16 [ 2876.332922][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2876.344319][T20128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2876.356558][T20128] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 2876.369886][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2876.379885][T20128] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2876.432369][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2876.444015][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2876.455365][ T32] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2876.468486][ T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2876.478535][ T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2876.492366][T12689] usb 4-1: config 192 has an invalid interface number: 6 but max is 0 [ 2876.500748][T12689] usb 4-1: config 192 contains an unexpected descriptor of type 0x1, skipping [ 2876.509931][T12689] usb 4-1: config 192 contains an unexpected descriptor of type 0x1, skipping [ 2876.518855][T12689] usb 4-1: config 192 has no interface number 0 [ 2876.525501][T12689] usb 4-1: config 192 interface 6 altsetting 4 endpoint 0x3 has invalid maxpacket 72, setting to 64 [ 2876.536594][T12689] usb 4-1: config 192 interface 6 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2876.547812][T12689] usb 4-1: config 192 interface 6 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 2876.558621][T12689] usb 4-1: config 192 interface 6 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 2876.569401][T12689] usb 4-1: config 192 interface 6 has no altsetting 0 [ 2876.576445][T20128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2876.585612][T20128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2876.593686][T20128] usb 2-1: Product: syz [ 2876.597869][T20128] usb 2-1: Manufacturer: syz [ 2876.602519][T20128] usb 2-1: SerialNumber: syz [ 2876.623855][T29605] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2876.682452][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2876.691548][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2876.699636][ T32] usb 1-1: Product: syz [ 2876.703924][ T32] usb 1-1: Manufacturer: syz [ 2876.708517][ T32] usb 1-1: SerialNumber: syz [ 2876.733707][T29626] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2876.792663][T12689] usb 4-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=3f.d6 [ 2876.801819][T12689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:03:43 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0x4, 0x1, 0x0, 0x18}}}}]}}, 0x0) 23:03:43 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x30, 0xb, 0xfff, 0x200, "d2642aaeb17a289f89d9f52f784b6d52dd5142b8fe4edb99b94aec93425c41e1"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) 23:03:43 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x70000000, 0x2a0c40) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xffff]) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/1) 23:03:43 executing program 2: ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000080)) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/106) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/88) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000019140)=""/102397) syz_open_dev$evdev(&(0x7f00000190c0), 0x10000, 0x5dd803) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x0, 0x14, 0x40, 0x2, "9ce66e81dc87feab277ce9a3462ff3aec6b8409b9940be3c0d5e1c10dcc539c2"}) [ 2876.810072][T12689] usb 4-1: Product: 垢ꑬ黢뢾≫㙔厅疑䬈摐ⴇ㱁鞲㳍뇴됈ⴳ炴薳풁撦딈ꏔ褴炙Ц钯魎탮Ǎ╊엫ꅑ兴䷧ꆍ㳿숱趬ᚰﵱ謳鳧墨蓓糧फ़榲⭾⼣䣸巘띙Ո┭礆㏣⻒⭢蜯旌鞄ಃ키䅣뫨用닶뽕籰壉툯誮⼲櫂㚘犯Ђ䰒딹灐釛ꃺ誊鶣亓篹⩃퀟᦭裸겋ꉐ죹㚂퇹歹滨Ӌ됵ﮟ퐶慳 [ 2876.844766][T12689] usb 4-1: Manufacturer: 墨ﾇȶ榃쓢唃聗逪㖈⁼址㴪掳蛕綢緑ᰚ⑌귧⥬ᗑ볓昲縊 [ 2876.856154][T12689] usb 4-1: SerialNumber: ඪꛥȒ䙪椚鴇응뛧ੲ瘦絗ᷖ㘆㔣떵警造땢欒詃ܥ쒡뇳㻑秣膷却스娧㤁钰∇鎽퐽⬩쵈왿䵿ꤒ굠봞曽ꆌ碥褶澜鉯鱍Η拏ၾ牫퀭ᕓ୎ꪏ焿ꖴ붨ሃ泤䤳ᡁ舎ꡳ⵿耔빯뵱₩Ĭꚟ옍䇄ﵔኰ鲷‭愕蕞뭧奁뇾玹碝ṹ㚯䜱法飥뙈훺ꧮ귀䤄ꃹꜲ數᧺㢀诇꽻젽㜆ꎙ졪Ძᦇஅ [ 2876.913555][T20128] cdc_ncm 2-1:1.0: bind() failure [ 2876.933410][T20128] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2876.940272][T20128] cdc_ncm 2-1:1.1: bind() failure [ 2876.992415][T20128] usb 2-1: USB disconnect, device number 116 23:03:43 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x412200) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001040)={0x15, 0x1000, &(0x7f0000000040)="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"}) [ 2877.086491][ T32] cdc_ncm 1-1:1.0: bind() failure 23:03:43 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x70000000, 0x2a0c40) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xffff]) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/1) [ 2877.116122][ T32] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2877.123251][ T32] cdc_ncm 1-1:1.1: bind() failure [ 2877.182948][ T32] usb 1-1: USB disconnect, device number 123 23:03:44 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x105400) 23:03:44 executing program 5: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x204000) 23:03:44 executing program 2: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x101640) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x4, 0x5a, &(0x7f0000000000)="e2db79782d8041a6fe835207061571af64df6c7f11357b74beb6b676dc19bf2661b798956cc7ec3054fcf01e187d2037355e192de37e2b3a5b8f427de41bc3369a3ed5aec34d59b2ced7f663ba42668b906d0ce946685cb86bbc"}) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000000c0)=""/4096) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) 23:03:44 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x84740) syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0x105400) 23:03:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2ef40) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x6) [ 2877.384957][T12689] quatech2 4-1:192.6: Quatech 2nd gen USB to Serial Driver converter detected [ 2877.422334][T20128] usb 2-1: new full-speed USB device number 117 using dummy_hcd 23:03:44 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x101640) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x5) [ 2877.457044][T12689] ------------[ cut here ]------------ [ 2877.462703][T12689] usb 4-1: BOGUS control dir, pipe 80006b80 doesn't match bRequestType 40 [ 2877.471480][T12689] WARNING: CPU: 1 PID: 12689 at drivers/usb/core/urb.c:410 usb_submit_urb+0x149d/0x18a0 [ 2877.481496][T12689] Modules linked in: [ 2877.485470][T12689] CPU: 1 PID: 12689 Comm: kworker/1:2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2877.494110][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2877.504237][T12689] Workqueue: usb_hub_wq hub_event [ 2877.509305][T12689] RIP: 0010:usb_submit_urb+0x149d/0x18a0 [ 2877.515035][T12689] Code: 7c 24 40 e8 85 fb b2 fd 48 8b 7c 24 40 e8 4b 8f 1b ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 20 13 63 86 e8 85 f2 fb 01 <0f> 0b e9 a5 ee ff ff e8 57 fb b2 fd 0f b6 1d 6c 8b 34 05 31 ff 41 [ 2877.534778][T12689] RSP: 0018:ffffc90011da6de8 EFLAGS: 00010282 [ 2877.540875][T12689] RAX: 0000000000000000 RBX: ffff888135df1058 RCX: 0000000000000000 [ 2877.548951][T12689] RDX: 0000000000040000 RSI: ffffffff812a6583 RDI: fffff520023b4daf [ 2877.557050][T12689] RBP: ffff88810f2e6140 R08: 0000000000000001 R09: 0000000000000000 [ 2877.565099][T12689] R10: ffffffff814b9f5f R11: 0000000000000000 R12: ffff8881096c6938 [ 2877.573153][T12689] R13: 0000000000000040 R14: 0000000080006b80 R15: ffff88813d65b500 [ 2877.581142][T12689] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 2877.590199][T12689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2877.596872][T12689] CR2: 00007fd25241a000 CR3: 000000013d2b8000 CR4: 00000000001506e0 [ 2877.604931][T12689] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2877.612986][T12689] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2877.620992][T12689] Call Trace: [ 2877.624350][T12689] ? lockdep_init_map_type+0x280/0x790 [ 2877.629861][T12689] usb_start_wait_urb+0x101/0x4c0 [ 2877.634993][T12689] ? lock_downgrade+0x6e0/0x6e0 [ 2877.639870][T12689] ? fs_reclaim_acquire+0xb2/0x160 [ 2877.645099][T12689] ? usb_api_blocking_completion+0xa0/0xa0 [ 2877.650925][T12689] ? memset+0x20/0x40 [ 2877.654986][T12689] usb_control_msg+0x31c/0x4a0 [ 2877.659768][T12689] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2877.665044][T12689] ? debug_object_destroy+0x210/0x210 [ 2877.670466][T12689] ? lockdep_init_map_type+0x2c3/0x790 [ 2877.676039][T12689] ? qt2_read_bulk_callback+0xce0/0xce0 [ 2877.681613][T12689] qt2_attach+0x82/0x550 [ 2877.685947][T12689] ? __init_waitqueue_head+0x6b/0xd0 [ 2877.691265][T12689] ? qt2_read_bulk_callback+0xce0/0xce0 [ 2877.696908][T12689] usb_serial_probe.cold+0x1229/0x292b [ 2877.702633][T12689] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2877.708583][T12689] ? trace_hardirqs_on+0x5b/0x1a0 [ 2877.713675][T12689] usb_probe_interface+0x315/0x7f0 [ 2877.718916][T12689] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 2877.724590][T12689] really_probe+0x291/0xf70 [ 2877.729128][T12689] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2877.735610][T12689] driver_probe_device+0x2a0/0x410 [ 2877.740736][T12689] __device_attach_driver+0x20b/0x2d0 [ 2877.746194][T12689] ? driver_allows_async_probing+0x150/0x150 [ 2877.752270][T12689] bus_for_each_drv+0x15f/0x1e0 [ 2877.757141][T12689] ? bus_for_each_dev+0x1d0/0x1d0 [ 2877.762240][T12689] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2877.768330][T12689] ? trace_hardirqs_on+0x5b/0x1a0 [ 2877.773412][T12689] __device_attach+0x228/0x4b0 [ 2877.778191][T12689] ? __driver_attach_async_helper+0x330/0x330 [ 2877.784579][T12689] ? kobject_uevent_env+0x2bb/0x1650 [ 2877.789903][T12689] bus_probe_device+0x1e4/0x290 [ 2877.794819][T12689] device_add+0xc2f/0x2180 [ 2877.799253][T12689] ? wait_for_completion_io+0x270/0x270 [ 2877.804861][T12689] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 2877.811120][T12689] ? kfree+0xdb/0x3b0 [ 2877.815161][T12689] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2877.821542][T12689] usb_set_configuration+0x113f/0x1910 [ 2877.827066][T12689] usb_generic_driver_probe+0xba/0x100 [ 2877.832594][T12689] usb_probe_device+0xd9/0x2c0 [ 2877.837390][T12689] ? usb_driver_release_interface+0x180/0x180 [ 2877.843525][T12689] really_probe+0x291/0xf70 [ 2877.848045][T12689] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2877.854430][T12689] driver_probe_device+0x2a0/0x410 [ 2877.859564][T12689] __device_attach_driver+0x20b/0x2d0 [ 2877.864989][T12689] ? driver_allows_async_probing+0x150/0x150 [ 2877.870984][T12689] bus_for_each_drv+0x15f/0x1e0 [ 2877.875910][T12689] ? bus_for_each_dev+0x1d0/0x1d0 [ 2877.880948][T12689] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2877.886988][T12689] ? trace_hardirqs_on+0x5b/0x1a0 [ 2877.892184][T12689] __device_attach+0x228/0x4b0 [ 2877.896976][T12689] ? __driver_attach_async_helper+0x330/0x330 [ 2877.903092][T12689] ? kobject_uevent_env+0x2bb/0x1650 [ 2877.908400][T12689] bus_probe_device+0x1e4/0x290 [ 2877.913314][T12689] device_add+0xc2f/0x2180 [ 2877.917758][T12689] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 2877.924058][T12689] ? kfree+0xdb/0x3b0 [ 2877.928052][T12689] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2877.934375][T12689] usb_new_device.cold+0x63f/0x108e [ 2877.939590][T12689] ? hub_disconnect+0x510/0x510 [ 2877.944505][T12689] ? rwlock_bug.part.0+0x90/0x90 [ 2877.949453][T12689] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2877.955571][T12689] hub_event+0x2357/0x4330 [ 2877.960030][T12689] ? hub_port_debounce+0x3c0/0x3c0 [ 2877.965203][T12689] ? reacquire_held_locks+0x361/0x4e0 [ 2877.970593][T12689] ? __do_sys_prctl+0x860/0xfd0 [ 2877.975561][T12689] ? lock_release+0x6f0/0x6f0 [ 2877.980364][T12689] ? lock_downgrade+0x6e0/0x6e0 [ 2877.985277][T12689] ? do_raw_spin_lock+0x120/0x2b0 [ 2877.990314][T12689] process_one_work+0x98d/0x1580 [ 2877.995311][T12689] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2878.000695][T12689] ? rwlock_bug.part.0+0x90/0x90 [ 2878.005692][T12689] worker_thread+0x64c/0x1120 [ 2878.010384][T12689] ? __kthread_parkme+0x118/0x1d0 [ 2878.015664][T12689] ? process_one_work+0x1580/0x1580 [ 2878.020992][T12689] kthread+0x38c/0x460 [ 2878.025122][T12689] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2878.030353][T12689] ? __kthread_bind_mask+0xc0/0xc0 [ 2878.035545][T12689] ret_from_fork+0x1f/0x30 [ 2878.039980][T12689] Kernel panic - not syncing: panic_on_warn set ... [ 2878.046654][T12689] CPU: 1 PID: 12689 Comm: kworker/1:2 Not tainted 5.13.0-rc4-syzkaller #0 [ 2878.055141][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2878.065189][T12689] Workqueue: usb_hub_wq hub_event [ 2878.070234][T12689] Call Trace: [ 2878.073502][T12689] dump_stack+0x143/0x1db [ 2878.077828][T12689] panic+0x306/0x73d [ 2878.081733][T12689] ? __warn_printk+0xf3/0xf3 [ 2878.086325][T12689] ? __warn.cold+0x1a/0x44 [ 2878.090817][T12689] ? usb_submit_urb+0x149d/0x18a0 [ 2878.095830][T12689] __warn.cold+0x35/0x44 [ 2878.100185][T12689] ? usb_submit_urb+0x149d/0x18a0 [ 2878.105198][T12689] report_bug+0x1bd/0x210 [ 2878.109529][T12689] handle_bug+0x3c/0x60 [ 2878.113676][T12689] exc_invalid_op+0x14/0x40 [ 2878.118180][T12689] asm_exc_invalid_op+0x12/0x20 [ 2878.123042][T12689] RIP: 0010:usb_submit_urb+0x149d/0x18a0 [ 2878.128759][T12689] Code: 7c 24 40 e8 85 fb b2 fd 48 8b 7c 24 40 e8 4b 8f 1b ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 20 13 63 86 e8 85 f2 fb 01 <0f> 0b e9 a5 ee ff ff e8 57 fb b2 fd 0f b6 1d 6c 8b 34 05 31 ff 41 [ 2878.148534][T12689] RSP: 0018:ffffc90011da6de8 EFLAGS: 00010282 [ 2878.154703][T12689] RAX: 0000000000000000 RBX: ffff888135df1058 RCX: 0000000000000000 [ 2878.162674][T12689] RDX: 0000000000040000 RSI: ffffffff812a6583 RDI: fffff520023b4daf [ 2878.170738][T12689] RBP: ffff88810f2e6140 R08: 0000000000000001 R09: 0000000000000000 [ 2878.178699][T12689] R10: ffffffff814b9f5f R11: 0000000000000000 R12: ffff8881096c6938 [ 2878.186663][T12689] R13: 0000000000000040 R14: 0000000080006b80 R15: ffff88813d65b500 [ 2878.194629][T12689] ? irq_work_queue+0x1f/0x60 [ 2878.199303][T12689] ? vprintk+0x93/0x1c0 [ 2878.203451][T12689] ? usb_submit_urb+0x149d/0x18a0 [ 2878.208584][T12689] ? lockdep_init_map_type+0x280/0x790 [ 2878.214037][T12689] usb_start_wait_urb+0x101/0x4c0 [ 2878.219203][T12689] ? lock_downgrade+0x6e0/0x6e0 [ 2878.224072][T12689] ? fs_reclaim_acquire+0xb2/0x160 [ 2878.229295][T12689] ? usb_api_blocking_completion+0xa0/0xa0 [ 2878.235106][T12689] ? memset+0x20/0x40 [ 2878.239169][T12689] usb_control_msg+0x31c/0x4a0 [ 2878.244002][T12689] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2878.249280][T12689] ? debug_object_destroy+0x210/0x210 [ 2878.254710][T12689] ? lockdep_init_map_type+0x2c3/0x790 [ 2878.260285][T12689] ? qt2_read_bulk_callback+0xce0/0xce0 [ 2878.265853][T12689] qt2_attach+0x82/0x550 [ 2878.270101][T12689] ? __init_waitqueue_head+0x6b/0xd0 [ 2878.275384][T12689] ? qt2_read_bulk_callback+0xce0/0xce0 [ 2878.280921][T12689] usb_serial_probe.cold+0x1229/0x292b [ 2878.286382][T12689] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 2878.292259][T12689] ? trace_hardirqs_on+0x5b/0x1a0 [ 2878.297283][T12689] usb_probe_interface+0x315/0x7f0 [ 2878.302405][T12689] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 2878.307784][T12689] really_probe+0x291/0xf70 [ 2878.312390][T12689] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2878.318999][T12689] driver_probe_device+0x2a0/0x410 [ 2878.324212][T12689] __device_attach_driver+0x20b/0x2d0 [ 2878.329585][T12689] ? driver_allows_async_probing+0x150/0x150 [ 2878.335562][T12689] bus_for_each_drv+0x15f/0x1e0 [ 2878.340416][T12689] ? bus_for_each_dev+0x1d0/0x1d0 [ 2878.345485][T12689] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2878.351701][T12689] ? trace_hardirqs_on+0x5b/0x1a0 [ 2878.356726][T12689] __device_attach+0x228/0x4b0 [ 2878.361490][T12689] ? __driver_attach_async_helper+0x330/0x330 [ 2878.367582][T12689] ? kobject_uevent_env+0x2bb/0x1650 [ 2878.372860][T12689] bus_probe_device+0x1e4/0x290 [ 2878.377711][T12689] device_add+0xc2f/0x2180 [ 2878.382213][T12689] ? wait_for_completion_io+0x270/0x270 [ 2878.387774][T12689] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 2878.394015][T12689] ? kfree+0xdb/0x3b0 [ 2878.397991][T12689] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2878.404244][T12689] usb_set_configuration+0x113f/0x1910 [ 2878.409697][T12689] usb_generic_driver_probe+0xba/0x100 [ 2878.415148][T12689] usb_probe_device+0xd9/0x2c0 [ 2878.419904][T12689] ? usb_driver_release_interface+0x180/0x180 [ 2878.426248][T12689] really_probe+0x291/0xf70 [ 2878.430746][T12689] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2878.437222][T12689] driver_probe_device+0x2a0/0x410 [ 2878.442397][T12689] __device_attach_driver+0x20b/0x2d0 [ 2878.447837][T12689] ? driver_allows_async_probing+0x150/0x150 [ 2878.453813][T12689] bus_for_each_drv+0x15f/0x1e0 [ 2878.458675][T12689] ? bus_for_each_dev+0x1d0/0x1d0 [ 2878.463691][T12689] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2878.469669][T12689] ? trace_hardirqs_on+0x5b/0x1a0 [ 2878.474693][T12689] __device_attach+0x228/0x4b0 [ 2878.479450][T12689] ? __driver_attach_async_helper+0x330/0x330 [ 2878.485515][T12689] ? kobject_uevent_env+0x2bb/0x1650 [ 2878.490792][T12689] bus_probe_device+0x1e4/0x290 [ 2878.495641][T12689] device_add+0xc2f/0x2180 [ 2878.500056][T12689] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 2878.506300][T12689] ? kfree+0xdb/0x3b0 [ 2878.510275][T12689] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2878.516537][T12689] usb_new_device.cold+0x63f/0x108e [ 2878.521765][T12689] ? hub_disconnect+0x510/0x510 [ 2878.526709][T12689] ? rwlock_bug.part.0+0x90/0x90 [ 2878.531650][T12689] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 2878.537643][T12689] hub_event+0x2357/0x4330 [ 2878.542098][T12689] ? hub_port_debounce+0x3c0/0x3c0 [ 2878.547517][T12689] ? reacquire_held_locks+0x361/0x4e0 [ 2878.552891][T12689] ? __do_sys_prctl+0x860/0xfd0 [ 2878.557849][T12689] ? lock_release+0x6f0/0x6f0 [ 2878.562610][T12689] ? lock_downgrade+0x6e0/0x6e0 [ 2878.567470][T12689] ? do_raw_spin_lock+0x120/0x2b0 [ 2878.572488][T12689] process_one_work+0x98d/0x1580 [ 2878.577495][T12689] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2878.582860][T12689] ? rwlock_bug.part.0+0x90/0x90 [ 2878.587790][T12689] worker_thread+0x64c/0x1120 [ 2878.592483][T12689] ? __kthread_parkme+0x118/0x1d0 [ 2878.597694][T12689] ? process_one_work+0x1580/0x1580 [ 2878.602890][T12689] kthread+0x38c/0x460 [ 2878.606955][T12689] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2878.612151][T12689] ? __kthread_bind_mask+0xc0/0xc0 [ 2878.617281][T12689] ret_from_fork+0x1f/0x30 [ 2878.621887][T12689] Kernel Offset: disabled [ 2878.626388][T12689] Rebooting in 86400 seconds..