getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000440)={r8, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x0, @remote, 0x8}]}, &(0x7f0000000480)=0x10) r9 = socket$inet(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000200)={0x358, &(0x7f00000001c0)=[r0, r9, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x4) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r11}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r11, 0xfffff800, 0x30}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 919.280781][T13286] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 919.317297][ T5027] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 919.329501][ T5027] usb 6-1: config 6 has no interface number 0 [ 919.343299][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 919.368762][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 919.397809][ T5027] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 919.421158][ T5027] usb 6-1: config 6 interface 92 has no altsetting 0 [ 919.588621][ T5027] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 919.610663][ T5027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.628448][ T5027] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 919.686543][ T27] audit: type=1804 audit(1593992874.477:4029): pid=13297 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/608/bus" dev="sda1" ino=16188 res=1 [ 919.721342][ T5027] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 919.853655][ T27] audit: type=1804 audit(1593992874.647:4030): pid=13298 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/608/bus" dev="sda1" ino=16188 res=1 [ 920.081317][T13248] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop5 [ 920.188820][ T5027] option 6-1:6.92: GSM modem (1-port) converter detected [ 920.205062][ T5027] usb 6-1: USB disconnect, device number 7 [ 920.216167][ T5027] option 6-1:6.92: device disconnected 23:47:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000000c0)=0x3) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x1409, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) 23:47:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f00000001c0)="49cc74f24bfeb93784875c8f5d8dc9e8c198673d2af303b0420bf8e2e77163ed8025fec41716225da0886c49c260cb5c76e252de95553aebf893ff6639cf44f36d152f80fd805e6abf626bc09fa44a577d1bb940ee4d898b089e7e8a5fca2be7eaef7d4f86ab8f7e2f9f3b82cde70ef3e3588aaeb121f88ca25630bee321d770ca07f509c15171dd8841e6d957c27a2562c83e5c1786df445e6f95c2cf3ffd72e0bd3621dcd35d8500758235deec9580a9f296bc6c90b725fc7d86acd8064565338d99", &(0x7f00000000c0)=""/7, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2f}}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:55 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 23:47:55 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xfffffffe) 23:47:55 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1b00) [ 920.702610][T13332] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:47:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x0, 0x8, 0x8001, 0xc61d}, 0xc) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 920.872982][T13346] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:47:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x1, 0x0, 0x3, 0x2, 0x3, 0xff81}, &(0x7f0000000140)=0x20) 23:47:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 921.007059][T26642] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 921.106288][T13358] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 921.122437][T13361] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:47:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 921.247070][T26642] usb 6-1: Using ep0 maxpacket: 32 [ 921.277820][T13365] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 921.345037][T13369] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:47:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000400)={0x141, 0x29, 0x2, {0x5b6, [{{0x0, 0x3, 0x6}, 0x6, 0x1, 0x7, './file0'}, {{0x10, 0x0, 0x8}, 0x5, 0x5, 0x7, './file1'}, {{0x80, 0x0, 0x3}, 0x6, 0xe1, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x7, 0x2, 0x7, './file0'}, {{0x10, 0x0, 0x1}, 0x80000001, 0x40, 0x7, './file0'}, {{0x80, 0x4, 0x3}, 0x2, 0x5, 0x7, './file0'}, {{0x4, 0x3, 0x1}, 0x78b5, 0x4, 0x7, './file1'}, {{0x1, 0x4, 0x7}, 0x85b, 0x6, 0x7, './file0'}, {{0x20, 0x4, 0x8}, 0x10000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x4}, 0xbb59, 0x0, 0x7, './file0'}]}}, 0x141) [ 921.447325][T26642] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 921.458599][T26642] usb 6-1: config 6 has no interface number 0 [ 921.471450][T26642] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 921.501952][T13375] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 921.512002][T26642] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 921.535110][T26642] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 921.556600][T26642] usb 6-1: config 6 interface 92 has no altsetting 0 [ 921.590225][T13380] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 921.717826][T26642] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 921.736671][T26642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.761600][T26642] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 921.850226][T26642] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 922.121356][T13337] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop5 [ 922.178539][T26642] option 6-1:6.92: GSM modem (1-port) converter detected [ 922.202490][T26642] usb 6-1: USB disconnect, device number 8 [ 922.211129][T26642] option 6-1:6.92: device disconnected 23:47:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000000c0)=0x3) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:47:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb138}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x18}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdf6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x100) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:57 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1c00) 23:47:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x1, 0x0, 0x3, 0x2, 0x3, 0xff81}, &(0x7f0000000140)=0x20) 23:47:57 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x10000000000) [ 922.705789][T13416] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 922.729842][T13420] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 922.733319][T13419] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:47:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 922.892497][T13431] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:47:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000001c0)={{0x0, 0x0, @identifier="5d4a30e848c85a13374dce8dff9f4009"}, 0x9d, 0x0, [], "0f43026f8bc58f06928b49c818ddab04845f88d23aea738438d9e1d90128ddd23c7a4df9253dc9c7dabfdc29f1718d90fd0fad1697dfb72ad2c1c5a7e6786d647ffa3497735f22352077c8c3e31039f1348454bbdf935c77ee347c8675a9ad8ec488e5f13f2eee13d8cc0baf9f5d9a2e22d89207b5e210b68245ca8f2cfd2644368d90126e4731b442f1dcdd0a037c88f8588b8a44931e431a798a9f8d"}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r4, r5) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x1, 0x0, 0x3, 0x2, 0x3, 0xff81}, &(0x7f0000000140)=0x20) [ 923.023126][T13437] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 923.037979][ T12] usb 6-1: new high-speed USB device number 9 using dummy_hcd 23:47:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 923.138536][T13444] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:47:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fanotify_mark(r1, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x5953752c000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = getpid() sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x4c4, 0x34, 0x200, 0x70bd27, 0x25dfdbff, {0xe}, [@generic="6de80c2d69b5dc395c929f0bc46e73099c7153e6f818d7eba28fe58a68a6ee3acba9a82d884a67601c45e31821422ad6479deab880b209050ba0360bbdd0e6ac456b77de289709b2c5d60004e6d98ed547778a2eb05d69f8abaf94999600b8e3e2f04123ebef4357069a2f43808c3b7706e9bc11f0f2513e1560037ca9e5514bd33f5fb4cb3dfd4721e7379aa3c2a765c676ebfbeca2b52a3a2a63130f74e8f7577c5a14fd7c651095f30bedb479e2f71d0d5bdd1eca3edc1059ac6aa2bef019c03c8d2612af93d83f3b6715a09713d5a195ad58cc", @generic="078ce108a2b7b03a769a9b0d0656433b73c5545494776592282a7cfc5f464e0884bec05431a266781445d4b7bf0b87ac481cb835483dd72e6d0ed54fb6de9aa42fabb9cfddc048ccc2e34e704ff88307a9b01d6298dc886add8d0688f4f323e46da505ff1f2f2f0ef1b5aed61d9dae97", @nested={0x353, 0x88, 0x0, 0x1, [@generic="7b63abb6545ac2785beee68129d25b7b746f33093c4d1df7829f55e126f1e0bca9c38fdfb43d171ec7cc96f183da7a5bcea9c00e045fa00c06cee8088dffe8c85b348bcaa70d957aa04b197e8e0d5e4b131e421fee485807f0a117518d1ea3f813c0e42700426cf1b5f7ad173f478787b83506a226b8001d00d6a9b7185c5d23f899ece869162a438cd01549cb7c9018a4a41bd93246c9c91ba099ec4368044787de7c0d955e4879edc50b6ce4d1257d22baa28b0e81aa85d9", @typed={0x8, 0x59, 0x0, 0x0, @uid=r5}, @generic="93ee72adc029f4e648cce9ea77dabc69fff41710a25b61689bc2967d049017f21dae50f98bfa8a563e6ec7fcd28006911f89f6feb2406a0fa0fe90163e7ca72531866329a20db97e1db225209d9200c432d738d739db103ac1b0e4266c4847a87bb42ac802ffdec495039709f12b81190b622b4658258e423698b8e69595b9df28f8a3a1ace9c7b0da9aeebfa44ddfd613cf81b974e64bac78b3f6a241", @typed={0x8, 0x58, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x3e, 0x0, 0x0, @pid=r8}, @typed={0x4, 0x49}, @generic="d9d29b910ecffc49d94e9d132fe3df0c4dc5fe8cd8e4344291a6e2df2c914d1e05f95dccb4bab3d7295850a38df8", @typed={0xda, 0x2a, 0x0, 0x0, @binary="7a32a6222cd5e54dafc2687013688ca66fc5bd38dd1c77217dd931620ec43c9cb1c21db075c5e82a6f26cb627b9732a3a915734f4dc72f4f09a171cff043722c4a7c48b846e1a78df19914303e739de611ee4713b95a9ef5b1e673c0e27a019876d1e31366700e01a3825b827f4a1ab0e9ee2e39f90935283a8acc717ea24356bec46b62a66460d9160a874913a14d53be2dd40bc2d5ff7772f898d497d41badc4227e30d0c3713c193b3b14769258d394263631216b3f80fce202366fc4528dd62d80c5eac8c3a46ca0930889cee081cf7ee1ad377f"}, @generic="8cef8bdcd9bd59d63c076d8fcc1d2c7dd13e72d335feff5425fa70df440b7716711b14f376681ead1801a1484abfb8c3ca16fce84eed4e7d19fddf8f96c5e6a14456dd0e0b325cfb6fb13132407b9b6ad9be74c08c711f5b21510732822beca8e598021bb84302932bc1cf27902eaa58730aacd231fa1c58051e77ba7ab4c15e39f7f22d37149050afada2c0ceb8a083bed98b550d0db0baa4728a9c2bbdcc60bb07e058f1969c5e3e43324d5683899c8a6367f489c52064847f4a3d7170d226d087d6198dc0325790c7accb434b0de988eab6"]}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@local}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x5}, 0x264c6aa8039da02e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x10080, 0x0) io_uring_enter(r9, 0x1, 0xffffffff, 0x3, &(0x7f00000002c0)={[0x3]}, 0x8) [ 923.206924][T13448] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 923.277031][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 923.292313][T13452] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:47:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x404001) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000140)=0xe5, 0x8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 923.484836][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 923.484847][ T27] audit: type=1804 audit(1593992878.277:4044): pid=13464 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/870/bus" dev="sda1" ino=16260 res=1 [ 923.516230][ T12] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 923.529600][ T12] usb 6-1: config 6 has no interface number 0 [ 923.542406][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 923.566357][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 923.590193][ T12] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 923.603065][ T12] usb 6-1: config 6 interface 92 has no altsetting 0 [ 923.646912][ T27] audit: type=1804 audit(1593992878.437:4045): pid=13467 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/610/bus" dev="sda1" ino=16382 res=1 [ 923.720390][ T27] audit: type=1804 audit(1593992878.517:4046): pid=13469 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/610/bus" dev="sda1" ino=16382 res=1 [ 923.767533][ T27] audit: type=1804 audit(1593992878.547:4047): pid=13467 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/610/bus" dev="sda1" ino=16382 res=1 [ 923.828701][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 923.839989][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.848934][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 923.873070][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 924.151352][T13424] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop5 [ 924.258557][ T12] option 6-1:6.92: GSM modem (1-port) converter detected [ 924.278688][ T12] usb 6-1: USB disconnect, device number 9 [ 924.291858][ T12] option 6-1:6.92: device disconnected 23:47:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000000c0)=0x3) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x1, 0x0, 0x3, 0x2, 0x3, 0xff81}, &(0x7f0000000140)=0x20) 23:47:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x61a440, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000041d0400000005000500"/42], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c924) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:47:59 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1d00) 23:47:59 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xffffffff000) [ 924.801432][T13502] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 924.810190][T13503] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 924.817970][T13501] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 924.837073][ T27] audit: type=1804 audit(1593992879.627:4048): pid=13504 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/871/bus" dev="sda1" ino=16382 res=1 [ 924.881683][ T27] audit: type=1804 audit(1593992879.637:4049): pid=13500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/611/bus" dev="sda1" ino=16261 res=1 23:47:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) 23:47:59 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 925.027042][ T12] usb 6-1: new high-speed USB device number 10 using dummy_hcd 23:47:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x9, 0x22000) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000400)=""/155, 0x9b}, &(0x7f0000000140)}, 0x20) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fanotify_mark(r4, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f00000004c0)=""/4096) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, {0x0, 0x0, 0x4}}, {{@in6=@dev}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000200)={0x6, 0x0, 0x2013, 0x1, 0x2, 0x36, 0x9, 0x73a88c6dae421273}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') [ 925.083269][T13518] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:48:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) [ 925.162975][T13521] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:48:00 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 925.267034][ T12] usb 6-1: Using ep0 maxpacket: 32 23:48:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x301}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x47}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x220008c0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) [ 925.312095][T13531] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 925.377785][T13535] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 925.394666][T13538] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 925.468916][ T12] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 925.480583][ T12] usb 6-1: config 6 has no interface number 0 [ 925.493995][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 925.519113][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 925.539549][ T12] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 925.540031][ T27] audit: type=1804 audit(1593992880.337:4050): pid=13543 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/611/bus" dev="sda1" ino=16261 res=1 [ 925.550355][ T12] usb 6-1: config 6 interface 92 has no altsetting 0 [ 925.637034][ T27] audit: type=1804 audit(1593992880.377:4051): pid=13544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/611/bus" dev="sda1" ino=16261 res=1 [ 925.711907][ T27] audit: type=1804 audit(1593992880.507:4052): pid=13548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/871/bus" dev="sda1" ino=16382 res=1 [ 925.789478][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 925.801120][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.809205][ T27] audit: type=1804 audit(1593992880.597:4053): pid=13551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/871/bus" dev="sda1" ino=16382 res=1 [ 925.849600][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 925.875226][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 926.154272][T13493] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop5 [ 926.298400][ T12] option 6-1:6.92: GSM modem (1-port) converter detected [ 926.314092][ T12] usb 6-1: USB disconnect, device number 10 [ 926.332777][ T12] option 6-1:6.92: device disconnected 23:48:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000000c0)=0x3) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f00000001c0)=""/191, &(0x7f0000000280)="93702658a4fad88818e15c20040248885cb3b606a309ab2b1b1ab32c3028e614964e3dcbb95c8d21f7be61934ebe9a34f5e19333df9b0dfb627de79f3034e5eb8e57d8a645", &(0x7f0000000400)="ac737502f148d1cf4ca4002f19c30f46e48478df15f0bbfd6247e0f9edaa579d7692bb0d036a1a0cce68a6ba688a13617423e4ed3165619db493e15c6d8fcc4714a55594eb96a250cbb23b5671fc7a", 0x9, r1, 0x4}, 0x38) 23:48:01 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1000000000000) 23:48:01 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:01 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1e00) [ 926.821616][T13579] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 926.825513][T13582] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:48:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 926.947898][T13586] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 926.963271][T13595] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) [ 927.088441][T13599] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 927.107068][ T9544] usb 6-1: new high-speed USB device number 11 using dummy_hcd 23:48:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$phonet(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x9, 0x4, 0x7}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fanotify_mark(r2, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x11a, 0x8, {}, {0xee01}, 0x6, 0xf5d}) ioprio_get$uid(0x0, r3) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(r5, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000200)={0x3}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, {}, {0x0, 0x0, 0x6b}}, {{@in6=@dev, 0x3}, 0x0, @in=@dev}}, 0xe8) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f0000000400)="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") ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)=0x3) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 23:48:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 927.289233][T13614] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 927.357074][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 927.568837][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 927.576921][ T9544] usb 6-1: config 6 has no interface number 0 [ 927.608793][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 927.640926][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 927.677034][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 927.717081][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 927.887409][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 927.896446][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.932743][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 927.987028][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 928.283489][T13588] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop5 [ 928.369265][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 928.384498][ T9544] usb 6-1: USB disconnect, device number 11 [ 928.396512][ T9544] option 6-1:6.92: device disconnected 23:48:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000000c0)=0x3) 23:48:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x65c001, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:03 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1f00) 23:48:03 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x4000000000000) [ 928.889187][T13663] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 928.927055][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 928.927067][ T27] audit: type=1804 audit(1593992883.717:4062): pid=13667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/873/bus" dev="sda1" ino=16372 res=1 [ 928.985300][T13665] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty}, 0x0, @in=@dev, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 929.087878][ T27] audit: type=1804 audit(1593992883.727:4063): pid=13666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/613/bus" dev="sda1" ino=16371 res=1 23:48:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 929.163514][T13683] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 929.177084][ T9544] usb 6-1: new high-speed USB device number 12 using dummy_hcd 23:48:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 929.233380][T13687] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 929.316477][T13693] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 929.331749][T13694] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 929.417046][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 929.627381][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 929.635457][ T9544] usb 6-1: config 6 has no interface number 0 [ 929.667059][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 929.697096][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 929.727060][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 929.766518][ T27] audit: type=1804 audit(1593992884.557:4064): pid=13706 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/873/bus" dev="sda1" ino=16372 res=1 [ 929.782258][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 929.808002][ T27] audit: type=1804 audit(1593992884.587:4065): pid=13708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/873/bus" dev="sda1" ino=16372 res=1 [ 929.914101][ T27] audit: type=1804 audit(1593992884.707:4066): pid=13709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/613/bus" dev="sda1" ino=16371 res=1 [ 930.007107][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 930.016602][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.025196][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 930.049338][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 930.358726][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 930.371072][ T9544] usb 6-1: USB disconnect, device number 12 [ 930.379357][ T9544] option 6-1:6.92: device disconnected 23:48:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000000c0)=0x3) 23:48:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x8000, 0x3, &(0x7f0000000280)=[{&(0x7f00000001c0)="fb45ccd802701f47ed4e9bb723ce717322e45b1f5f4dfa8975f82fa269d53aa967c7a0de5f852dee636de3fdd754857aa2af04801945ef9fb6c3a5236a1a899efb65353b1cb7fd93b0ac17bfbf425ae3229df62c22de335870dcba", 0x5b, 0xffffffffffffffff}, {&(0x7f0000000240)="b37859b90267fcfd300268e7a3562017a4f7825991635b4f52232403857019004e526feb44e26df4555f7096ecaeb7b3069f127dbc1124737c67", 0x3a, 0xd06}, {&(0x7f0000000400)="2d4dc3fce2d3abfee20eef8f5ed614d594c7c3bdab0fcc6e6336c1ff1cede723416e06f4640511eac29cc8c70bbfe2b629b9c82b34efd320be95f1bca607287b17d0a5b7022ffea92de42b99bef3b06de4069b7640d68544e7aa10d5199c34fd53e70efc5fbc56e69c38d171f1095aa6299c213fed7dc8fcb633c83f1f88d01f9d3f01b9fbadd7acef90364f52c8325351407bc6e8b06c48218e19f4fb9337b3c35fe24e0d952a", 0xa7, 0x86}], 0x4000, &(0x7f00000004c0)={[{@rodir='rodir'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@utf8='utf8=1'}, {@shortname_win95='shortname=win95'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '#{((}'}}, {@subj_user={'subj_user', 0x3d, ')+-('}}]}) 23:48:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:05 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2000) 23:48:05 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x10000000000000) 23:48:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 930.864749][T13731] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 930.879210][T13732] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:48:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 930.947053][ T27] audit: type=1804 audit(1593992885.737:4067): pid=13740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/874/bus" dev="sda1" ino=16292 res=1 [ 930.999501][T13745] FAT-fs (loop3): Unrecognized mount option "smackfstransmute=#{((}" or missing value [ 931.033808][ T27] audit: type=1804 audit(1593992885.737:4068): pid=13737 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/614/bus" dev="sda1" ino=16293 res=1 23:48:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fanotify_mark(r5, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000140)) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 931.114520][T13754] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 931.137038][ T9544] usb 6-1: new high-speed USB device number 13 using dummy_hcd 23:48:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 931.291639][T13764] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 931.299681][T13763] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 931.377034][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 931.439328][T13772] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 931.577341][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 931.585419][ T9544] usb 6-1: config 6 has no interface number 0 [ 931.608342][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 931.647499][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 931.704612][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 931.738877][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 931.785438][ T27] audit: type=1804 audit(1593992886.577:4069): pid=13779 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/874/bus" dev="sda1" ino=16292 res=1 [ 931.865876][ T27] audit: type=1804 audit(1593992886.657:4070): pid=13780 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/874/bus" dev="sda1" ino=16292 res=1 [ 931.911451][ T27] audit: type=1804 audit(1593992886.687:4071): pid=13779 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/874/bus" dev="sda1" ino=16292 res=1 [ 931.948785][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 931.962403][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.981446][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 932.031830][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 932.378482][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 932.398256][ T9544] usb 6-1: USB disconnect, device number 13 [ 932.417319][ T9544] option 6-1:6.92: device disconnected 23:48:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) 23:48:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:07 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xf0ffffff0f0000) 23:48:07 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2008) 23:48:07 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:07 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 932.956264][T13807] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 932.965467][T13809] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 933.111003][T13826] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 933.147870][T13828] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:48:08 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 933.200220][ T5] usb 6-1: new high-speed USB device number 14 using dummy_hcd 23:48:08 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) uname(&(0x7f00000001c0)=""/207) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0xfff8, 0x3}, &(0x7f0000000140)=0x90) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0x5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 933.408251][T13840] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 933.449994][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 933.657349][ T5] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 933.665430][ T5] usb 6-1: config 6 has no interface number 0 [ 933.687048][ T5] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 933.717027][ T5] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 933.739101][ T5] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 933.767116][ T5] usb 6-1: config 6 interface 92 has no altsetting 0 [ 933.937082][ T5] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 933.948049][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.956081][ T5] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 933.988737][ T5] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 934.308443][ T5] option 6-1:6.92: GSM modem (1-port) converter detected [ 934.319521][ T5] usb 6-1: USB disconnect, device number 14 [ 934.326305][ T5] option 6-1:6.92: device disconnected 23:48:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) fcntl$dupfd(r2, 0x0, r2) 23:48:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x58, r5, 0x1, 0x0, 0x0, {0x34}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd0, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x49b5}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7ff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44811}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:09 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:09 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2100) 23:48:09 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x100000000000000) 23:48:09 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 934.804800][T13874] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 934.825823][T13875] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 934.874991][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 934.875003][ T27] audit: type=1804 audit(1593992889.667:4080): pid=13880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/616/bus" dev="sda1" ino=16292 res=1 23:48:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:09 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) creat(&(0x7f0000000140)='./file0\x00', 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 934.995510][ T27] audit: type=1804 audit(1593992889.667:4081): pid=13881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/876/bus" dev="sda1" ino=16293 res=1 [ 935.025681][T13894] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 935.057347][T13899] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 935.117043][T26642] usb 6-1: new high-speed USB device number 15 using dummy_hcd 23:48:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 935.204371][T13907] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 935.357018][T26642] usb 6-1: Using ep0 maxpacket: 32 [ 935.557394][T26642] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 935.572332][T26642] usb 6-1: config 6 has no interface number 0 [ 935.586202][T26642] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 935.610534][T26642] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 935.634863][T26642] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 935.647348][T26642] usb 6-1: config 6 interface 92 has no altsetting 0 [ 935.692628][ T27] audit: type=1804 audit(1593992890.487:4082): pid=13915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/616/bus" dev="sda1" ino=16292 res=1 [ 935.750711][ T27] audit: type=1804 audit(1593992890.547:4083): pid=13916 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/616/bus" dev="sda1" ino=16292 res=1 [ 935.796015][ T27] audit: type=1804 audit(1593992890.547:4084): pid=13915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/616/bus" dev="sda1" ino=16292 res=1 [ 935.820462][T26642] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 935.833961][T26642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.850995][T26642] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 935.899446][T26642] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 935.994593][ T27] audit: type=1804 audit(1593992890.787:4085): pid=13921 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/876/bus" dev="sda1" ino=16293 res=1 [ 936.248577][T26642] option 6-1:6.92: GSM modem (1-port) converter detected [ 936.259117][T26642] usb 6-1: USB disconnect, device number 15 [ 936.266296][T26642] option 6-1:6.92: device disconnected 23:48:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x2, 0x0, 0x4e23, 0x0, 0x0, 0xa0}, {0x0, 0x0, 0x10}}, {{@in6=@mcast2, 0x0, 0xff}, 0x0, @in=@dev}}, 0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000029c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002200)={0x758, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7, 0x6, 0x8, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x4, 0x3f, 0x9, 0x88f4}]}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x9, 0x7, 0xe1}, {0x8, 0x2, 0x40, 0x3}, {0x1ff, 0x6, 0x40, 0x5}, {0x8, 0x0, 0x2, 0xdf6}, {0x667, 0xc1, 0x4, 0x2}, {0xdc28, 0xd4, 0xb2, 0x5}, {0xff, 0xff, 0x1, 0x205}, {0x8d, 0x3, 0x7f, 0x1ff}, {0x1, 0x5, 0x6, 0x2}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3d}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x751595fa}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x1c, 0x2, 0x40, 0x5}, {0x2, 0x7, 0x3, 0xc2c8}, {0x54, 0x1, 0x8, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x758}}, 0x44001) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fanotify_mark(r9, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 23:48:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:11 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2200) 23:48:11 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x180000200000000) [ 936.759616][T13941] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 936.783436][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:48:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 936.811494][ T27] audit: type=1804 audit(1593992891.607:4086): pid=13947 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/877/bus" dev="sda1" ino=16293 res=1 [ 936.850978][T13946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 936.869966][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 936.947827][ T27] audit: type=1804 audit(1593992891.647:4087): pid=13942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/617/bus" dev="sda1" ino=16371 res=1 [ 936.974904][T13996] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:48:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fanotify_mark(r2, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(r4, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e22, 0x695, @remote, 0x7}, {0xa, 0x4e22, 0x7fff82, @mcast2, 0xfffffffa}, 0x9, [0x7ed8a3c0, 0x9, 0xad4, 0x6, 0x61f, 0x2, 0x2, 0x201]}, 0x5c) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r3, r6}) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}, {}, {}, 0x6}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="ce9e351bb83c00004030", 0xa}], 0x410, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f00000000c0)={0x8, 0xfffffffffffffffd, 0x1ff}) [ 936.995484][ T27] audit: type=1804 audit(1593992891.647:4088): pid=13950 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/617/bus" dev="sda1" ino=16371 res=1 [ 937.024837][ T27] audit: type=1804 audit(1593992891.657:4089): pid=13950 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/617/bus" dev="sda1" ino=16371 res=1 [ 937.058625][ T9544] usb 6-1: new high-speed USB device number 16 using dummy_hcd 23:48:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 937.139936][T14005] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) [ 937.286543][T14015] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) [ 937.307012][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 937.517100][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 937.525183][ T9544] usb 6-1: config 6 has no interface number 0 [ 937.569855][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 937.614226][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 937.642727][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 937.662158][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 937.828413][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 937.847028][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.855017][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 937.900720][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 938.248591][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 938.257819][ T9544] usb 6-1: USB disconnect, device number 16 [ 938.264868][ T9544] option 6-1:6.92: device disconnected 23:48:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:48:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x21a001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)={0x14, r4, 0xc8ef0a4335e6829f, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2b}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x841) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x140, r4, 0x4da9994674aee669, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc3ae}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:13 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x200000000000000) 23:48:13 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2300) 23:48:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:48:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 938.829361][T14049] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x1000, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:48:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 938.945711][T14066] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 938.988764][T14068] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 23:48:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000000000000100000014000900ff01000000000000000000e0ff00000106000a004e2100000d0002000a000000"], 0x38}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="530000000a487eecd0b886eee997d62837433d8dee1340e9c4ecdca422e6fd27fd8a8464480eba3e99d08f58905e15cd48cfdd5d28e1d6d8c1b4112e80a38b2f625554e97a84ab7f1cf07d68e3d07c9d5185e537c027f8e439de9eb2a01dbc39254ac96f5d7e46d79f9fc8b9720808f834973a74a53cccf3021d570fb1ccc7a88876308d55ee5ab684dec64b6394454e237ae011422a74a7fa98e28a0855fd4948063537dce88d49f50f9ba16166cd526a6a51f4b0bf0b9fa84748079754d63f2628b1922c8623546ab2a964da047818480a4f70434f2619", @ANYRES16=r4, @ANYBLOB="01000000000000000000090000003c0003800800010000000000140002006970766c616e3000000000000000000008000300000000001400060000050000000000000000000000000001"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6ed77585a9fef8ce}, 0x40) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@dev}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'dummy0\x00', 0x4}, 0x18) 23:48:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 939.159085][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 939.209810][T14085] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 939.232474][T14082] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 939.345264][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 939.447037][ T9544] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 939.697064][ T9544] usb 6-1: Using ep0 maxpacket: 32 23:48:14 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x204000000000000) [ 939.897126][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 939.915079][ T9544] usb 6-1: config 6 has no interface number 0 [ 939.939782][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 939.974070][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 940.032437][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 940.032448][ T27] audit: type=1804 audit(1593992894.827:4096): pid=14112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/878/bus" dev="sda1" ino=16292 res=1 23:48:14 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2400) 23:48:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x840400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fanotify_mark(r4, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000240)={r1}) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="0100e0ef69aa779932392f74bd52c40001a69fa57cc1b1f73b78b721ba22a3c775221eb4cd1571c72167bd23befe43f69575ae0000000000000000000000000000000000001700000000", @ANYRES16=r6, @ANYBLOB="90002cbd2abc07391d7000fbdbdf250400000005000100010000001400020000000000000000000000952e251bd830ae0000400000010800050000000000080006018000000000000000050001000000004607005700000000000000000000000000000000f3ff00000000"], 0x3}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000054) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x30, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x50040}, 0x80) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000480)) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x20) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="51ffc894d8c1e9d4a56804b0352297c5b43889a5ed48f79c70f93c7b6feb8e14c50fc133af139799f7207371d344ea729a947bdd130449089b88da9d308f9917d2e59eae7c152657e3ca5db678f361b680214abe3d29b3e1a3edad6af780148fc72e7cce636526da1a98cf58bd3ebac5ec288849ade3d5aa44c2c498b9b52889215846306933cc5037f2a6d3a956a8bcf7c5f4addc11d39aa1470de98a139e7d12fb0e5bc3bfa510044302bc34aad487bbc307cf27832b06f7917baf746cc0", 0xbf, 0x401}], 0xc102, 0x0) [ 940.079004][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 940.119040][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 23:48:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 940.146215][ T27] audit: type=1804 audit(1593992894.827:4097): pid=14114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/878/bus" dev="sda1" ino=16292 res=1 [ 940.185486][T14121] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4 23:48:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 940.250548][ T27] audit: type=1804 audit(1593992895.047:4098): pid=14124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/879/bus" dev="sda1" ino=16384 res=1 23:48:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 940.357071][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 940.375635][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.385918][T14131] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 940.441309][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 940.497047][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 940.599277][T14135] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4 [ 940.626127][T14140] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 940.848493][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 940.879427][ T9544] usb 6-1: USB disconnect, device number 17 [ 940.901580][ T9544] option 6-1:6.92: device disconnected [ 940.958741][ T27] audit: type=1804 audit(1593992895.757:4099): pid=14154 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/879/bus" dev="sda1" ino=16384 res=1 [ 941.042274][ T27] audit: type=1804 audit(1593992895.777:4100): pid=14160 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/879/bus" dev="sda1" ino=16384 res=1 [ 941.087111][ T27] audit: type=1804 audit(1593992895.857:4101): pid=14162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/619/bus" dev="sda1" ino=16297 res=1 [ 941.109964][ T27] audit: type=1804 audit(1593992895.857:4102): pid=14164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/619/bus" dev="sda1" ino=16297 res=1 23:48:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 23:48:16 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2500) 23:48:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x4, 0x2}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:16 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x300000000000000) 23:48:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 941.375098][T14174] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 941.389734][T14176] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4 [ 941.417014][ T27] audit: type=1804 audit(1593992896.207:4103): pid=14175 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/880/bus" dev="sda1" ino=16293 res=1 [ 941.473655][ T27] audit: type=1804 audit(1593992896.207:4104): pid=14173 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/620/bus" dev="sda1" ino=16297 res=1 23:48:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) 23:48:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x3, "cefad3"}, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@remote, 0x4e21, 0x3c10, 0x4e21, 0x187, 0x2, 0x0, 0x0, 0x4, 0x0, r8}, {0x3, 0x0, 0x8, 0x7fffffff, 0x10000, 0xfff, 0x6, 0x100000000}, {0xfffffffffffffff9, 0x802, 0x985, 0x6}, 0x6eb4, 0x0, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d6, 0x2b}, 0x2, @in6=@private2, 0x3503, 0x1, 0x2, 0x20, 0x9, 0x6, 0x51e9}}, 0xe8) 23:48:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 941.647014][ T12] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 941.651165][T14191] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 941.729734][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:48:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 941.776789][T14191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 941.846119][T14236] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 941.897003][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 942.137438][ T12] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 942.147822][ T12] usb 6-1: config 6 has no interface number 0 [ 942.167976][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 942.179403][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 942.191064][ T12] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 942.202226][ T12] usb 6-1: config 6 interface 92 has no altsetting 0 [ 942.257615][ T27] audit: type=1804 audit(1593992897.057:4105): pid=14250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/620/bus" dev="sda1" ino=16297 res=1 [ 942.389002][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 942.402575][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.420309][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 942.472862][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 942.778493][ T12] option 6-1:6.92: GSM modem (1-port) converter detected [ 942.802945][ T12] usb 6-1: USB disconnect, device number 18 [ 942.833598][ T12] option 6-1:6.92: device disconnected 23:48:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) 23:48:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r8, 0x531, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x30, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'geneve1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4045) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@private1, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x90, 0x20, 0x0, r4}, {0x0, 0x0, 0x4, 0x0, 0xfff}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@broadcast}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3}}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) 23:48:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:18 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2600) 23:48:18 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x400000000000000) 23:48:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 943.311743][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:48:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 943.358894][T14280] 8021q: adding VLAN 0 to HW filter on device bond4 23:48:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 943.568944][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 943.587025][T26642] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 943.605651][T14280] 8021q: adding VLAN 0 to HW filter on device bond5 23:48:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x102}}, {{@in6=@dev}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r1 = syz_genetlink_get_family_id$gtp(0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="6e0100007d00000005"], 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup3(r3, r2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fanotify_mark(r4, 0x6e, 0x40001030, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) 23:48:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) 23:48:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 943.791825][T14384] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 943.839510][T26642] usb 6-1: Using ep0 maxpacket: 32 23:48:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 944.037407][T26642] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 944.050470][T26642] usb 6-1: config 6 has no interface number 0 [ 944.063187][T26642] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 944.103177][T26642] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 944.127666][T26642] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 944.151245][T26642] usb 6-1: config 6 interface 92 has no altsetting 0 [ 944.328514][T26642] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 944.347682][T26642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.355741][T26642] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 944.406110][T26642] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 944.718559][T26642] option 6-1:6.92: GSM modem (1-port) converter detected [ 944.726946][T26642] usb 6-1: USB disconnect, device number 19 [ 944.733957][T26642] option 6-1:6.92: device disconnected 23:48:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) 23:48:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x62b, 0x6}}, 0x30) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:20 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2700) 23:48:20 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x500000000000000) 23:48:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 945.291321][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 945.291333][ T27] audit: type=1804 audit(1593992900.087:4116): pid=14439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/622/bus" dev="sda1" ino=16302 res=1 23:48:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 945.322653][ T27] audit: type=1804 audit(1593992900.087:4117): pid=14441 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/882/bus" dev="sda1" ino=16382 res=1 23:48:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) 23:48:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 945.387063][T14452] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$netlink(0x10, 0x3, 0x13) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='veth0_to_hsr\x00') getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x3c}}, 0xe8) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x4010, r1, 0x6000) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 945.507097][ T9544] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 945.571200][T14463] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 945.757008][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 945.957400][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 945.981425][ T9544] usb 6-1: config 6 has no interface number 0 [ 946.003476][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 946.036918][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 946.057075][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 946.079810][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 946.123980][ T27] audit: type=1804 audit(1593992900.917:4118): pid=14482 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/882/bus" dev="sda1" ino=16382 res=1 [ 946.171061][ T27] audit: type=1804 audit(1593992900.967:4119): pid=14483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/622/bus" dev="sda1" ino=16302 res=1 [ 946.215137][ T27] audit: type=1804 audit(1593992901.007:4120): pid=14484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/622/bus" dev="sda1" ino=16302 res=1 [ 946.241916][ T27] audit: type=1804 audit(1593992901.037:4121): pid=14483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/622/bus" dev="sda1" ino=16302 res=1 [ 946.277037][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 946.286082][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.294183][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 946.317998][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 946.628738][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 946.639993][ T9544] usb 6-1: USB disconnect, device number 20 [ 946.646808][ T9544] option 6-1:6.92: device disconnected 23:48:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) 23:48:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}, {0x0, 0x0, 0x12}, {}, 0x0, 0x6e6bbb}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:21 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2800) 23:48:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:21 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x600000000000000) 23:48:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 947.168975][T14511] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) [ 947.197083][ T27] audit: type=1804 audit(1593992901.987:4122): pid=14508 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/623/bus" dev="sda1" ino=16327 res=1 [ 947.275563][ T27] audit: type=1804 audit(1593992901.997:4123): pid=14510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/883/bus" dev="sda1" ino=16297 res=1 [ 947.307237][T14525] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x6) r4 = dup2(r1, r0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000001c0)={0xd7, "eeb75e084ea915eb8a0fe137704cbf4a27ba8208a7574a8eaff610638bc34422648b9c6321a8e54485e9a0c6745bba31a1bfdbb1652196358c930e54dbdc42a8"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{@in6=@dev}, 0xa, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) 23:48:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 947.457007][T26642] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 947.459950][T14538] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) [ 947.659422][T14550] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 947.707070][T26642] usb 6-1: Using ep0 maxpacket: 32 [ 947.909042][T26642] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 947.939000][T26642] usb 6-1: config 6 has no interface number 0 [ 947.945103][T26642] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 947.981974][ T27] audit: type=1804 audit(1593992902.777:4124): pid=14562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/883/bus" dev="sda1" ino=16297 res=1 [ 948.007814][T26642] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 948.047242][T26642] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 948.084019][T26642] usb 6-1: config 6 interface 92 has no altsetting 0 23:48:22 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2900) [ 948.122617][ T27] audit: type=1804 audit(1593992902.917:4125): pid=14563 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/883/bus" dev="sda1" ino=16297 res=1 [ 948.308672][T26642] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 948.322746][T26642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.341935][T26642] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 948.393068][T26642] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 948.721295][T26642] option 6-1:6.92: GSM modem (1-port) converter detected [ 948.758633][T26642] usb 6-1: USB disconnect, device number 21 [ 948.765331][T26642] option 6-1:6.92: device disconnected 23:48:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) 23:48:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@dev}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:23 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x604000000000000) 23:48:23 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2a00) 23:48:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 949.229022][T14596] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000000000000100000054000900ff0100147cd8403fc777a70000000000000000020000000106000a004e29fc920f8378210000050002000a000000"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x58, r4, 0x1, 0x0, 0x0, {0x34}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r4, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400d1}, 0x4000080) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) 23:48:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 949.392738][T14613] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 23:48:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) 23:48:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 949.452613][T14613] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 949.493468][T14613] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 949.517015][ T5] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 949.767005][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 949.977025][ T5] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 949.990041][ T5] usb 6-1: config 6 has no interface number 0 [ 950.010981][ T5] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 950.030102][ T5] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 950.043151][ T5] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 950.053923][ T5] usb 6-1: config 6 interface 92 has no altsetting 0 [ 950.247168][ T5] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 950.256461][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.264668][ T5] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 950.287993][ T5] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 950.618479][ T5] option 6-1:6.92: GSM modem (1-port) converter detected [ 950.628987][ T5] usb 6-1: USB disconnect, device number 22 [ 950.636146][ T5] option 6-1:6.92: device disconnected 23:48:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) 23:48:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet(0x10, 0x3, 0x0) fcntl$setlease(r2, 0x400, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) 23:48:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:25 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x700000000000000) 23:48:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:25 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2b00) 23:48:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 951.137320][T14666] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) [ 951.157015][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 951.157025][ T27] audit: type=1804 audit(1593992905.947:4134): pid=14662 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/886/bus" dev="sda1" ino=16257 res=1 23:48:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 951.206947][ T27] audit: type=1804 audit(1593992905.987:4135): pid=14663 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/625/bus" dev="sda1" ino=16384 res=1 23:48:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) 23:48:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 951.308019][T14680] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 23:48:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 23:48:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) [ 951.417032][ T9544] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 951.490961][T14694] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) [ 951.620358][T14703] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 951.667016][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 951.867354][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 951.881891][ T9544] usb 6-1: config 6 has no interface number 0 [ 951.894705][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 951.929891][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 951.954398][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 952.000728][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 952.136726][ T27] audit: type=1804 audit(1593992906.927:4136): pid=14720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/886/bus" dev="sda1" ino=16257 res=1 [ 952.176392][ T27] audit: type=1804 audit(1593992906.967:4137): pid=14721 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/625/bus" dev="sda1" ino=16384 res=1 [ 952.217145][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 952.226165][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.236813][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 952.262437][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 23:48:27 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x800000000000000) [ 952.548753][ T27] audit: type=1804 audit(1593992907.347:4138): pid=14726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/626/bus" dev="sda1" ino=16384 res=1 [ 952.588879][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 952.607077][ T9544] usb 6-1: USB disconnect, device number 23 [ 952.623260][ T9544] option 6-1:6.92: device disconnected [ 952.859271][ T27] audit: type=1804 audit(1593992907.657:4139): pid=14742 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/626/bus" dev="sda1" ino=16384 res=1 23:48:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) 23:48:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev={0xfe, 0x80, [], 0x23}}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:27 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2c00) 23:48:27 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x820000000000000) 23:48:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c5"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 953.091311][T14751] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 953.147016][ T27] audit: type=1804 audit(1593992907.937:4140): pid=14756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/627/bus" dev="sda1" ino=16310 res=1 [ 953.211473][ T27] audit: type=1804 audit(1593992907.947:4141): pid=14755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/887/bus" dev="sda1" ino=16307 res=1 [ 953.250693][T14765] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x58, r5, 0x1, 0x0, 0x0, {0x34}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x8c, r5, 0x8, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c080) 23:48:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) 23:48:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 953.371753][T14772] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 953.387013][ T9544] usb 6-1: new high-speed USB device number 24 using dummy_hcd 23:48:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b57"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) [ 953.489357][T14780] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 953.627029][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 953.827312][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 953.835393][ T9544] usb 6-1: config 6 has no interface number 0 [ 953.880923][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 953.913605][ T27] audit: type=1804 audit(1593992908.707:4142): pid=14795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/627/bus" dev="sda1" ino=16310 res=1 [ 953.947103][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 953.974489][ T27] audit: type=1804 audit(1593992908.707:4143): pid=14797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/627/bus" dev="sda1" ino=16310 res=1 [ 953.987171][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 954.013823][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 954.177099][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 954.186146][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.195037][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 954.219122][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 954.528485][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 954.541658][ T9544] usb 6-1: USB disconnect, device number 24 [ 954.548449][ T9544] option 6-1:6.92: device disconnected 23:48:29 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x20000000, 0x1, 0x39}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) 23:48:29 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x900000000000000) 23:48:29 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2d00) 23:48:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 955.051968][T14822] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) [ 955.204893][T14838] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fanotify_mark(r5, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f00000000c0)={0x2, "7d107d326cac13313d7873ae630480d9a8306f689a1711a6df1d4395c8c57980"}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600000000008020ef00000000", @ANYRES32=r9, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) [ 955.337005][ T9544] usb 6-1: new high-speed USB device number 25 using dummy_hcd 23:48:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 955.394050][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 955.439692][T14851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 955.512845][T14851] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 955.570841][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 955.582085][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 955.596017][T14890] bond7 (uninitialized): Released all slaves [ 955.818794][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 955.826934][ T9544] usb 6-1: config 6 has no interface number 0 [ 955.847008][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 955.866985][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 955.898192][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 955.918564][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 956.078291][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 956.088781][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.096758][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 956.122096][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 956.438886][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 956.460103][ T9544] usb 6-1: USB disconnect, device number 25 [ 956.478932][ T9544] option 6-1:6.92: device disconnected 23:48:31 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) 23:48:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0={0xfc, 0x0, [], 0x1}, @in=@multicast2, 0x0, 0x0, 0x20, 0x0, 0xa}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1ace}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@local}, 0x0, @in6=@empty, 0x3502, 0x4}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/185, 0xb9) 23:48:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:31 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2e00) 23:48:31 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xa00000000000000) 23:48:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 956.948150][T14930] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 957.003529][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 957.003579][ T27] audit: type=1804 audit(1593992911.797:4151): pid=14935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/889/bus" dev="sda1" ino=16302 res=1 [ 957.082759][T14942] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 23:48:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) 23:48:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 957.207603][ T27] audit: type=1804 audit(1593992911.827:4152): pid=14933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/629/bus" dev="sda1" ino=16307 res=1 [ 957.236808][ T9544] usb 6-1: new high-speed USB device number 26 using dummy_hcd 23:48:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) 23:48:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x0, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 957.463316][T14960] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) 23:48:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) [ 957.506989][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 957.591086][T14966] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) [ 957.737377][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 957.762440][ T9544] usb 6-1: config 6 has no interface number 0 [ 957.782828][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 957.817203][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 957.851534][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 957.886639][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 958.077354][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 958.095496][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.121825][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 958.197665][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 958.241123][ T27] audit: type=1804 audit(1593992913.037:4153): pid=14974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/889/bus" dev="sda1" ino=16302 res=1 [ 958.301521][ T27] audit: type=1804 audit(1593992913.057:4154): pid=14975 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/889/bus" dev="sda1" ino=16302 res=1 [ 958.448673][ T27] audit: type=1804 audit(1593992913.247:4155): pid=14980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/629/bus" dev="sda1" ino=16307 res=1 [ 958.588868][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 958.601638][ T9544] usb 6-1: USB disconnect, device number 26 [ 958.616152][ T9544] option 6-1:6.92: device disconnected 23:48:33 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 23:48:33 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2f00) 23:48:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) 23:48:33 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xb00000000000000) 23:48:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000900)='/dev/full\x00', 0x280300, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="0100e0ef69aa779932392f74bd52c40001a69fa57cc1b1f73b78b721ba22a3c775221eb4cd1571c72167bd23befe43f69575ae0000000000000000000000000000000000001700000000", @ANYRES16=r3, @ANYBLOB="90002cbd2abc07391d7000fbdbdf250400000005000100010000001400020000000000000000000000952e251bd830ae0000400000010800050000000000080006018000000000000000050001000000004607005700000000000000000000000000000000f3ff00000000"], 0x3}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000054) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r3, 0x124, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4044) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x5, &(0x7f0000000640)=[{&(0x7f00000001c0)="b8f3502d6f66232fc49489b0d3d4891b0c8e60b490afcf6939cfb8c11ef42914a5e9e9135d6471f0777766bc6608300cb82fe0e4710879d80863e6710432a5c683923cbeb4ab68ed619b03de6f84e22c83b4c6e5941b3f3f40ce184411170d5d3c828cda7958226e81d1aaa9c26b01a770de12e503d99a5e9126fdcc93856329c8229713e92c2ae02f9423c22d450708a8c09f925d7a957a1ca6b043aa17a304377610186637557e3ebf0193bfc3971301b8760f3f6baeae26106f66a84b17b70b0e03e372751e", 0xc7, 0x7}, {&(0x7f00000002c0)="a41514ecff46154f31f4ac94ac", 0xd, 0x8001}, {&(0x7f0000000400)="2dc22e2562412c39909438b16f852b40f7e0e8e072da365f556734678790e391a404dea8b474740539c974a1ada0663c0663288a6adc9de99913f56120e0240b59f563a2e5d332de995c713d44cb82b8a27f6356d16fd1451acbdac7dff8c9ddb39e20ae21c64dd4b018f8cc10bd1da61ce0452aecd02971de2c23a3fc11b0e559b059d95ee5c7979a1f33", 0x8b, 0x10000}, {&(0x7f00000004c0)="a2088cc813f804385de79551ce8a2a76fd4db5774aa30396957536c95062a0d8433315fd6a5db46fa3c0d245717abd2b43e12031adc1d929b2c7e3048d50dfbced8cbead11f97172489adba3eea3af012ba7315e1927fb66f7a2544a9a71c6f0595fd28aa8bdea8469e75d109d59d5168e17e41404d7beb174815163111cf33220f206c99b7db5dce1b46f29182b3ef1dcd5d3a15e5f7a5621654dfa2bbe1bc28eca9fb4b740a6ea9c93548bef57228dc8", 0xb1, 0x38000000000000}, {&(0x7f0000000580)="0596a207d1177439640b3dbc36eae18a8ece90a057850f4555987141d8a943b158b54d5a1bf451b4292d4b7ae0b1c060eb8d0d3f100abe7681fc4667482f315dc64095291a93a916a6e68bc433d8365ffc3ce233c6302908c4f3d14404bd673ecb0759476232d9e3bfb9a9f0698629d233eb74b94f0273471284814c8a382469a56661b1b9fdf95c263249ba1e16ac3ea25c5cb0be608e9835811912a1e1505a80", 0xa1, 0x5a}], 0x1000000, &(0x7f00000006c0)={[{@integrity='integrity'}, {@resize='resize'}, {@resize='resize'}, {@uid={'uid', 0x3d, r1}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@integrity='integrity'}, {@integrity='integrity'}, {@resize='resize'}, {@noquota='noquota'}, {@resize_size={'resize', 0x3d, 0x2}}], [{@subj_user={'subj_user', 0x3d, 'bfs\x00'}}, {@fsname={'fsname', 0x3d, ']\xab&'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@seclabel='seclabel'}, {@subj_role={'subj_role'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0xa0, 0x5, "ff083862c38c4e549f6e481034052aa326072c12c25aa71fc72ee9d053c444d335ad9d95f28ecc5861461b510eea7a78800f523038ad79a17bf537e15c749a27db7cb80b0fbc199ca545bd2ad1fe2f229d0c4764bc7f04843d6834ea040b5caddc9f2003b6c7215e1b5664fd44e05b628759ca2fbbc99ecbb39b4eeb1df7e98518ccaf3ed91834005aa4b8ec0205c8d828bda7297342f2f4"}, &(0x7f00000008c0), 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x7}}, {{@in=@multicast1}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) [ 959.123754][T15001] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) [ 959.168935][ T27] audit: type=1804 audit(1593992913.967:4156): pid=15005 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/890/bus" dev="sda1" ino=16293 res=1 23:48:34 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 959.217263][ T27] audit: type=1804 audit(1593992913.967:4157): pid=15002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/630/bus" dev="sda1" ino=16297 res=1 23:48:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 959.280325][T15019] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 959.367347][T15028] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 959.398420][ T5027] usb 6-1: new high-speed USB device number 27 using dummy_hcd 23:48:34 executing program 3: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 959.525982][T15036] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 959.566982][ T9544] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 959.613969][T15041] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 959.638818][ T5027] usb 6-1: Using ep0 maxpacket: 32 [ 959.837007][ T9544] usb 5-1: Using ep0 maxpacket: 32 [ 959.838774][ T5027] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 959.858654][ T5027] usb 6-1: config 6 has no interface number 0 [ 959.871583][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 959.895380][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 959.920783][ T5027] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 959.945303][ T5027] usb 6-1: config 6 interface 92 has no altsetting 0 [ 960.076945][ T27] audit: type=1804 audit(1593992914.867:4158): pid=15010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/630/bus" dev="sda1" ino=16297 res=1 [ 960.099841][ T9544] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 960.116051][ T9544] usb 5-1: config 6 has no interface number 0 [ 960.126487][ T9544] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 960.135887][ T5027] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 960.137398][ T27] audit: type=1804 audit(1593992914.867:4159): pid=15051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/890/bus" dev="sda1" ino=16293 res=1 [ 960.146358][ T5027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.146380][ T5027] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 960.169133][ T9544] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 960.212461][ T27] audit: type=1804 audit(1593992914.867:4160): pid=15052 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/890/bus" dev="sda1" ino=16293 res=1 [ 960.233437][ T5027] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 960.238636][ T9544] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 960.345947][ T9544] usb 5-1: config 6 interface 92 has no altsetting 0 [ 960.538283][ T9544] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 960.547327][ T9544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.555295][ T9544] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 960.558505][ T5027] option 6-1:6.92: GSM modem (1-port) converter detected [ 960.578887][ T9544] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 960.595606][ T5027] usb 6-1: USB disconnect, device number 27 [ 960.629687][ T5027] option 6-1:6.92: device disconnected [ 960.928404][ T9544] option 5-1:6.92: GSM modem (1-port) converter detected [ 960.939095][ T9544] usb 5-1: USB disconnect, device number 3 [ 960.946086][ T9544] option 5-1:6.92: device disconnected 23:48:35 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:48:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) fchdir(r0) 23:48:35 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3000) 23:48:35 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xc00000000000000) 23:48:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 961.086723][T15091] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000007d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55500020000a077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b810100000004859d928365afea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf500014d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f1a519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed56"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 961.178029][T15101] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 961.338441][ T5027] usb 6-1: new high-speed USB device number 28 using dummy_hcd 23:48:36 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 23:48:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) [ 961.577060][ T5027] usb 6-1: Using ep0 maxpacket: 32 23:48:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) [ 961.770458][ T9544] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 961.777447][ T5027] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 961.789794][ T5027] usb 6-1: config 6 has no interface number 0 [ 961.808879][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 961.834009][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 961.876569][ T5027] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 961.914275][ T5027] usb 6-1: config 6 interface 92 has no altsetting 0 [ 962.023694][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 962.023749][ T27] audit: type=1804 audit(1593992916.817:4165): pid=15125 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/891/bus" dev="sda1" ino=16384 res=1 [ 962.057114][ T9544] usb 5-1: Using ep0 maxpacket: 32 [ 962.100064][ T27] audit: type=1804 audit(1593992916.897:4166): pid=15126 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/891/bus" dev="sda1" ino=16384 res=1 [ 962.109027][ T5027] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 962.124787][ T27] audit: type=1804 audit(1593992916.927:4167): pid=15126 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/891/bus" dev="sda1" ino=16384 res=1 [ 962.145813][ T5027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.164246][ T5027] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 962.188956][ T27] audit: type=1804 audit(1593992916.967:4168): pid=15128 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/631/bus" dev="sda1" ino=16296 res=1 [ 962.212924][ T5027] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 962.248037][ T27] audit: type=1804 audit(1593992916.967:4169): pid=15129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/631/bus" dev="sda1" ino=16296 res=1 [ 962.317655][ T9544] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 962.325847][ T9544] usb 5-1: config 6 has no interface number 0 [ 962.332694][ T9544] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 962.343843][ T9544] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 962.355023][ T9544] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 962.365928][ T9544] usb 5-1: config 6 interface 92 has no altsetting 0 [ 962.527386][ T9544] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 962.536600][ T9544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.544646][ T9544] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 962.548183][ T5027] option 6-1:6.92: GSM modem (1-port) converter detected [ 962.579878][ T5027] usb 6-1: USB disconnect, device number 28 [ 962.588914][ T5027] option 6-1:6.92: device disconnected [ 962.598715][ T9544] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 962.918618][ T9544] option 5-1:6.92: GSM modem (1-port) converter detected [ 962.931363][ T9544] usb 5-1: USB disconnect, device number 4 [ 962.939561][ T9544] option 5-1:6.92: device disconnected 23:48:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="270200000000000014000900ff0100000000000000000000000000010e000a004e210000050002000a00000000210000001f"], 0x38}}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002780)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000280)={0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x9, 0x80, 0x6], 0x4, 0x0, r4, r6}) pread64(r3, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="50b50000", @ANYRES16=r8, @ANYBLOB="02002abd7000fcdbdf250700000008000c00000000000800040001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002500)={&(0x7f0000000400)="b559e7f955f15dde6e0d8d7342601f2eea91d377bd649cae733999c45f519631363f35698bad15da47468f1803f5e245f55d92f73500dcdc9d", &(0x7f0000000440)=""/4096, &(0x7f0000001440)="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", &(0x7f0000002440)="3fa497b975d40c5e6c2a702b790e297208c9e9f94660c14175afa5c0cbe97e27552a6047ca3277d56a21cf4eeccbe11029cc1029df6c09b2b206966df043088e3c038db713b09e71122e3b47737193e286794ba6405d81a5099aa0b3c65cf6dd3a097ca3c5df99ba024dfd323ebfdbb0d7b51a06e036f5f46f5d8bfa8e878814efc0aca18c9d95c379e71f413964f349e444c86cef9656a891", 0x3}, 0x38) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8090) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040810) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:37 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:37 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3100) 23:48:37 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:37 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xd00000000000000) [ 963.054151][T15167] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:48:37 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 963.101507][ T27] audit: type=1804 audit(1593992917.897:4170): pid=15171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/632/bus" dev="sda1" ino=16296 res=1 [ 963.138698][T15170] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 963.182075][ T27] audit: type=1804 audit(1593992917.907:4171): pid=15169 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/892/bus" dev="sda1" ino=16297 res=1 23:48:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="c83fb12686e494e85c6824b19eaac0bb", 0x10) [ 963.280219][T15188] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:48:38 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 963.337030][ T5027] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 963.375746][T15191] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:38 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000001c0)="d14eebe08bb5bb4447ae011f4a3b30d800baed4a3c1076ab7373e7af7a20e2b67bc8bdece70167795c501baefd53acb53d40a187989d850f78362f3aa83d3a107e92ca440ad9027732695c3dfe2f62df799acb683b", 0x55) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 963.554883][T15198] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 963.576992][ T5027] usb 6-1: Using ep0 maxpacket: 32 23:48:38 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 963.647170][T15205] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 963.739170][ T27] audit: type=1804 audit(1593992918.537:4172): pid=15211 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/892/bus" dev="sda1" ino=16297 res=1 23:48:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) fanotify_mark(r4, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) write$tun(r4, &(0x7f00000000c0)={@val={0x0, 0x8884}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @local, @mcast1, @broadcast, @mcast1}}, 0x38) [ 963.787290][ T5027] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 963.795486][T10350] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 963.806356][ T5027] usb 6-1: config 6 has no interface number 0 [ 963.827418][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 963.856307][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 23:48:38 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 963.879914][ T5027] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 963.902625][ T5027] usb 6-1: config 6 interface 92 has no altsetting 0 [ 963.934231][T15218] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:38 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 964.019958][T15224] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 964.037758][T10350] usb 5-1: Using ep0 maxpacket: 32 [ 964.077327][ T5027] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 964.104263][ T5027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.131146][ T5027] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 964.192171][ T5027] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 964.230266][ T27] audit: type=1804 audit(1593992919.027:4173): pid=15234 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/632/bus" dev="sda1" ino=16296 res=1 [ 964.257469][T10350] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 964.268805][T10350] usb 5-1: config 6 has no interface number 0 [ 964.281828][T10350] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 964.307246][T10350] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 964.316174][ T27] audit: type=1804 audit(1593992919.107:4174): pid=15236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/632/bus" dev="sda1" ino=16296 res=1 [ 964.318335][T10350] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 964.366982][T10350] usb 5-1: config 6 interface 92 has no altsetting 0 [ 964.537292][T10350] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 964.546416][T10350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.556674][ T5027] option 6-1:6.92: GSM modem (1-port) converter detected [ 964.597018][ T5027] usb 6-1: USB disconnect, device number 29 [ 964.613408][ T5027] option 6-1:6.92: device disconnected [ 964.618988][T10350] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 964.668974][T10350] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 23:48:39 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e1b0000005e00ffffba16a0aa5d02ce25d2541c0009b3ebea8653b1", 0x3f}], 0x1}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x1, 0xff, 0x6, 0x63b, 0xfff, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:39 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3200) 23:48:39 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:39 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xe00000000000000) [ 964.979853][T10350] option 5-1:6.92: GSM modem (1-port) converter detected [ 964.995233][T10350] usb 5-1: USB disconnect, device number 5 [ 965.002253][T10350] option 5-1:6.92: device disconnected [ 965.065050][T15271] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2b, r4}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x40000000, 0x1, 0x19d7500814b0bca2}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fanotify_mark(r9, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r9, 0x800c5011, &(0x7f00000000c0)) [ 965.136188][T15275] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 965.234361][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 965.280187][T15288] 8021q: adding VLAN 0 to HW filter on device bond7 [ 965.340689][T15288] BFS-fs: bfs_fill_super(): Inode 0x00000009 corrupted on loop3 [ 965.348534][ T5027] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 965.411262][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 965.448429][T15322] bond8 (uninitialized): Released all slaves 23:48:40 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 23:48:40 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000001c0)={0xfffffffa, {{0x2, 0x4e23, @local}}}, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:40 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 965.553620][T15337] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 965.559425][T15338] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 965.597239][ T5027] usb 6-1: Using ep0 maxpacket: 32 23:48:40 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 23:48:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x5000, 0x0, 0x3, 0x5, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @empty}, @in=@loopback, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x200000000}, {0x1ff}, 0x0, 0x4000, 0x0, 0x0, 0x1}, {{@in6=@dev}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 965.779842][T15353] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 965.797564][ T5027] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 965.805639][ T5027] usb 6-1: config 6 has no interface number 0 [ 965.830238][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 965.857045][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 965.874368][ T5027] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 965.897989][ T5027] usb 6-1: config 6 interface 92 has no altsetting 0 [ 966.067416][ T5027] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 966.076451][ T5027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.097098][ T5027] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 966.147013][ T5027] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 966.478641][ T5027] option 6-1:6.92: GSM modem (1-port) converter detected [ 966.487613][ T5027] usb 6-1: USB disconnect, device number 30 [ 966.494814][ T5027] option 6-1:6.92: device disconnected 23:48:41 executing program 4: dup(0xffffffffffffffff) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:41 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}, {}, {0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:41 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3300) 23:48:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:41 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xf00000000000000) [ 967.004849][T15388] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 967.010601][T15393] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 967.030527][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 967.030539][ T27] audit: type=1804 audit(1593992921.827:4182): pid=15390 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/634/bus" dev="sda1" ino=16316 res=1 [ 967.082047][ T27] audit: type=1804 audit(1593992921.827:4183): pid=15389 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/894/bus" dev="sda1" ino=16317 res=1 23:48:42 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x23, 0x4) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 967.268530][ T5027] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 967.276103][ T891] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 967.279230][T15409] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:42 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000002c0)={0x0, 0x81, 0xcadc, 0x438}, 0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000001480)={0xa10000, 0x3ff, 0x677, 0xffffffffffffffff, 0x0, &(0x7f0000001440)={0x990900, 0x9, [], @p_u32=&(0x7f0000001400)=0x7}}) connect$bt_sco(r4, &(0x7f00000014c0)={0x1f, @none}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffff81}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000240)=[{&(0x7f0000000140)="80d842d6933b1342052985782ffdd0fffe20a19360d592e84e8e0abe9efea3702c70bf62d516519e6905f7548b88959b3ee054c5ff6957f1fe2f6fec014644a6b732f110fe2c0f0b14f5fa24f554348dea6d572256087b1cb0961a7f00c0980aad4d408fc1efe44b5c36a5562a0921759c9361546d7fbe180279ae8d2f44ec7da863e59bc2821dfafa58a05f265ce763da47d4061e555701", 0x98, 0x8}, {&(0x7f0000000080)="66d48b32026672c42d4a7464dc79f9ce2774416dacff48aba1898964a2e58ddf55b668586823e22e60d7cf567f0ee0f76eee563be65e32456ffe24fdde05f0c36b410f125aaff0567629ad30fea5593e1056c038370faef5e12a8a20abaf3215d86afcd0108f100b8673772fca8b46cf83e8b293f76052943abc55359b", 0x7d, 0x3}, {&(0x7f0000000400)="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", 0x1000, 0x3}, {&(0x7f0000000200)="838c5123ada30f04336f800125764a5c", 0x10, 0x10001}], 0xc102, 0x0) 23:48:42 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 967.527012][ T891] usb 6-1: Using ep0 maxpacket: 32 [ 967.532202][ T5027] usb 5-1: Using ep0 maxpacket: 32 23:48:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000140)={0x3, "19da01"}, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) sendto$rose(r3, &(0x7f00000001c0)="b7426c427036171e7f101f5734de9a7e0066335db99044a7b5538872fb7de486413fc9901df7dc7bbf16a068bbb385ac07943e411bca3fc48bf2821f72b8ab8470225e9010877523c23b22638b46d9612dcd8096776449eb202ba693a42339df2fb11fba61", 0x65, 0x20040800, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) [ 967.690099][T15430] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 967.750768][ T27] audit: type=1804 audit(1593992922.547:4184): pid=15434 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/634/bus" dev="sda1" ino=16316 res=1 [ 967.777388][ T891] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 967.785777][ T5027] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 967.806996][ T5027] usb 5-1: config 6 has no interface number 0 [ 967.813245][ T891] usb 6-1: config 6 has no interface number 0 [ 967.813507][T15437] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 967.822516][ T5027] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 967.840661][ T891] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 967.857043][ T5027] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 967.870405][ T891] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 967.897001][ T5027] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 967.909733][ T891] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 967.936991][ T5027] usb 5-1: config 6 interface 92 has no altsetting 0 [ 967.937938][ T27] audit: type=1804 audit(1593992922.737:4185): pid=15443 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/894/bus" dev="sda1" ino=16317 res=1 [ 967.944064][ T891] usb 6-1: config 6 interface 92 has no altsetting 0 [ 968.042652][ T27] audit: type=1804 audit(1593992922.837:4186): pid=15444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/894/bus" dev="sda1" ino=16317 res=1 [ 968.097953][ T27] audit: type=1804 audit(1593992922.867:4187): pid=15446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/894/bus" dev="sda1" ino=16317 res=1 [ 968.158825][ T5027] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 968.171646][ T5027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.180100][ T5027] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 968.205937][ T891] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 968.215079][ T891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.223176][ T891] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 968.246379][ T5027] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 968.278578][ T891] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 968.588443][ T5027] option 5-1:6.92: GSM modem (1-port) converter detected [ 968.598645][ T891] option 6-1:6.92: GSM modem (1-port) converter detected [ 968.617005][ T5027] usb 5-1: USB disconnect, device number 6 [ 968.623434][ T891] usb 6-1: USB disconnect, device number 31 [ 968.632097][ T5027] option 5-1:6.92: device disconnected [ 968.638822][ T891] option 6-1:6.92: device disconnected 23:48:43 executing program 4: syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:43 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:43 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1000000000000000) 23:48:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x81}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x20003, 0x0, &(0x7f0000000040), 0x110c902, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0x4) 23:48:43 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3400) 23:48:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 969.112383][T15484] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 969.137023][ T27] audit: type=1804 audit(1593992923.927:4188): pid=15482 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/635/bus" dev="sda1" ino=16372 res=1 [ 969.176802][ T27] audit: type=1804 audit(1593992923.957:4189): pid=15488 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/895/bus" dev="sda1" ino=16290 res=1 23:48:44 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000140)={0x1f}) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x6e6bb2}, {{@in6=@dev, 0x1}, 0x0, @in6=@local}}, 0xe8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 969.361147][T15503] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 969.387001][ T891] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 969.387092][ T9544] usb 5-1: new high-speed USB device number 7 using dummy_hcd 23:48:44 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 969.444766][T15508] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 969.529261][T15514] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:48:44 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x1e7b, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 969.617891][T15521] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 969.637005][ T891] usb 6-1: Using ep0 maxpacket: 32 [ 969.656997][ T9544] usb 5-1: Using ep0 maxpacket: 32 23:48:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) fanotify_mark(r3, 0x2e, 0x40000000, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x1000, 0x40000) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:44 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 969.713024][T15525] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 969.857383][ T9544] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 969.858502][ T891] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 969.865454][ T9544] usb 5-1: config 6 has no interface number 0 [ 969.886555][T15532] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 969.897097][T15528] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 969.909163][ T891] usb 6-1: config 6 has no interface number 0 [ 969.923021][ T891] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 969.946984][ T891] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 969.970613][ T891] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 969.981894][ T891] usb 6-1: config 6 interface 92 has no altsetting 0 [ 970.003850][ T9544] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 970.035996][ T9544] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 970.087029][ T9544] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 970.117047][ T9544] usb 5-1: config 6 interface 92 has no altsetting 0 [ 970.200389][ T27] audit: type=1804 audit(1593992924.997:4190): pid=15541 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/635/bus" dev="sda1" ino=16372 res=1 [ 970.225297][ T891] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 970.238886][ T891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.257060][ T891] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 970.278741][ T9544] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 970.289958][ T27] audit: type=1804 audit(1593992925.017:4191): pid=15542 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/635/bus" dev="sda1" ino=16372 res=1 [ 970.306986][ T9544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.313948][ T891] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 970.346979][ T9544] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 970.396806][ T9544] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 970.698561][ T891] option 6-1:6.92: GSM modem (1-port) converter detected [ 970.708003][ T891] usb 6-1: USB disconnect, device number 32 [ 970.715351][ T891] option 6-1:6.92: device disconnected [ 970.718168][ T9544] option 5-1:6.92: GSM modem (1-port) converter detected [ 970.742260][ T9544] usb 5-1: USB disconnect, device number 7 [ 970.753368][ T9544] option 5-1:6.92: device disconnected 23:48:45 executing program 4: syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}, {}, {}, 0x6}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f00000001c0)={{0x2, 0x0, @identifier="2b1a099f7922682b72513d2946d15ab6"}}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)=""/35, 0x23) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x6, 0x7}, 0x1}, 0x20, 0x1, 0x0) 23:48:45 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:45 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1100000000000000) 23:48:45 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3500) 23:48:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 971.213464][T15579] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() tkill(r1, 0xa) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/tcp\x00') r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 971.261996][T15585] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:48:46 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:46 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$revoke(0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 971.433428][T15603] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 971.442220][T15604] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 971.516995][ T891] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 971.524494][T10350] usb 6-1: new high-speed USB device number 33 using dummy_hcd 23:48:46 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 971.579467][T15610] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:46 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 971.672674][T15618] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 23:48:46 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 971.772957][T15622] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 971.806969][T10350] usb 6-1: Using ep0 maxpacket: 32 [ 971.812325][ T891] usb 5-1: Using ep0 maxpacket: 32 [ 971.845702][T15627] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 972.037497][ T891] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 972.045966][T10350] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 972.056336][T10350] usb 6-1: config 6 has no interface number 0 [ 972.063757][ T891] usb 5-1: config 6 has no interface number 0 [ 972.075572][T10350] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 972.086653][ T891] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 972.110054][ T891] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 972.121105][T10350] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 972.146910][ T891] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 972.157841][T10350] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 972.177028][T10350] usb 6-1: config 6 interface 92 has no altsetting 0 [ 972.183958][ T891] usb 5-1: config 6 interface 92 has no altsetting 0 [ 972.297562][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 972.297573][ T27] audit: type=1804 audit(1593992927.097:4197): pid=15637 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/636/bus" dev="sda1" ino=16382 res=1 [ 972.376899][ T27] audit: type=1804 audit(1593992927.167:4198): pid=15638 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/636/bus" dev="sda1" ino=16382 res=1 [ 972.427406][ T27] audit: type=1804 audit(1593992927.197:4199): pid=15637 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/636/bus" dev="sda1" ino=16382 res=1 [ 972.428767][T10350] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 972.459802][ T891] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 972.474437][ T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.491358][ T891] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 972.529241][T10350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.546643][T10350] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 972.570103][ T891] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 972.602163][T10350] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 972.898419][ T891] option 5-1:6.92: GSM modem (1-port) converter detected [ 972.906884][ T891] usb 5-1: USB disconnect, device number 8 [ 972.922908][ T891] option 5-1:6.92: device disconnected [ 972.930067][T10350] option 6-1:6.92: GSM modem (1-port) converter detected [ 972.961072][T10350] usb 6-1: USB disconnect, device number 33 [ 972.971754][T10350] option 6-1:6.92: device disconnected 23:48:48 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:48 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:48 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:48 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3600) 23:48:48 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1200000000000000) 23:48:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 973.439845][T15674] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 973.455616][T15677] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 23:48:48 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 973.471616][ T27] audit: type=1804 audit(1593992928.267:4200): pid=15679 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/637/bus" dev="sda1" ino=16307 res=1 [ 973.496567][ T27] audit: type=1804 audit(1593992928.267:4201): pid=15673 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/897/bus" dev="sda1" ino=16382 res=1 23:48:48 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 973.601355][T15690] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 23:48:48 executing program 3: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 973.682088][T15696] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 973.716977][ T12] usb 5-1: new high-speed USB device number 9 using dummy_hcd 23:48:48 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 973.757987][ T9544] usb 6-1: new high-speed USB device number 34 using dummy_hcd 23:48:48 executing program 3: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 973.830346][T15705] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:48:48 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 973.966964][ T12] usb 5-1: Using ep0 maxpacket: 32 [ 973.998666][T15717] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 974.007358][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 974.167297][ T12] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 974.183600][ T12] usb 5-1: config 6 has no interface number 0 [ 974.207333][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 974.215404][ T9544] usb 6-1: config 6 has no interface number 0 [ 974.227070][ T12] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 974.266972][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 974.287021][ T12] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 974.302864][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 974.313923][ T27] audit: type=1804 audit(1593992929.097:4202): pid=15723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/637/bus" dev="sda1" ino=16307 res=1 [ 974.347007][ T12] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 974.367033][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 974.378035][ T12] usb 5-1: config 6 interface 92 has no altsetting 0 [ 974.385098][ T27] audit: type=1804 audit(1593992929.097:4203): pid=15724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/637/bus" dev="sda1" ino=16307 res=1 [ 974.416974][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 974.523065][ T27] audit: type=1804 audit(1593992929.317:4204): pid=15726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/897/bus" dev="sda1" ino=16382 res=1 [ 974.547285][ T12] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 974.566984][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.575065][ T12] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 974.599548][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 974.608754][ T12] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 974.641631][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.650161][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 974.676448][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 974.968339][ T12] option 5-1:6.92: GSM modem (1-port) converter detected [ 974.982898][ T12] usb 5-1: USB disconnect, device number 9 [ 974.991201][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 975.000611][ T12] option 5-1:6.92: device disconnected [ 975.016448][ T9544] usb 6-1: USB disconnect, device number 34 [ 975.033792][ T9544] option 6-1:6.92: device disconnected 23:48:50 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:50 executing program 3: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:50 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:50 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1300000000000000) 23:48:50 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3700) 23:48:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 975.489469][T15765] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 975.507069][ T27] audit: type=1804 audit(1593992930.297:4205): pid=15764 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/898/bus" dev="sda1" ino=16371 res=1 [ 975.576863][ T27] audit: type=1804 audit(1593992930.297:4206): pid=15769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/638/bus" dev="sda1" ino=16317 res=1 23:48:50 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:50 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 975.710740][T15781] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:48:50 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:50 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 975.826974][ T9544] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 975.856576][T15792] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 23:48:50 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:50 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:50 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 976.024807][T15801] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 976.067530][ T9544] usb 6-1: Using ep0 maxpacket: 32 23:48:50 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) 23:48:50 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 976.266343][T15817] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 976.278925][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 976.289380][ T9544] usb 6-1: config 6 has no interface number 0 [ 976.306281][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 976.328300][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 976.340859][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 976.351665][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 976.517343][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 976.526370][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.536702][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 976.578367][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 23:48:51 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1400000000000000) 23:48:51 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 976.928300][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 976.957044][ T9544] usb 6-1: USB disconnect, device number 35 [ 976.977084][ T9544] option 6-1:6.92: device disconnected 23:48:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:52 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3800) 23:48:52 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:52 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:52 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 977.362857][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 977.362868][ T27] audit: type=1804 audit(1593992932.157:4211): pid=15853 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/639/bus" dev="sda1" ino=16310 res=1 [ 977.484108][T15863] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 977.512429][ T27] audit: type=1804 audit(1593992932.307:4212): pid=15859 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/899/bus" dev="sda1" ino=16330 res=1 23:48:52 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) 23:48:52 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:52 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 977.726971][ T891] usb 6-1: new high-speed USB device number 36 using dummy_hcd 23:48:52 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 977.774938][T15881] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 23:48:52 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x3f, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 977.979101][T15893] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 978.007376][ T891] usb 6-1: Using ep0 maxpacket: 32 23:48:52 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1500000000000000) 23:48:52 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) [ 978.228893][ T891] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 978.256980][ T891] usb 6-1: config 6 has no interface number 0 [ 978.264244][ T891] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 978.278846][ T891] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 978.300778][ T891] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 978.312177][ T891] usb 6-1: config 6 interface 92 has no altsetting 0 [ 978.349135][ T27] audit: type=1804 audit(1593992933.147:4213): pid=15906 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/640/bus" dev="sda1" ino=15752 res=1 [ 978.479470][ T27] audit: type=1804 audit(1593992933.277:4214): pid=15910 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/899/bus" dev="sda1" ino=16330 res=1 [ 978.514390][ T27] audit: type=1804 audit(1593992933.277:4215): pid=15911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/899/bus" dev="sda1" ino=16330 res=1 [ 978.547335][ T891] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 978.556462][ T891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.577047][ T891] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 978.600202][ T891] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 978.761894][ T27] audit: type=1804 audit(1593992933.557:4216): pid=15909 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/640/bus" dev="sda1" ino=15752 res=1 [ 978.918320][ T891] option 6-1:6.92: GSM modem (1-port) converter detected [ 978.938694][ T891] usb 6-1: USB disconnect, device number 36 [ 978.947164][ T891] option 6-1:6.92: device disconnected 23:48:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:54 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:54 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:54 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) 23:48:54 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3900) 23:48:54 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1600000000000000) [ 979.401871][T15935] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 23:48:54 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 979.456841][ T27] audit: type=1804 audit(1593992934.247:4217): pid=15939 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/900/bus" dev="sda1" ino=16194 res=1 23:48:54 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) [ 979.551689][T15951] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 979.573072][ T27] audit: type=1804 audit(1593992934.287:4218): pid=15933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/641/bus" dev="sda1" ino=16024 res=1 23:48:54 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 979.679026][ T3925] usb 5-1: new high-speed USB device number 10 using dummy_hcd 23:48:54 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) [ 979.760695][ T9544] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 979.781706][T15964] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 23:48:54 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 979.926988][ T3925] usb 5-1: Using ep0 maxpacket: 32 23:48:54 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) [ 979.969908][T15975] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 980.032711][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 980.047387][ T3925] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 980.059053][ T3925] usb 5-1: config 6 has no interface number 0 [ 980.072051][ T3925] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 980.096490][ T3925] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 980.119747][ T3925] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 980.142658][ T3925] usb 5-1: config 6 interface 92 has no altsetting 0 [ 980.247241][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 980.258658][ T9544] usb 6-1: config 6 has no interface number 0 [ 980.271393][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 980.295388][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 980.317334][ T3925] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 980.330990][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 980.342736][ T3925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.359659][ T3925] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 980.384093][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 980.401391][ T27] audit: type=1804 audit(1593992935.197:4219): pid=15985 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/900/bus" dev="sda1" ino=16194 res=1 [ 980.413272][ T3925] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 980.503099][ T27] audit: type=1804 audit(1593992935.297:4220): pid=15986 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/900/bus" dev="sda1" ino=16194 res=1 [ 980.587432][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 980.596574][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.616779][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 980.664261][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 980.808535][ T3925] option 5-1:6.92: GSM modem (1-port) converter detected [ 980.823015][ T3925] usb 5-1: USB disconnect, device number 10 [ 980.836469][ T3925] option 5-1:6.92: device disconnected [ 981.008540][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 981.024504][ T9544] usb 6-1: USB disconnect, device number 37 [ 981.040088][ T9544] option 6-1:6.92: device disconnected 23:48:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}}, {{@in=@multicast2}, 0x0, @in=@dev, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) 23:48:56 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) 23:48:56 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3a00) 23:48:56 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1700000000000000) 23:48:56 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 981.537336][T16026] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 23:48:56 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) 23:48:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 981.681985][T16045] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 23:48:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 981.806966][ T3925] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 981.814532][ T9544] usb 5-1: new high-speed USB device number 11 using dummy_hcd 23:48:56 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) 23:48:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 982.056998][ T3925] usb 6-1: Using ep0 maxpacket: 32 23:48:56 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) [ 982.097174][ T9544] usb 5-1: Using ep0 maxpacket: 32 [ 982.237523][ T9544] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 982.248162][ T9544] usb 5-1: config 6 has no interface number 0 [ 982.262342][ T9544] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 982.287295][ T3925] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 982.295454][ T3925] usb 6-1: config 6 has no interface number 0 [ 982.308795][ T9544] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 982.333919][ T3925] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 982.355725][ T9544] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 982.366497][ T3925] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 982.377709][ T9544] usb 5-1: config 6 interface 92 has no altsetting 0 [ 982.384593][ T3925] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 982.400711][ T3925] usb 6-1: config 6 interface 92 has no altsetting 0 [ 982.483477][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 982.483488][ T27] audit: type=1804 audit(1593992937.277:4227): pid=16077 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/642/bus" dev="sda1" ino=16320 res=1 [ 982.617050][ T9544] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 982.626061][ T9544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.634760][ T3925] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 982.643829][ T3925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.652181][ T9544] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 982.675703][ T3925] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 982.699462][ T9544] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 982.732098][ T3925] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 983.038563][ T3925] option 6-1:6.92: GSM modem (1-port) converter detected [ 983.047310][ T9544] option 5-1:6.92: GSM modem (1-port) converter detected [ 983.065003][ T9544] usb 5-1: USB disconnect, device number 11 [ 983.071042][ T3925] usb 6-1: USB disconnect, device number 38 [ 983.080018][ T9544] option 5-1:6.92: device disconnected [ 983.085717][ T3925] option 6-1:6.92: device disconnected 23:48:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) 23:48:58 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) 23:48:58 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3b00) 23:48:58 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1800000000000000) 23:48:58 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:48:58 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) [ 983.626997][ T27] audit: type=1804 audit(1593992938.417:4228): pid=16120 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/643/bus" dev="sda1" ino=16293 res=1 23:48:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 983.688509][ T27] audit: type=1804 audit(1593992938.447:4229): pid=16121 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/902/bus" dev="sda1" ino=16292 res=1 23:48:58 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) 23:48:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 983.846965][ T891] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 983.856964][ T9544] usb 6-1: new high-speed USB device number 39 using dummy_hcd 23:48:58 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) 23:48:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) [ 984.106998][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 984.118039][ T891] usb 5-1: Using ep0 maxpacket: 32 [ 984.277432][ T891] usb 5-1: config 6 has an invalid interface number: 92 but max is 0 [ 984.285644][ T891] usb 5-1: config 6 has no interface number 0 [ 984.294005][ T891] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 984.307352][ T9544] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 984.315472][ T9544] usb 6-1: config 6 has no interface number 0 [ 984.341610][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 984.346982][ T891] usb 5-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 984.379001][ T9544] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 984.386991][ T891] usb 5-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 984.412019][ T9544] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 984.416977][ T891] usb 5-1: config 6 interface 92 has no altsetting 0 [ 984.438850][ T9544] usb 6-1: config 6 interface 92 has no altsetting 0 [ 984.514197][ T27] audit: type=1804 audit(1593992939.307:4230): pid=16164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/643/bus" dev="sda1" ino=16293 res=1 [ 984.558521][ T27] audit: type=1804 audit(1593992939.347:4231): pid=16165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/902/bus" dev="sda1" ino=16292 res=1 [ 984.606981][ T27] audit: type=1804 audit(1593992939.397:4232): pid=16167 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/643/bus" dev="sda1" ino=16293 res=1 [ 984.627377][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 984.632320][ T27] audit: type=1804 audit(1593992939.397:4233): pid=16164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/643/bus" dev="sda1" ino=16293 res=1 [ 984.645336][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.668730][ T891] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 984.680315][ T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.689494][ T891] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 984.694665][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 984.714339][ T891] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 984.779763][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 985.078353][ T891] option 5-1:6.92: GSM modem (1-port) converter detected [ 985.087447][ T891] usb 5-1: USB disconnect, device number 12 [ 985.093992][ T891] option 5-1:6.92: device disconnected [ 985.128265][ T9544] option 6-1:6.92: GSM modem (1-port) converter detected [ 985.147102][ T9544] usb 6-1: USB disconnect, device number 39 [ 985.155413][ T9544] option 6-1:6.92: device disconnected 23:49:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:00 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) 23:49:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) 23:49:00 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3c00) 23:49:00 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1900000000000000) 23:49:00 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x0, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 985.689686][ T27] audit: type=1804 audit(1593992940.487:4234): pid=16216 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/903/bus" dev="sda1" ino=16292 res=1 23:49:00 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) [ 985.746771][ T27] audit: type=1804 audit(1593992940.517:4235): pid=16207 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/644/bus" dev="sda1" ino=16327 res=1 23:49:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) 23:49:00 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) [ 985.917055][ T891] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 985.927416][ T12] usb 6-1: new high-speed USB device number 40 using dummy_hcd 23:49:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) 23:49:00 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) 23:49:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) [ 986.176973][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 986.196977][ T891] usb 5-1: device descriptor read/64, error 18 [ 986.355592][ T27] audit: type=1804 audit(1593992941.147:4236): pid=16251 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/903/bus" dev="sda1" ino=16292 res=1 [ 986.417236][ T12] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 986.431062][ T12] usb 6-1: config 6 has no interface number 0 [ 986.443334][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 986.483611][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 986.495708][ T12] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 986.522969][ T12] usb 6-1: config 6 interface 92 has no altsetting 0 [ 986.586967][ T891] usb 5-1: device descriptor read/64, error 18 [ 986.727041][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 986.736137][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.756982][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 986.780778][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 986.856978][ T891] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 987.098419][ T12] option 6-1:6.92: GSM modem (1-port) converter detected [ 987.111171][ T12] usb 6-1: USB disconnect, device number 40 [ 987.119455][ T12] option 6-1:6.92: device disconnected [ 987.126993][ T891] usb 5-1: device descriptor read/64, error 18 23:49:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:02 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) 23:49:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) 23:49:02 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3d00) 23:49:02 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1a00000000000000) [ 987.516963][ T891] usb 5-1: device descriptor read/64, error 18 [ 987.636965][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 987.636977][ T27] audit: type=1804 audit(1593992942.427:4240): pid=16277 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/645/bus" dev="sda1" ino=16316 res=1 [ 987.637461][ T891] usb usb5-port1: attempt power cycle [ 987.689198][ T27] audit: type=1804 audit(1593992942.487:4241): pid=16286 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/904/bus" dev="sda1" ino=16307 res=1 [ 987.712582][ T27] audit: type=1804 audit(1593992942.487:4242): pid=16286 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/904/bus" dev="sda1" ino=16307 res=1 [ 988.047019][ T5027] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 988.266783][ T27] audit: type=1804 audit(1593992943.057:4243): pid=16293 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/645/bus" dev="sda1" ino=16316 res=1 [ 988.297012][ T5027] usb 6-1: Using ep0 maxpacket: 32 [ 988.467023][ T891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 988.497052][ T5027] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 988.505105][ T5027] usb 6-1: config 6 has no interface number 0 [ 988.526989][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 988.546969][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 988.558527][ T891] usb 5-1: Invalid ep0 maxpacket: 0 [ 988.563857][ T5027] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 988.574951][ T5027] usb 6-1: config 6 interface 92 has no altsetting 0 23:49:03 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x0, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:03 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) 23:49:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) 23:49:03 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3e00) 23:49:03 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1b00000000000000) 23:49:03 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) [ 988.716970][ T27] audit: type=1804 audit(1593992943.507:4244): pid=16307 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/905/bus" dev="sda1" ino=16330 res=1 [ 988.737022][ T5027] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 988.750777][ T5027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.759140][ T5027] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 988.784725][ T5027] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 23:49:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) [ 988.803077][ T27] audit: type=1804 audit(1593992943.547:4245): pid=16305 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/646/bus" dev="sda1" ino=16346 res=1 [ 989.007090][ T891] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 989.098355][ T891] usb 5-1: Invalid ep0 maxpacket: 0 [ 989.103724][ T891] usb usb5-port1: unable to enumerate USB device [ 989.118618][ T5027] option 6-1:6.92: GSM modem (1-port) converter detected [ 989.141206][ T5027] usb 6-1: USB disconnect, device number 41 [ 989.165377][ T5027] option 6-1:6.92: device disconnected [ 989.477079][ T27] audit: type=1804 audit(1593992944.267:4246): pid=16313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/646/bus" dev="sda1" ino=16346 res=1 [ 989.521122][ T27] audit: type=1804 audit(1593992944.297:4247): pid=16343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/905/bus" dev="sda1" ino=16330 res=1 23:49:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x5, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:04 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) 23:49:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) 23:49:04 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3f00) [ 989.553743][ T27] audit: type=1804 audit(1593992944.347:4248): pid=16344 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/646/bus" dev="sda1" ino=16346 res=1 [ 989.577990][ T27] audit: type=1804 audit(1593992944.347:4249): pid=16313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/646/bus" dev="sda1" ino=16346 res=1 23:49:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) [ 989.908532][ T5027] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 990.148553][ T5027] usb 6-1: Using ep0 maxpacket: 32 [ 990.356981][ T5027] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 990.365494][ T5027] usb 6-1: config 6 has no interface number 0 [ 990.373269][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 990.384499][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 990.398485][ T5027] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 990.410648][ T5027] usb 6-1: config 6 interface 92 has no altsetting 0 [ 990.577214][ T5027] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 990.586250][ T5027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.594523][ T5027] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 990.617707][ T5027] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 990.928277][ T5027] option 6-1:6.92: GSM modem (1-port) converter detected [ 990.937181][ T5027] usb 6-1: USB disconnect, device number 42 [ 990.943964][ T5027] option 6-1:6.92: device disconnected 23:49:06 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x0, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:06 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) 23:49:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) 23:49:06 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1c00000000000000) 23:49:06 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x4000) 23:49:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) [ 991.780849][T16398] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 23:49:06 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) 23:49:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) [ 991.988384][ T3925] usb 6-1: new high-speed USB device number 43 using dummy_hcd 23:49:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) [ 992.048459][T16420] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 23:49:06 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) [ 992.146959][ T12] usb 5-1: new high-speed USB device number 17 using dummy_hcd 23:49:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) [ 992.247024][ T3925] usb 6-1: Using ep0 maxpacket: 32 [ 992.255535][T16431] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 992.429017][ T12] usb 5-1: device descriptor read/64, error 18 [ 992.469123][ T3925] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 992.481112][ T3925] usb 6-1: config 6 has no interface number 0 [ 992.496578][ T3925] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 992.524816][ T3925] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 992.573514][ T3925] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 992.619763][ T3925] usb 6-1: config 6 interface 92 has no altsetting 0 [ 992.827016][ T3925] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 992.838092][ T3925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.846157][ T3925] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 992.872217][ T12] usb 5-1: device descriptor read/64, error 18 [ 992.879272][ T3925] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 993.146989][ T12] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 993.208471][ T3925] option 6-1:6.92: GSM modem (1-port) converter detected [ 993.217850][ T3925] usb 6-1: USB disconnect, device number 43 [ 993.224677][ T3925] option 6-1:6.92: device disconnected [ 993.426987][ T12] usb 5-1: device descriptor read/64, error 18 [ 993.816957][ T12] usb 5-1: device descriptor read/64, error 18 [ 993.936971][ T12] usb usb5-port1: attempt power cycle 23:49:09 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) 23:49:09 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1d00000000000000) 23:49:09 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x4800) 23:49:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 23:49:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 994.656989][ T12] usb 5-1: new high-speed USB device number 19 using dummy_hcd 23:49:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) [ 994.768786][ T12] usb 5-1: device descriptor read/8, error -71 [ 994.786964][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 994.786975][ T27] audit: type=1804 audit(1593992949.577:4257): pid=16475 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/908/bus" dev="sda1" ino=16307 res=1 [ 994.881829][ T27] audit: type=1804 audit(1593992949.617:4258): pid=16477 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/648/bus" dev="sda1" ino=16302 res=1 23:49:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) [ 994.976945][ T12] usb 5-1: device descriptor read/8, error -71 [ 994.987511][ T5027] usb 2-1: new high-speed USB device number 4 using dummy_hcd 23:49:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) 23:49:10 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) 23:49:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 995.368539][ T5027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.388346][ T5027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.404972][ T5027] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.40 23:49:10 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) [ 995.427548][ T5027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.446647][ T5027] usb 2-1: config 0 descriptor?? [ 995.467817][ T12] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 995.545052][ T27] audit: type=1804 audit(1593992950.337:4259): pid=16507 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/908/bus" dev="sda1" ino=16307 res=1 [ 995.567999][ T12] usb 5-1: Using ep0 maxpacket: 32 [ 995.663780][ T27] audit: type=1804 audit(1593992950.457:4260): pid=16516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/648/bus" dev="sda1" ino=16302 res=1 [ 995.767231][ T12] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 995.775510][ T12] usb 5-1: config 0 has no interface number 0 [ 995.794404][ T12] usb 5-1: config 0 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 995.805848][ T12] usb 5-1: config 0 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 995.816995][ T12] usb 5-1: config 0 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 995.819060][ T5027] usbhid 2-1:0.0: can't add hid device: -71 [ 995.827863][ T12] usb 5-1: config 0 interface 92 has no altsetting 0 [ 995.847015][ T5027] usbhid: probe of 2-1:0.0 failed with error -71 [ 995.854351][ T5027] usb 2-1: USB disconnect, device number 4 [ 995.997047][ T12] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 996.006087][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.014213][ T12] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 996.037428][ T12] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 996.072115][ T12] usb 5-1: config 0 descriptor?? [ 996.358208][ T12] option 5-1:0.92: GSM modem (1-port) converter detected [ 996.369112][ T12] usb 5-1: USB disconnect, device number 20 [ 996.375942][ T12] option 5-1:0.92: device disconnected [ 996.376943][ T5027] usb 2-1: new high-speed USB device number 5 using dummy_hcd 23:49:11 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:11 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x4c00) 23:49:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) 23:49:11 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1e00000000000000) [ 996.786998][ T5027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.798022][ T5027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.807878][ T5027] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.40 [ 996.816991][ T5027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.825691][ T5027] usb 2-1: config 0 descriptor?? [ 996.936973][ T27] audit: type=1804 audit(1593992951.727:4261): pid=16552 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/649/bus" dev="sda1" ino=16316 res=1 [ 996.997458][ T27] audit: type=1804 audit(1593992951.737:4262): pid=16555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/909/bus" dev="sda1" ino=16310 res=1 [ 997.157012][T15636] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 997.307975][ T5027] belkin 0003:1020:0006.0001: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 997.406945][T15636] usb 5-1: Using ep0 maxpacket: 32 [ 997.458630][ T27] audit: type=1804 audit(1593992952.257:4263): pid=16568 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/909/bus" dev="sda1" ino=16310 res=1 [ 997.508554][ T12] usb 2-1: USB disconnect, device number 5 [ 997.555398][ T27] audit: type=1804 audit(1593992952.347:4264): pid=16580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/649/bus" dev="sda1" ino=16316 res=1 [ 997.656969][T15636] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 997.666977][T15636] usb 5-1: config 0 has no interface number 0 [ 997.673212][T15636] usb 5-1: config 0 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 997.686781][T15636] usb 5-1: config 0 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 997.699521][T15636] usb 5-1: config 0 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 997.710353][T15636] usb 5-1: config 0 interface 92 has no altsetting 0 [ 997.907032][T15636] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 997.916305][T15636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.924603][T15636] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 997.947769][T15636] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 997.980812][T15636] usb 5-1: config 0 descriptor?? [ 998.248552][T15636] option 5-1:0.92: GSM modem (1-port) converter detected [ 998.259188][T15636] usb 5-1: USB disconnect, device number 21 [ 998.265849][T15636] option 5-1:0.92: device disconnected [ 998.286953][ T12] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 998.676982][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.687870][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.697721][ T12] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.40 [ 998.706775][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.715663][ T12] usb 2-1: config 0 descriptor?? 23:49:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0x711}, 0x14}}, 0x0) 23:49:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) 23:49:13 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x5c00) 23:49:13 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1f00000000000000) 23:49:13 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0x711}, 0x14}}, 0x0) [ 998.872732][T16616] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 23:49:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) [ 998.916962][ T27] audit: type=1804 audit(1593992953.707:4265): pid=16617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/910/bus" dev="sda1" ino=16296 res=1 [ 998.937082][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 998.946055][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 998.954051][ T12] usb 2-1: USB disconnect, device number 6 23:49:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0x711}, 0x14}}, 0x0) [ 999.032307][ T27] audit: type=1804 audit(1593992953.717:4266): pid=16615 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/650/bus" dev="sda1" ino=16293 res=1 [ 999.049424][T16635] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 23:49:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0x711}, 0x14}}, 0x0) 23:49:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast2}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) [ 999.137131][ T5] usb 5-1: new high-speed USB device number 22 using dummy_hcd 23:49:14 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 999.258670][T16644] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 23:49:14 executing program 3: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000680)={0x2d, 0x4, 0x0, {0x2, 0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x800, @dev}, 0x0, 0x0, 0x0, 0x3}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000000640)={0x0, &(0x7f0000000600)=[&(0x7f0000000100)="ee751f7df7f2c7cd309c3f39e0382c247cc0ec8e1f1913bdbec0b337b342d4fcdc0be11934e9035e2365a9001cfdc52ffbe828d343f410c8dbe5cb24648567590759b7d505b93c92b6f4bd5fa2cd69", 0x0, &(0x7f00000002c0)="d17f61cd172077c48e39b6686aa39e8a38061d8acc39c832aef0442097cddf6a5eba8f3a21f87dfe9edec8a155758d79cb8c5f42bd45c3a93ec8cb64f69092a0a14cc2d1b155db6a42858adaf9e956576fe39fe41284349239fb1909ff174038c0b1738c3acef4500167c1e32e7ba858", 0x0, &(0x7f0000000500)="d4b73ffa3ec78b40d6cc0c412ea4cb89dd1c8a758f24bccffe9b53bb772e18966c9ea40ae986c8b11396153a6be9a1cddeac4f5601fee437ea3c184b06bfc6638b0b85627996ee56dc1c0ea53a50249e22f8070ca1a719125e90a63e1e54b8876e61a9ec73653b775fa928f56c19edf6b26e20f78b076d6378fa55b650c940d7243043289884935dccc2c6f55d46fbf9eb765b01b8b0b07bcbf04d02b3c3a7e1497272245a4684765c8d6f442ca2f4b615a6d088aa", &(0x7f00000005c0)="fffdaeed"], 0x2}) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, r4) 23:49:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:14 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x1000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 999.416963][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 999.638905][ T5] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 999.652791][ T5] usb 5-1: config 0 has no interface number 0 [ 999.672353][ T5] usb 5-1: config 0 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 999.722587][ T5] usb 5-1: config 0 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 999.760365][ T5] usb 5-1: config 0 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 999.796956][ T5] usb 5-1: config 0 interface 92 has no altsetting 0 [ 999.896963][ T27] audit: type=1804 audit(1593992954.687:4267): pid=16708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/650/bus" dev="sda1" ino=16293 res=1 [ 999.947291][ T12] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 999.958151][ T27] audit: type=1804 audit(1593992954.687:4268): pid=16716 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/650/bus" dev="sda1" ino=16293 res=1 [ 999.982299][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 999.997115][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.005128][ T5] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1000.057521][ T27] audit: type=1804 audit(1593992954.767:4269): pid=16718 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/910/bus" dev="sda1" ino=16296 res=1 [ 1000.086956][ T5] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1000.107296][ T27] audit: type=1804 audit(1593992954.837:4270): pid=16720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/910/bus" dev="sda1" ino=16296 res=1 [ 1000.153065][ T5] usb 5-1: config 0 descriptor?? [ 1000.198749][ T27] audit: type=1804 audit(1593992954.837:4271): pid=16720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/910/bus" dev="sda1" ino=16296 res=1 [ 1000.256960][ T12] usb 6-1: Using ep0 maxpacket: 32 23:49:15 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x6800) 23:49:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001080)=ANY=[@ANYBLOB="9600f660b9b58b33000045563e43581754f4e6d8e9b409c7d1aec36bf4dc9b0d7959909632b52943c5e307ca2aaf916343ad22a7f80c4f138b5b5601c09ebcfb1a2303b7c5ba5599fe65696441f6a76416538afc42c31bb0584ee68abee11306703607"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1000.387414][ T12] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 1000.403781][ T12] usb 6-1: config 6 has no interface number 0 [ 1000.418588][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1000.419337][T16726] kvm: emulating exchange as write [ 1000.432888][ T5] option 5-1:0.92: GSM modem (1-port) converter detected [ 1000.455628][ T5] usb 5-1: USB disconnect, device number 22 [ 1000.477836][ T12] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1000.490125][ T5] option 5-1:0.92: device disconnected [ 1000.508512][ T12] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1000.521408][ T12] usb 6-1: config 6 interface 92 has no altsetting 0 [ 1000.598652][ T27] audit: type=1804 audit(1593992955.397:4272): pid=16744 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/911/bus" dev="sda1" ino=16382 res=1 [ 1000.730280][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1000.743996][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.763271][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1000.818390][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 23:49:15 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:15 executing program 3: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000680)={0x2d, 0x4, 0x0, {0x2, 0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x800, @dev}, 0x0, 0x0, 0x0, 0x3}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000000640)={0x0, &(0x7f0000000600)=[&(0x7f0000000100)="ee751f7df7f2c7cd309c3f39e0382c247cc0ec8e1f1913bdbec0b337b342d4fcdc0be11934e9035e2365a9001cfdc52ffbe828d343f410c8dbe5cb24648567590759b7d505b93c92b6f4bd5fa2cd69", 0x0, &(0x7f00000002c0)="d17f61cd172077c48e39b6686aa39e8a38061d8acc39c832aef0442097cddf6a5eba8f3a21f87dfe9edec8a155758d79cb8c5f42bd45c3a93ec8cb64f69092a0a14cc2d1b155db6a42858adaf9e956576fe39fe41284349239fb1909ff174038c0b1738c3acef4500167c1e32e7ba858", 0x0, &(0x7f0000000500)="d4b73ffa3ec78b40d6cc0c412ea4cb89dd1c8a758f24bccffe9b53bb772e18966c9ea40ae986c8b11396153a6be9a1cddeac4f5601fee437ea3c184b06bfc6638b0b85627996ee56dc1c0ea53a50249e22f8070ca1a719125e90a63e1e54b8876e61a9ec73653b775fa928f56c19edf6b26e20f78b076d6378fa55b650c940d7243043289884935dccc2c6f55d46fbf9eb765b01b8b0b07bcbf04d02b3c3a7e1497272245a4684765c8d6f442ca2f4b615a6d088aa", &(0x7f00000005c0)="fffdaeed"], 0x2}) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, r4) 23:49:15 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2000000000000000) [ 1001.078681][ T27] audit: type=1804 audit(1593992955.877:4273): pid=16753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/651/bus" dev="sda1" ino=16327 res=1 [ 1001.148663][ T12] option 6-1:6.92: GSM modem (1-port) converter detected [ 1001.152102][ T12] usb 6-1: USB disconnect, device number 44 [ 1001.188545][ T12] option 6-1:6.92: device disconnected 23:49:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001080)=ANY=[@ANYBLOB="9600f660b9b58b33000045563e43581754f4e6d8e9b409c7d1aec36bf4dc9b0d7959909632b52943c5e307ca2aaf916343ad"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:49:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000680)={0x2d, 0x4, 0x0, {0x2, 0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x800, @dev}, 0x0, 0x0, 0x0, 0x3}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000000640)={0x0, &(0x7f0000000600)=[&(0x7f0000000100)="ee751f7df7f2c7cd309c3f39e0382c247cc0ec8e1f1913bdbec0b337b342d4fcdc0be11934e9035e2365a9001cfdc52ffbe828d343f410c8dbe5cb24648567590759b7d505b93c92b6f4bd5fa2cd69", 0x0, &(0x7f00000002c0)="d17f61cd172077c48e39b6686aa39e8a38061d8acc39c832aef0442097cddf6a5eba8f3a21f87dfe9edec8a155758d79cb8c5f42bd45c3a93ec8cb64f69092a0a14cc2d1b155db6a42858adaf9e956576fe39fe41284349239fb1909ff174038c0b1738c3acef4500167c1e32e7ba858", 0x0, &(0x7f0000000500)="d4b73ffa3ec78b40d6cc0c412ea4cb89dd1c8a758f24bccffe9b53bb772e18966c9ea40ae986c8b11396153a6be9a1cddeac4f5601fee437ea3c184b06bfc6638b0b85627996ee56dc1c0ea53a50249e22f8070ca1a719125e90a63e1e54b8876e61a9ec73653b775fa928f56c19edf6b26e20f78b076d6378fa55b650c940d7243043289884935dccc2c6f55d46fbf9eb765b01b8b0b07bcbf04d02b3c3a7e1497272245a4684765c8d6f442ca2f4b615a6d088aa", &(0x7f00000005c0)="fffdaeed"], 0x2}) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, r4) [ 1001.349134][ T5] usb 5-1: new high-speed USB device number 23 using dummy_hcd 23:49:16 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="23212e2e71b86c951e5145d45cf7f14a391125f6edaf2b45f216a7a855631fe8e05be8100615b3ca4c01237ad27411f549d1262f7d2b2d6bd25f698f7e"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x220002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000140)=0x7fffffff, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) 23:49:16 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 1001.598791][ T5] usb 5-1: Using ep0 maxpacket: 32 23:49:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:16 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x6c00) [ 1001.691868][ T27] audit: type=1804 audit(1593992956.487:4274): pid=16791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/911/bus" dev="sda1" ino=16382 res=1 [ 1001.740936][ T27] audit: type=1804 audit(1593992956.487:4275): pid=16800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/911/bus" dev="sda1" ino=16382 res=1 23:49:16 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 23:49:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) [ 1001.827258][ T5] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1001.860779][ T5] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1001.871688][ T5] usb 5-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1001.895919][ T5] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1001.907332][ T27] audit: type=1804 audit(1593992956.587:4276): pid=16818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/912/bus" dev="sda1" ino=16382 res=1 [ 1001.946842][T16840] 8021q: VLANs not supported on lo [ 1001.998053][ T5027] usb 6-1: new high-speed USB device number 45 using dummy_hcd 23:49:16 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) [ 1002.107469][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1002.124407][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.155029][ T5] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1002.226556][ T5] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1002.238154][ T5027] usb 6-1: Using ep0 maxpacket: 32 [ 1002.329224][ T5] usb 5-1: config 0 descriptor?? [ 1002.401379][ T5027] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 1002.426422][ T5027] usb 6-1: config 6 has no interface number 0 [ 1002.473243][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1002.500736][ T5027] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1002.526168][ T5027] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1002.551862][ T5027] usb 6-1: config 6 interface 92 has no altsetting 0 [ 1002.638544][ T5] option 5-1:0.0: GSM modem (1-port) converter detected [ 1002.662189][ T5] usb 5-1: USB disconnect, device number 23 [ 1002.685133][ T5] option 5-1:0.0: device disconnected [ 1002.727381][ T5027] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1002.741075][ T5027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.758153][ T5027] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1002.803196][ T5027] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 23:49:17 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:17 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x7400) 23:49:17 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2100000000000000) [ 1003.128442][ T5027] option 6-1:6.92: GSM modem (1-port) converter detected [ 1003.140378][ T5027] usb 6-1: USB disconnect, device number 45 [ 1003.152414][ T5027] option 6-1:6.92: device disconnected [ 1003.436948][ T5] usb 5-1: new high-speed USB device number 24 using dummy_hcd 23:49:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1003.688494][ T5] usb 5-1: Using ep0 maxpacket: 32 23:49:18 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x7a00) [ 1003.897004][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1003.916632][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1003.930331][T16781] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1003.950705][ T5] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 23:49:18 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2200000000000000) [ 1004.147095][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1004.161206][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.177045][T16781] usb 6-1: Using ep0 maxpacket: 32 [ 1004.189151][ T5] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1004.243078][ T5] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1004.317799][ T5] usb 5-1: config 0 descriptor?? [ 1004.340029][T16781] usb 6-1: config 6 has an invalid interface number: 92 but max is 0 [ 1004.354178][T16781] usb 6-1: config 6 has no interface number 0 [ 1004.361079][T16781] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1004.372565][T16781] usb 6-1: config 6 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1004.384055][T16781] usb 6-1: config 6 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1004.395171][T16781] usb 6-1: config 6 interface 92 has no altsetting 0 23:49:19 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xff00) [ 1004.569088][T16781] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1004.580193][T16781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.596411][T16781] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1004.622027][ T5] option 5-1:0.0: GSM modem (1-port) converter detected [ 1004.630326][T16781] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1004.672531][ T5] usb 5-1: USB disconnect, device number 24 [ 1004.694150][ T5] option 5-1:0.0: device disconnected 23:49:19 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2300000000000000) [ 1004.926950][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 1004.926961][ T27] audit: type=1804 audit(1593992959.717:4292): pid=16939 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/654/bus" dev="sda1" ino=16382 res=1 [ 1005.008608][T16781] option 6-1:6.92: GSM modem (1-port) converter detected [ 1005.030364][T16781] usb 6-1: USB disconnect, device number 46 [ 1005.054010][T16781] option 6-1:6.92: device disconnected 23:49:19 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1005.293205][ T27] audit: type=1804 audit(1593992960.087:4293): pid=16918 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/915/bus" dev="sda1" ino=16320 res=1 [ 1005.436999][ T5] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1005.536399][ T27] audit: type=1804 audit(1593992960.327:4294): pid=16962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/654/bus" dev="sda1" ino=16382 res=1 [ 1005.696955][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 1005.917017][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1005.927965][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1005.938946][ T5] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1006.127337][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1006.136359][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.144867][ T5] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1006.168786][ T5] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1006.203959][ T5] usb 5-1: config 0 descriptor?? [ 1006.250069][ T5] option 5-1:0.0: GSM modem (1-port) converter detected [ 1006.449176][ T5027] usb 5-1: USB disconnect, device number 25 [ 1006.455852][ T5027] option 5-1:0.0: device disconnected 23:49:26 executing program 1: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$netrom(r1, &(0x7f0000000700)="2927a0ecca2d9860494e693bfbd6fbeeae02df66551765c868c2919105343774905096fb91b7e3992c3a7e1fc6ec5057dc433478423b373971dff5e9e7e636c9385f111a648a0f06b7f864aeb60f834250b4b4e02da108d43dd1b85b1a64678bc099770eec8ee20e41c9", 0x6a, 0x4c080, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000005c0)={{0x2, 0x0, @descriptor="907c7ad3d11a7326"}, 0x39, r0, [], "197d8604a8b3bebbcf73a05ed5cdfc58d8da0460e0e7cda52c6f49d4b6fae44fde1458c34a20581e39026c794208aa7bb74e5ba25d056228fe"}) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x5, 0x20}, 0xd8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000006c0)={0x40, 0x0, 0x1}, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x303200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@empty, @in=@loopback}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000780)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000180)="a61d5679125d05ec50929598472071c61a679b0020b1b0d8e120a87696f78a6b86d655d3a1fa69416ef5687136e97ac1c13e", 0x32, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000580)={r4, 0x96, &(0x7f00000004c0)=""/150}) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r5, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000680)='macvtap0\x00') sendmmsg(r5, &(0x7f0000001380), 0x40003ad, 0x2000000) 23:49:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x0, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1012.246965][ T5] usb 6-1: new high-speed USB device number 47 using dummy_hcd 23:49:27 executing program 3: openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) 23:49:27 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2400000000000000) 23:49:27 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xff0f) 23:49:27 executing program 4: syz_usb_connect(0x0, 0x8b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:27 executing program 1: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$netrom(r1, &(0x7f0000000700)="2927a0ecca2d9860494e693bfbd6fbeeae02df66551765c868c2919105343774905096fb91b7e3992c3a7e1fc6ec5057dc433478423b373971dff5e9e7e636c9385f111a648a0f06b7f864aeb60f834250b4b4e02da108d43dd1b85b1a64678bc099770eec8ee20e41c9", 0x6a, 0x4c080, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000005c0)={{0x2, 0x0, @descriptor="907c7ad3d11a7326"}, 0x39, r0, [], "197d8604a8b3bebbcf73a05ed5cdfc58d8da0460e0e7cda52c6f49d4b6fae44fde1458c34a20581e39026c794208aa7bb74e5ba25d056228fe"}) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x5, 0x20}, 0xd8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000006c0)={0x40, 0x0, 0x1}, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x303200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@empty, @in=@loopback}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000780)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000180)="a61d5679125d05ec50929598472071c61a679b0020b1b0d8e120a87696f78a6b86d655d3a1fa69416ef5687136e97ac1c13e", 0x32, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000580)={r4, 0x96, &(0x7f00000004c0)=""/150}) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r5, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000680)='macvtap0\x00') sendmmsg(r5, &(0x7f0000001380), 0x40003ad, 0x2000000) [ 1012.556945][ T5] usb 6-1: device descriptor read/64, error 18 [ 1012.666933][ T27] audit: type=1804 audit(1593992967.457:4295): pid=17012 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/916/bus" dev="sda1" ino=15954 res=1 23:49:27 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x22040, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 1012.749055][ T27] audit: type=1804 audit(1593992967.467:4296): pid=17015 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/655/bus" dev="sda1" ino=15969 res=1 23:49:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'blake2b-256\x00'}}}]}, 0x180}}, 0x0) [ 1012.866931][ T12] usb 5-1: new high-speed USB device number 26 using dummy_hcd 23:49:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) [ 1012.956953][ T5] usb 6-1: device descriptor read/64, error 18 23:49:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:27 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) [ 1013.146945][ T12] usb 5-1: Using ep0 maxpacket: 32 [ 1013.238306][ T5] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1013.357235][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1013.373975][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1013.397464][ T12] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1013.527307][ T5] usb 6-1: device descriptor read/64, error 18 [ 1013.566951][ T27] audit: type=1804 audit(1593992968.357:4297): pid=17022 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/916/bus" dev="sda1" ino=15954 res=1 [ 1013.605808][ T27] audit: type=1804 audit(1593992968.367:4298): pid=17023 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/655/bus" dev="sda1" ino=15969 res=1 [ 1013.629671][ T12] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1013.639493][ T27] audit: type=1804 audit(1593992968.427:4299): pid=17050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/655/bus" dev="sda1" ino=15969 res=1 [ 1013.665560][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.683805][ T12] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1013.708509][ T27] audit: type=1804 audit(1593992968.427:4300): pid=17023 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/655/bus" dev="sda1" ino=15969 res=1 [ 1013.723292][ T12] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1013.769384][ T27] audit: type=1804 audit(1593992968.537:4301): pid=17049 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/916/bus" dev="sda1" ino=15954 res=1 [ 1013.775041][ T12] usb 5-1: config 0 descriptor?? [ 1013.827022][ T27] audit: type=1804 audit(1593992968.537:4302): pid=17051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/916/bus" dev="sda1" ino=15954 res=1 [ 1013.852144][ T12] option 5-1:0.0: GSM modem (1-port) converter detected [ 1014.006939][ T5] usb 6-1: device descriptor read/64, error 18 [ 1014.054154][ T12] usb 5-1: USB disconnect, device number 26 [ 1014.060901][ T12] option 5-1:0.0: device disconnected [ 1014.137038][ T5] usb usb6-port1: attempt power cycle [ 1014.846939][ T5] usb 6-1: new high-speed USB device number 49 using dummy_hcd 23:49:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x0, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:29 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) 23:49:29 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x15180) 23:49:29 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2500000000000000) 23:49:29 executing program 4: syz_usb_connect(0x0, 0x82, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1015.027122][ T5] usb 6-1: device descriptor read/8, error -71 23:49:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1015.066952][ T27] audit: type=1804 audit(1593992969.857:4303): pid=17079 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/656/bus" dev="sda1" ino=16145 res=1 23:49:29 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) [ 1015.106291][ T27] audit: type=1804 audit(1593992969.857:4304): pid=17083 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/917/bus" dev="sda1" ino=16225 res=1 23:49:30 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:30 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) [ 1015.246954][ T5] usb 6-1: device descriptor read/8, error -71 [ 1015.277995][T10350] usb 5-1: new high-speed USB device number 27 using dummy_hcd 23:49:30 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:30 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1015.518040][T10350] usb 5-1: Using ep0 maxpacket: 32 [ 1015.717306][T10350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1015.735513][T10350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1015.747797][ T5] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1015.761764][T10350] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1015.847266][ T5] usb 6-1: Invalid ep0 maxpacket: 0 [ 1015.852626][ T5] usb usb6-port1: unable to enumerate USB device [ 1015.939532][T10350] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1015.950280][T10350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.959311][T10350] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1015.985293][T10350] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1016.024333][T10350] usb 5-1: config 0 descriptor?? [ 1016.068794][T10350] option 5-1:0.0: GSM modem (1-port) converter detected [ 1016.269722][T15636] usb 5-1: USB disconnect, device number 27 [ 1016.276402][T15636] option 5-1:0.0: device disconnected 23:49:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x0, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x6, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:32 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) 23:49:32 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:32 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2600000000000000) 23:49:32 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x40000) 23:49:32 executing program 4: syz_usb_connect(0x0, 0x6b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:32 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:32 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) [ 1018.097778][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1018.097789][ T27] audit: type=1804 audit(1593992972.897:4307): pid=17152 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/657/bus" dev="sda1" ino=16302 res=1 [ 1018.150576][ T27] audit: type=1804 audit(1593992972.927:4308): pid=17150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/918/bus" dev="sda1" ino=16316 res=1 [ 1018.176680][ T27] audit: type=1804 audit(1593992972.937:4309): pid=17159 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/918/bus" dev="sda1" ino=16316 res=1 23:49:33 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1018.215128][ T27] audit: type=1804 audit(1593992972.947:4310): pid=17159 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/918/bus" dev="sda1" ino=16316 res=1 23:49:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 23:49:33 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) 23:49:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 1018.316954][ T5] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1018.508677][ T3925] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1018.588521][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 1018.776924][ T3925] usb 6-1: device descriptor read/64, error 18 [ 1018.787289][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1018.814300][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1018.856067][ T5] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1018.910779][ T27] audit: type=1804 audit(1593992973.707:4311): pid=17189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/657/bus" dev="sda1" ino=16302 res=1 [ 1018.934963][ T27] audit: type=1804 audit(1593992973.707:4312): pid=17190 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/657/bus" dev="sda1" ino=16302 res=1 [ 1019.066998][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1019.076128][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.084522][ T5] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1019.108454][ T5] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1019.141864][ T5] usb 5-1: config 0 descriptor?? [ 1019.178678][ T5] option 5-1:0.0: GSM modem (1-port) converter detected [ 1019.206949][ T3925] usb 6-1: device descriptor read/64, error 18 [ 1019.379657][ T5] usb 5-1: USB disconnect, device number 28 [ 1019.386326][ T5] option 5-1:0.0: device disconnected [ 1019.496944][ T3925] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1019.786933][ T3925] usb 6-1: device descriptor read/64, error 18 [ 1020.186923][ T3925] usb 6-1: device descriptor read/64, error 18 [ 1020.317113][ T3925] usb usb6-port1: attempt power cycle 23:49:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 23:49:35 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x100000) 23:49:35 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2700000000000000) 23:49:35 executing program 4: syz_usb_connect(0x0, 0x5b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:35 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) [ 1021.026964][ T3925] usb 6-1: new high-speed USB device number 53 using dummy_hcd 23:49:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 1021.126981][ T27] audit: type=1804 audit(1593992975.917:4313): pid=17224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/658/bus" dev="sda1" ino=16293 res=1 23:49:35 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) 23:49:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 1021.222608][ T27] audit: type=1804 audit(1593992975.917:4314): pid=17216 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/919/bus" dev="sda1" ino=16346 res=1 23:49:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) 23:49:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 23:49:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1021.367669][T15636] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1021.508658][ T3925] usb 6-1: device not accepting address 53, error -71 [ 1021.636931][T15636] usb 5-1: Using ep0 maxpacket: 32 [ 1021.848379][T15636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1021.869802][T15636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1021.886922][ T3925] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1021.955619][ T27] audit: type=1804 audit(1593992976.747:4315): pid=17261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/658/bus" dev="sda1" ino=16293 res=1 [ 1021.994252][ T27] audit: type=1804 audit(1593992976.747:4316): pid=17263 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/658/bus" dev="sda1" ino=16293 res=1 [ 1021.997318][ T3925] usb 6-1: Using ep0 maxpacket: 32 [ 1022.116980][T15636] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1022.126117][T15636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.134525][T15636] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1022.158473][T15636] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1022.191822][T15636] usb 5-1: config 0 descriptor?? [ 1022.228681][T15636] option 5-1:0.0: GSM modem (1-port) converter detected [ 1022.237411][ T3925] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1022.245506][ T3925] usb 6-1: config 0 has no interface number 0 [ 1022.252003][ T3925] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1022.262974][ T3925] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1022.273987][ T3925] usb 6-1: config 0 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1022.284676][ T3925] usb 6-1: config 0 interface 92 has no altsetting 0 [ 1022.428855][T10350] usb 5-1: USB disconnect, device number 29 [ 1022.435371][T10350] option 5-1:0.0: device disconnected [ 1022.447226][ T3925] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1022.456301][ T3925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.466165][ T3925] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1022.490664][ T3925] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1022.525832][ T3925] usb 6-1: config 0 descriptor?? [ 1022.808339][ T3925] option 6-1:0.92: GSM modem (1-port) converter detected [ 1022.817603][ T3925] usb 6-1: USB disconnect, device number 54 [ 1022.824521][ T3925] option 6-1:0.92: device disconnected 23:49:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 23:49:38 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:49:38 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2800000000000000) 23:49:38 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1000000) 23:49:38 executing program 4: syz_usb_connect(0x0, 0x44, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 23:49:38 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1023.348922][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1023.348934][ T27] audit: type=1804 audit(1593992978.147:4319): pid=17304 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/920/bus" dev="sda1" ino=16330 res=1 [ 1023.444758][ T27] audit: type=1804 audit(1593992978.177:4320): pid=17309 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/659/bus" dev="sda1" ino=16290 res=1 23:49:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 23:49:38 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 23:49:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) [ 1023.616918][ T3925] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1023.647323][ T12] usb 6-1: new high-speed USB device number 55 using dummy_hcd 23:49:38 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1023.886977][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 1023.892133][ T3925] usb 5-1: Using ep0 maxpacket: 32 [ 1024.086938][ T12] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1024.095021][ T12] usb 6-1: config 0 has no interface number 0 [ 1024.101937][ T3925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1024.136144][ T12] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1024.169112][ T12] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1024.225600][ T12] usb 6-1: config 0 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1024.246524][ T27] audit: type=1804 audit(1593992979.037:4321): pid=17346 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/920/bus" dev="sda1" ino=16330 res=1 [ 1024.287249][ T12] usb 6-1: config 0 interface 92 has no altsetting 0 [ 1024.296503][ T27] audit: type=1804 audit(1593992979.037:4322): pid=17347 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/920/bus" dev="sda1" ino=16330 res=1 [ 1024.307608][ T3925] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1024.352723][ T27] audit: type=1804 audit(1593992979.137:4323): pid=17348 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/659/bus" dev="sda1" ino=16290 res=1 [ 1024.354952][ T3925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.384358][ T3925] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1024.409949][ T3925] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1024.422868][ T27] audit: type=1804 audit(1593992979.207:4324): pid=17349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/659/bus" dev="sda1" ino=16290 res=1 [ 1024.448577][ T3925] usb 5-1: config 0 descriptor?? [ 1024.479793][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1024.500322][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.506935][ T27] audit: type=1804 audit(1593992979.267:4325): pid=17348 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/659/bus" dev="sda1" ino=16290 res=1 [ 1024.512974][ T3925] option 5-1:0.0: GSM modem (1-port) converter detected [ 1024.553356][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1024.589918][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1024.626527][ T12] usb 6-1: config 0 descriptor?? [ 1024.714573][T16781] usb 5-1: USB disconnect, device number 30 [ 1024.723804][T16781] option 5-1:0.0: device disconnected [ 1024.908284][ T12] option 6-1:0.92: GSM modem (1-port) converter detected [ 1024.921121][ T12] usb 6-1: USB disconnect, device number 55 [ 1024.927820][ T12] option 6-1:0.92: device disconnected 23:49:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 23:49:40 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x1800002) 23:49:40 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 23:49:40 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2900000000000000) 23:49:40 executing program 4: syz_usb_connect(0x0, 0x3b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1025.457026][ T27] audit: type=1804 audit(1593992980.247:4326): pid=17394 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/660/bus" dev="sda1" ino=16290 res=1 23:49:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 23:49:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000005280)=[{{&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 1025.555138][ T27] audit: type=1804 audit(1593992980.287:4327): pid=17388 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/921/bus" dev="sda1" ino=16378 res=1 23:49:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6000, 0x0) 23:49:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1025.684800][T17409] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1025.702581][T15636] usb 6-1: new high-speed USB device number 56 using dummy_hcd 23:49:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1025.727034][T16781] usb 5-1: new high-speed USB device number 31 using dummy_hcd 23:49:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1025.966918][T16781] usb 5-1: Using ep0 maxpacket: 32 [ 1025.986950][T15636] usb 6-1: Using ep0 maxpacket: 32 [ 1026.167774][T16781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1026.209395][T15636] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1026.220989][T15636] usb 6-1: config 0 has no interface number 0 [ 1026.232119][ T27] audit: type=1804 audit(1593992981.027:4328): pid=17432 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/660/bus" dev="sda1" ino=16290 res=1 [ 1026.234902][T15636] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1026.299368][T15636] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1026.312547][T15636] usb 6-1: config 0 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1026.323506][T15636] usb 6-1: config 0 interface 92 has no altsetting 0 [ 1026.367080][T16781] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1026.376148][T16781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.406951][T16781] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1026.440345][T16781] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1026.475610][T16781] usb 5-1: config 0 descriptor?? [ 1026.517031][T15636] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1026.526042][T15636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.528353][T16781] option 5-1:0.0: GSM modem (1-port) converter detected [ 1026.536718][T15636] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1026.596914][T15636] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1026.633749][T15636] usb 6-1: config 0 descriptor?? [ 1026.739872][T10350] usb 5-1: USB disconnect, device number 31 [ 1026.753523][T10350] option 5-1:0.0: device disconnected [ 1026.928376][T15636] option 6-1:0.92: GSM modem (1-port) converter detected [ 1026.942597][T15636] usb 6-1: USB disconnect, device number 56 [ 1026.950860][T15636] option 6-1:0.92: device disconnected 23:49:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:42 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2a00000000000000) 23:49:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:42 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2000000) 23:49:42 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 23:49:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1027.716921][T15636] usb 5-1: new high-speed USB device number 32 using dummy_hcd 23:49:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1027.788611][ T12] usb 6-1: new high-speed USB device number 57 using dummy_hcd 23:49:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) [ 1027.976921][T15636] usb 5-1: Using ep0 maxpacket: 32 [ 1028.028984][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 1028.228733][ T12] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1028.236842][ T12] usb 6-1: config 0 has no interface number 0 [ 1028.265132][ T12] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1028.278302][ T12] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1028.290036][ T12] usb 6-1: config 0 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1028.302675][ T12] usb 6-1: config 0 interface 92 has no altsetting 0 [ 1028.387303][T15636] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1028.396462][T15636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.404787][T15636] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1028.428279][T15636] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1028.443726][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1028.443737][ T27] audit: type=1804 audit(1593992983.237:4336): pid=17494 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/661/bus" dev="sda1" ino=16296 res=1 [ 1028.471109][T15636] usb 5-1: config 0 descriptor?? [ 1028.490855][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1028.515077][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.530090][T15636] option 5-1:0.0: GSM modem (1-port) converter detected [ 1028.546941][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1028.570179][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1028.604200][ T12] usb 6-1: config 0 descriptor?? [ 1028.730288][T16781] usb 5-1: USB disconnect, device number 32 [ 1028.736494][T16781] option 5-1:0.0: device disconnected [ 1028.888246][ T12] option 6-1:0.92: GSM modem (1-port) converter detected [ 1028.903845][ T12] usb 6-1: USB disconnect, device number 57 [ 1028.910715][ T12] option 6-1:0.92: device disconnected 23:49:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:44 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2008001) 23:49:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) 23:49:44 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2b00000000000000) 23:49:44 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, 0x0) 23:49:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) 23:49:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1029.466966][ T27] audit: type=1804 audit(1593992984.257:4337): pid=17583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/662/bus" dev="sda1" ino=16297 res=1 23:49:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1029.519454][ T27] audit: type=1804 audit(1593992984.257:4338): pid=17584 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/923/bus" dev="sda1" ino=16296 res=1 23:49:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) 23:49:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) [ 1029.656936][ T12] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1029.688896][T16781] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1029.917030][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 1029.929545][T16781] usb 5-1: Using ep0 maxpacket: 32 [ 1030.086927][T16781] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1030.117558][ T12] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1030.129206][ T12] usb 6-1: config 0 has no interface number 0 [ 1030.142714][ T12] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1030.165952][ T12] usb 6-1: config 0 interface 92 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1030.187948][ T12] usb 6-1: config 0 interface 92 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1030.199344][ T12] usb 6-1: config 0 interface 92 has no altsetting 0 [ 1030.276964][ T27] audit: type=1804 audit(1593992985.067:4339): pid=17621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/923/bus" dev="sda1" ino=16296 res=1 [ 1030.321856][ T27] audit: type=1804 audit(1593992985.077:4340): pid=17624 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/662/bus" dev="sda1" ino=16297 res=1 [ 1030.356955][T16781] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1030.366052][T16781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.375985][T16781] usb 5-1: Product: syz [ 1030.380355][T16781] usb 5-1: Manufacturer: syz [ 1030.385004][T16781] usb 5-1: SerialNumber: syz [ 1030.391775][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1030.402397][T16781] usb 5-1: config 0 descriptor?? [ 1030.409171][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.417683][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1030.451706][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1030.487187][T16781] option 5-1:0.0: GSM modem (1-port) converter detected [ 1030.522318][ T12] usb 6-1: config 0 descriptor?? [ 1030.688412][T15636] usb 5-1: USB disconnect, device number 33 [ 1030.695921][T15636] option 5-1:0.0: device disconnected [ 1030.808658][ T12] option 6-1:0.92: GSM modem (1-port) converter detected [ 1030.819000][ T12] usb 6-1: USB disconnect, device number 58 [ 1030.826085][ T12] option 6-1:0.92: device disconnected 23:49:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 23:49:46 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2c00000000000000) 23:49:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:46 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2040000) 23:49:46 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, 0x0) 23:49:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 23:49:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1031.377119][ T27] audit: type=1804 audit(1593992986.167:4341): pid=17669 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/663/bus" dev="sda1" ino=16292 res=1 [ 1031.454718][ T27] audit: type=1804 audit(1593992986.177:4342): pid=17666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/924/bus" dev="sda1" ino=16293 res=1 23:49:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 23:49:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1031.617673][ T891] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1031.625253][T15636] usb 5-1: new high-speed USB device number 34 using dummy_hcd 23:49:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 23:49:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1031.876922][T15636] usb 5-1: Using ep0 maxpacket: 32 [ 1031.882096][ T891] usb 6-1: Using ep0 maxpacket: 32 [ 1032.058798][T15636] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1032.084748][ T27] audit: type=1804 audit(1593992986.877:4343): pid=17709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/924/bus" dev="sda1" ino=16293 res=1 [ 1032.139381][ T891] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1032.155952][ T891] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1032.182029][ T891] usb 6-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1032.196061][ T27] audit: type=1804 audit(1593992986.987:4344): pid=17710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/663/bus" dev="sda1" ino=16292 res=1 [ 1032.205699][ T891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1032.272666][ T27] audit: type=1804 audit(1593992987.067:4345): pid=17711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/663/bus" dev="sda1" ino=16292 res=1 [ 1032.347461][T15636] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1032.356493][T15636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.380876][T15636] usb 5-1: Product: syz [ 1032.389463][T15636] usb 5-1: Manufacturer: syz [ 1032.400253][T15636] usb 5-1: SerialNumber: syz [ 1032.414923][T15636] usb 5-1: config 0 descriptor?? [ 1032.428672][ T891] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1032.441100][ T891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.461347][ T891] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1032.489020][T15636] option 5-1:0.0: GSM modem (1-port) converter detected [ 1032.526314][ T891] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1032.595529][ T891] usb 6-1: config 0 descriptor?? [ 1032.692241][ T12] usb 5-1: USB disconnect, device number 34 [ 1032.710679][ T12] option 5-1:0.0: device disconnected [ 1032.898642][ T891] option 6-1:0.0: GSM modem (1-port) converter detected [ 1032.913689][ T891] usb 6-1: USB disconnect, device number 59 [ 1032.920492][ T891] option 6-1:0.0: device disconnected 23:49:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 23:49:48 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3000000) 23:49:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:48 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2d00000000000000) 23:49:48 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, 0x0) 23:49:48 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 23:49:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) [ 1033.446917][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1033.446927][ T27] audit: type=1804 audit(1593992988.237:4347): pid=17760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/664/bus" dev="sda1" ino=16292 res=1 23:49:48 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 23:49:48 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1033.579678][ T27] audit: type=1804 audit(1593992988.277:4348): pid=17759 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/925/bus" dev="sda1" ino=16293 res=1 [ 1033.686935][ T891] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1033.694575][T15636] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1033.938472][ T891] usb 6-1: Using ep0 maxpacket: 32 [ 1033.943632][T15636] usb 5-1: Using ep0 maxpacket: 32 [ 1034.106907][T15636] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1034.138730][ T891] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1034.155115][ T891] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1034.181184][ T891] usb 6-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1034.190360][ T27] audit: type=1804 audit(1593992988.977:4349): pid=17796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/925/bus" dev="sda1" ino=16293 res=1 [ 1034.204724][ T891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1034.242289][ T27] audit: type=1804 audit(1593992989.037:4350): pid=17794 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/664/bus" dev="sda1" ino=16292 res=1 [ 1034.265189][ T27] audit: type=1804 audit(1593992989.037:4351): pid=17797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/664/bus" dev="sda1" ino=16292 res=1 [ 1034.346969][T15636] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1034.355979][T15636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.364526][T15636] usb 5-1: Product: syz [ 1034.368973][T15636] usb 5-1: Manufacturer: syz [ 1034.373541][T15636] usb 5-1: SerialNumber: syz [ 1034.380333][T15636] usb 5-1: config 0 descriptor?? [ 1034.397739][ T891] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1034.406742][ T891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.415181][ T891] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1034.440253][T15636] option 5-1:0.0: GSM modem (1-port) converter detected [ 1034.447242][ T891] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1034.484923][ T891] usb 6-1: config 0 descriptor?? [ 1034.640513][ T12] usb 5-1: USB disconnect, device number 35 [ 1034.646788][ T12] option 5-1:0.0: device disconnected [ 1034.778280][ T891] option 6-1:0.0: GSM modem (1-port) converter detected [ 1034.791969][ T891] usb 6-1: USB disconnect, device number 60 [ 1034.798733][ T891] option 6-1:0.0: device disconnected 23:49:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 23:49:50 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x4000000) 23:49:50 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2e00000000000000) 23:49:50 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1035.337026][ T27] audit: type=1804 audit(1593992990.127:4352): pid=17844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/665/bus" dev="sda1" ino=16292 res=1 23:49:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) [ 1035.374358][ T27] audit: type=1804 audit(1593992990.137:4353): pid=17839 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/926/bus" dev="sda1" ino=16317 res=1 23:49:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 23:49:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x68}}, 0x0) [ 1035.558429][ T5] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1035.576949][ T12] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1035.796942][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 1035.847281][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 1036.067519][ T12] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1036.084348][ T27] audit: type=1804 audit(1593992990.877:4354): pid=17881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/926/bus" dev="sda1" ino=16317 res=1 [ 1036.111594][ T12] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1036.135059][ T12] usb 6-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1036.154091][ T27] audit: type=1804 audit(1593992990.927:4355): pid=17884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/926/bus" dev="sda1" ino=16317 res=1 [ 1036.159170][ T12] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1036.201950][ T27] audit: type=1804 audit(1593992990.927:4356): pid=17881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/926/bus" dev="sda1" ino=16317 res=1 [ 1036.229439][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1036.239292][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.248444][ T5] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1036.272832][ T5] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1036.308795][ T5] usb 5-1: config 0 descriptor?? [ 1036.360293][ T5] option 5-1:0.0: GSM modem (1-port) converter detected [ 1036.381509][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1036.394355][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.405311][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1036.431140][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1036.466709][ T12] usb 6-1: config 0 descriptor?? [ 1036.561402][ T5] usb 5-1: USB disconnect, device number 36 [ 1036.567840][ T5] option 5-1:0.0: device disconnected [ 1036.748404][ T12] option 6-1:0.0: GSM modem (1-port) converter detected [ 1036.764726][ T12] usb 6-1: USB disconnect, device number 61 [ 1036.772611][ T12] option 6-1:0.0: device disconnected 23:49:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x68}}, 0x0) 23:49:52 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2f00000000000000) 23:49:52 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x5000000) 23:49:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:52 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x68}}, 0x0) 23:49:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) 23:49:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1037.526949][T10350] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1037.558754][ T12] usb 6-1: new high-speed USB device number 62 using dummy_hcd 23:49:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) 23:49:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) [ 1037.786926][T10350] usb 5-1: Using ep0 maxpacket: 32 [ 1037.817534][ T12] usb 6-1: Using ep0 maxpacket: 32 23:49:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) [ 1037.947255][T10350] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1038.048937][ T12] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1038.058368][ T12] usb 6-1: config 0 has no interface number 0 [ 1038.064493][ T12] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1038.116914][ T12] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1038.136919][ T12] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1038.197386][T10350] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1038.206497][T10350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.215067][T10350] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1038.239559][T10350] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1038.278104][T10350] usb 5-1: config 0 descriptor?? 23:49:53 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3000000000000000) 23:49:53 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x6000000) [ 1038.318994][T10350] option 5-1:0.0: GSM modem (1-port) converter detected [ 1038.368493][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1038.380883][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.402361][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1038.428289][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1038.462483][ T12] usb 6-1: config 0 descriptor?? [ 1038.478602][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1038.478613][ T27] audit: type=1804 audit(1593992993.277:4365): pid=17989 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/667/bus" dev="sda1" ino=16378 res=1 [ 1038.512550][ T27] audit: type=1804 audit(1593992993.287:4366): pid=17992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/928/bus" dev="sda1" ino=16383 res=1 [ 1038.519856][T10350] usb 5-1: USB disconnect, device number 37 [ 1038.575882][T10350] option 5-1:0.0: device disconnected [ 1038.778352][ T12] option 6-1:0.92: GSM modem (1-port) converter detected [ 1038.807058][ T12] usb 6-1: USB disconnect, device number 62 [ 1038.828247][ T12] option 6-1:0.92: device disconnected [ 1039.033679][ T27] audit: type=1804 audit(1593992993.827:4367): pid=17993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/667/bus" dev="sda1" ino=16378 res=1 [ 1039.061383][ T27] audit: type=1804 audit(1593992993.857:4368): pid=17996 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/928/bus" dev="sda1" ino=16383 res=1 23:49:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0xac, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e52fff6e7c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x88, 0xc6e}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:54 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3100000000000000) 23:49:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) 23:49:54 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1039.378418][ T27] audit: type=1804 audit(1593992994.177:4369): pid=18032 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/668/bus" dev="sda1" ino=16292 res=1 23:49:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) 23:49:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 23:49:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:54 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x6040000) 23:49:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) [ 1039.607397][ T5027] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1039.616944][ T9544] usb 6-1: new high-speed USB device number 63 using dummy_hcd 23:49:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1039.856899][ T5027] usb 5-1: Using ep0 maxpacket: 32 [ 1039.869072][ T27] audit: type=1804 audit(1593992994.667:4370): pid=18065 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/929/bus" dev="sda1" ino=16320 res=1 [ 1039.898453][ T9544] usb 6-1: Using ep0 maxpacket: 32 [ 1040.027171][ T5027] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1040.134482][ T27] audit: type=1804 audit(1593992994.927:4371): pid=18070 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/668/bus" dev="sda1" ino=16292 res=1 [ 1040.169321][ T9544] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1040.180769][ T9544] usb 6-1: config 0 has no interface number 0 [ 1040.197235][ T9544] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1040.220428][ T9544] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1040.248390][ T9544] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1040.297005][ T5027] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1040.306029][ T5027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.326987][ T5027] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1040.353151][ T5027] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1040.429102][ T5027] usb 5-1: config 0 descriptor?? [ 1040.438887][ T9544] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1040.448697][ T27] audit: type=1804 audit(1593992995.247:4372): pid=18067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/929/bus" dev="sda1" ino=16320 res=1 [ 1040.452590][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.474351][ T5027] option 5-1:0.0: GSM modem (1-port) converter detected [ 1040.511130][ T9544] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1040.541594][ T9544] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1040.578233][ T9544] usb 6-1: config 0 descriptor?? [ 1040.618328][ T9544] option 6-1:0.92: GSM modem (1-port) converter detected [ 1040.689318][ T5027] usb 5-1: USB disconnect, device number 38 [ 1040.695582][ T5027] option 5-1:0.0: device disconnected [ 1040.819068][T10350] usb 6-1: USB disconnect, device number 63 [ 1040.825769][T10350] option 6-1:0.92: device disconnected 23:49:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x8b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [@hid_hid={0x9, 0x21, 0x6, 0xa9, 0x1, {0x22, 0x6c8}}], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 23:49:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:56 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3200000000000000) 23:49:56 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x7000000) 23:49:56 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1041.426983][ T27] audit: type=1804 audit(1593992996.217:4373): pid=18112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/930/bus" dev="sda1" ino=16327 res=1 23:49:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) 23:49:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1041.522310][ T27] audit: type=1804 audit(1593992996.257:4374): pid=18115 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/669/bus" dev="sda1" ino=16316 res=1 [ 1041.531080][T18133] tmpfs: Bad value for 'mpol' [ 1041.621481][T18133] tmpfs: Bad value for 'mpol' 23:49:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) [ 1041.646960][ T12] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1041.666914][T10350] usb 6-1: new high-speed USB device number 64 using dummy_hcd 23:49:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1041.739252][T18154] tmpfs: Bad value for 'mpol' [ 1041.906896][ T12] usb 5-1: Using ep0 maxpacket: 32 [ 1041.926915][T10350] usb 6-1: Using ep0 maxpacket: 32 [ 1042.086978][ T12] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1042.127222][T10350] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1042.142197][T10350] usb 6-1: config 0 has no interface number 0 [ 1042.163127][T10350] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1042.190133][T10350] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1042.214619][T10350] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1042.376952][ T12] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1042.385982][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.394677][ T12] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1042.398764][T10350] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1042.418647][ T12] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1042.448545][T10350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.463110][ T12] usb 5-1: config 0 descriptor?? [ 1042.468242][T10350] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1042.494685][T10350] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1042.527798][T10350] usb 6-1: config 0 descriptor?? [ 1042.538605][ T12] option 5-1:0.0: GSM modem (1-port) converter detected [ 1042.569126][T10350] option 6-1:0.92: GSM modem (1-port) converter detected [ 1042.735710][T10350] usb 5-1: USB disconnect, device number 39 [ 1042.741951][T10350] option 5-1:0.0: device disconnected [ 1042.769508][ T5027] usb 6-1: USB disconnect, device number 64 [ 1042.776138][ T5027] option 6-1:0.92: device disconnected 23:49:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x82, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:49:58 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) 23:49:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:58 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x8000000) 23:49:58 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3300000000000000) 23:49:58 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0xf7, &(0x7f00000005c0)={0x5, 0xf, 0xf7, 0x5, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1043.329526][T18209] tmpfs: Bad value for 'mpol' 23:49:58 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) 23:49:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1043.459366][T18225] tmpfs: Bad value for 'mpol' 23:49:58 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) 23:49:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:49:58 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) [ 1043.607066][ T12] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1043.617039][ T5] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1043.866958][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 1043.872189][ T12] usb 5-1: Using ep0 maxpacket: 32 [ 1044.097726][ T5] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1044.107073][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1044.107084][ T27] audit: type=1804 audit(1593992998.897:4379): pid=18263 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/931/bus" dev="sda1" ino=16065 res=1 [ 1044.120254][ T5] usb 6-1: config 0 has no interface number 0 [ 1044.196561][ T5] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1044.222013][ T5] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1044.230484][ T27] audit: type=1804 audit(1593992999.027:4380): pid=18265 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/670/bus" dev="sda1" ino=16002 res=1 [ 1044.237388][ T5] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1044.306657][ T27] audit: type=1804 audit(1593992999.097:4381): pid=18266 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/670/bus" dev="sda1" ino=16002 res=1 [ 1044.329760][ T27] audit: type=1804 audit(1593992999.097:4382): pid=18265 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/670/bus" dev="sda1" ino=16002 res=1 [ 1044.337326][ T12] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1044.386933][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.394982][ T12] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1044.419595][ T12] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1044.455492][ T12] usb 5-1: config 0 descriptor?? [ 1044.508506][ T5] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1044.519256][ T12] option 5-1:0.0: GSM modem (1-port) converter detected [ 1044.534845][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.543592][ T5] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1044.567776][ T5] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1044.601646][ T5] usb 6-1: config 0 descriptor?? [ 1044.648924][ T5] option 6-1:0.92: GSM modem (1-port) converter detected [ 1044.736117][ T5] usb 5-1: USB disconnect, device number 40 [ 1044.744062][ T5] option 5-1:0.0: device disconnected [ 1044.863116][T10350] usb 6-1: USB disconnect, device number 65 [ 1044.871361][T10350] option 6-1:0.92: device disconnected [ 1045.197911][ T0] NOHZ: local_softirq_pending 08 23:50:00 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) 23:50:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:50:00 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x8200000) 23:50:00 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3400000000000000) 23:50:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x82, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:00 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0xe3, &(0x7f00000005c0)={0x5, 0xf, 0xe3, 0x4, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1045.476904][ T27] audit: type=1804 audit(1593993000.267:4383): pid=18307 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/932/bus" dev="sda1" ino=16210 res=1 23:50:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:50:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) [ 1045.552862][ T27] audit: type=1804 audit(1593993000.267:4384): pid=18312 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/671/bus" dev="sda1" ino=16243 res=1 23:50:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) [ 1045.686892][T10350] usb 5-1: new high-speed USB device number 41 using dummy_hcd 23:50:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:50:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) [ 1045.759583][ T12] usb 6-1: new high-speed USB device number 66 using dummy_hcd 23:50:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1045.967036][T10350] usb 5-1: Using ep0 maxpacket: 32 23:50:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, 0x0, 0x0) [ 1046.006880][ T12] usb 6-1: Using ep0 maxpacket: 32 23:50:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1046.238819][ T12] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1046.258359][ T12] usb 6-1: config 0 has no interface number 0 [ 1046.272003][ T12] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1046.311598][ T12] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1046.327244][T10350] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1046.335222][ T12] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1046.336277][T10350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.336295][T10350] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1046.336345][T10350] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1046.419437][ T27] audit: type=1804 audit(1593993001.217:4385): pid=18374 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/932/bus" dev="sda1" ino=16210 res=1 [ 1046.557617][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1046.570222][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.590588][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1046.636321][T10350] usb 5-1: config 0 descriptor?? [ 1046.647944][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1046.676971][ T27] audit: type=1804 audit(1593993001.467:4386): pid=18323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/671/bus" dev="sda1" ino=16243 res=1 [ 1046.704140][T10350] option 5-1:0.0: GSM modem (1-port) converter detected [ 1046.746450][ T12] usb 6-1: config 0 descriptor?? [ 1046.793674][ T27] audit: type=1804 audit(1593993001.587:4387): pid=18380 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/671/bus" dev="sda1" ino=16243 res=1 [ 1046.821313][ T12] option 6-1:0.92: GSM modem (1-port) converter detected [ 1046.829616][ T27] audit: type=1804 audit(1593993001.587:4388): pid=18379 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/671/bus" dev="sda1" ino=16243 res=1 [ 1046.905453][T10350] usb 5-1: USB disconnect, device number 41 [ 1046.912965][T10350] option 5-1:0.0: device disconnected 23:50:01 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x9000000) 23:50:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, 0x0, 0x0) [ 1047.022883][ T12] usb 6-1: USB disconnect, device number 66 [ 1047.032308][ T12] option 6-1:0.92: device disconnected 23:50:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x6b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x4, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:02 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:50:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, 0x0, 0x0) 23:50:02 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3500000000000000) 23:50:02 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0xd9, &(0x7f00000005c0)={0x5, 0xf, 0xd9, 0x3, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:02 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 23:50:02 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 23:50:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1047.866899][ T5027] usb 5-1: new high-speed USB device number 42 using dummy_hcd 23:50:02 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 1047.946936][T15636] usb 6-1: new high-speed USB device number 67 using dummy_hcd 23:50:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x8}}]}}]}, 0x3c}}, 0x0) [ 1048.102382][T18469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1048.111809][ T5027] usb 5-1: Using ep0 maxpacket: 32 [ 1048.122691][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1048.186969][T15636] usb 6-1: Using ep0 maxpacket: 32 23:50:03 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xa000000) 23:50:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1048.386911][T15636] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1048.400381][T15636] usb 6-1: config 0 has no interface number 0 [ 1048.412661][T15636] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1048.433358][T15636] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1048.445111][T15636] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1048.507323][ T5027] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1048.526053][ T5027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.546070][ T5027] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1048.576435][ T5027] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1048.617056][ T5027] usb 5-1: config 0 descriptor?? [ 1048.649053][T15636] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1048.660001][ T5027] option 5-1:0.0: GSM modem (1-port) converter detected [ 1048.672059][T15636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.684767][T15636] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1048.711570][T15636] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1048.748898][T15636] usb 6-1: config 0 descriptor?? [ 1048.788622][T15636] option 6-1:0.92: GSM modem (1-port) converter detected [ 1048.861692][T15636] usb 5-1: USB disconnect, device number 42 [ 1048.871376][T15636] option 5-1:0.0: device disconnected [ 1049.000534][ T12] usb 6-1: USB disconnect, device number 67 [ 1049.011141][ T12] option 6-1:0.92: device disconnected 23:50:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x6b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x4, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x8}}]}}]}, 0x3c}}, 0x0) 23:50:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:50:04 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3600000000000000) 23:50:04 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xb000000) 23:50:04 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0xc1, &(0x7f00000005c0)={0x5, 0xf, 0xc1, 0x2, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1049.548525][T18529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1049.591086][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1049.591100][ T27] audit: type=1804 audit(1593993004.387:4396): pid=18535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/935/bus" dev="sda1" ino=16293 res=1 23:50:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) [ 1049.702908][ T27] audit: type=1804 audit(1593993004.387:4397): pid=18531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/673/bus" dev="sda1" ino=16310 res=1 23:50:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1049.787926][T18554] tmpfs: Bad value for 'mpol' [ 1049.826963][T26642] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1049.849487][T18554] tmpfs: Bad value for 'mpol' 23:50:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) [ 1049.888610][ T12] usb 6-1: new high-speed USB device number 68 using dummy_hcd 23:50:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1050.020452][T18571] tmpfs: Bad value for 'mpol' [ 1050.067027][T26642] usb 5-1: Using ep0 maxpacket: 32 23:50:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) [ 1050.126927][ T12] usb 6-1: Using ep0 maxpacket: 32 23:50:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1050.190738][T18581] tmpfs: Bad value for 'mpol' [ 1050.328932][ T12] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1050.348657][ T12] usb 6-1: config 0 has no interface number 0 [ 1050.354740][ T12] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1050.408469][ T12] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1050.443372][ T12] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1050.518972][T26642] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1050.536909][T26642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.544928][T26642] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1050.592871][ T27] audit: type=1804 audit(1593993005.387:4398): pid=18594 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/673/bus" dev="sda1" ino=16310 res=1 [ 1050.606893][T26642] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1050.653790][ T12] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1050.662908][ T27] audit: type=1804 audit(1593993005.447:4399): pid=18595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/935/bus" dev="sda1" ino=16293 res=1 [ 1050.677848][T26642] usb 5-1: config 0 descriptor?? [ 1050.694943][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.714092][ T12] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1050.724083][ T27] audit: type=1804 audit(1593993005.507:4400): pid=18597 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/935/bus" dev="sda1" ino=16293 res=1 [ 1050.764964][ T12] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1050.802183][T26642] option 5-1:0.0: GSM modem (1-port) converter detected [ 1050.821343][ T27] audit: type=1804 audit(1593993005.557:4401): pid=18597 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/935/bus" dev="sda1" ino=16293 res=1 [ 1050.867506][ T12] usb 6-1: config 0 descriptor?? [ 1050.919776][ T12] option 6-1:0.92: GSM modem (1-port) converter detected [ 1051.003985][T18461] usb 5-1: USB disconnect, device number 43 [ 1051.010601][T18461] option 5-1:0.0: device disconnected [ 1051.119995][ T5] usb 6-1: USB disconnect, device number 68 [ 1051.138497][ T5] option 6-1:0.92: device disconnected 23:50:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x6b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x4, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) 23:50:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "b90005"}, "c1ead7dd"}}}}, 0x32) 23:50:06 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3700000000000000) 23:50:06 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xc000000) 23:50:06 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0xc1, &(0x7f00000005c0)={0x5, 0xf, 0xc1, 0x2, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1051.692695][T18644] tmpfs: Bad value for 'mpol' [ 1051.699943][ T27] audit: type=1804 audit(1593993006.497:4402): pid=18635 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/674/bus" dev="sda1" ino=16378 res=1 23:50:06 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) [ 1051.797254][ T27] audit: type=1804 audit(1593993006.507:4403): pid=18638 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/936/bus" dev="sda1" ino=16327 res=1 23:50:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1051.926945][ T5] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1051.948586][T26642] usb 6-1: new high-speed USB device number 69 using dummy_hcd 23:50:06 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) 23:50:07 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) [ 1052.167038][ T5] usb 5-1: Using ep0 maxpacket: 32 23:50:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "b90005"}, "c1ead7dd"}}}}, 0x32) [ 1052.206947][T26642] usb 6-1: Using ep0 maxpacket: 32 23:50:07 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) [ 1052.427188][T26642] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1052.438854][T26642] usb 6-1: config 0 has no interface number 0 [ 1052.451811][T26642] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1052.491467][T26642] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1052.524332][T26642] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1052.535925][ T27] audit: type=1804 audit(1593993007.327:4404): pid=18692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/936/bus" dev="sda1" ino=16327 res=1 [ 1052.539089][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1052.581641][ T27] audit: type=1804 audit(1593993007.357:4405): pid=18694 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/936/bus" dev="sda1" ino=16327 res=1 [ 1052.626897][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.634977][ T5] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1052.696910][ T5] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1052.730518][ T5] usb 5-1: config 0 descriptor?? [ 1052.768963][ T5] option 5-1:0.0: GSM modem (1-port) converter detected [ 1052.817017][T26642] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1052.826136][T26642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.834417][T26642] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1052.857984][T26642] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1052.891208][T26642] usb 6-1: config 0 descriptor?? [ 1052.938590][T26642] option 6-1:0.92: GSM modem (1-port) converter detected [ 1052.969086][T18461] usb 5-1: USB disconnect, device number 44 [ 1052.975321][T18461] option 5-1:0.0: device disconnected [ 1053.139722][T26642] usb 6-1: USB disconnect, device number 69 [ 1053.146474][T26642] option 6-1:0.92: device disconnected 23:50:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x82, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:08 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) 23:50:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}}}}}, 0x2e) 23:50:08 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3800000000000000) 23:50:08 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xd000000) 23:50:08 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0xc1, &(0x7f00000005c0)={0x5, 0xf, 0xc1, 0x2, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:08 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa}}}}]}) 23:50:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}}}}}, 0x2e) 23:50:08 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1053.976957][T17875] usb 5-1: new high-speed USB device number 45 using dummy_hcd 23:50:08 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1054.046895][ T5] usb 6-1: new high-speed USB device number 70 using dummy_hcd 23:50:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}}}}}, 0x2e) 23:50:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1054.236900][T17875] usb 5-1: Using ep0 maxpacket: 32 [ 1054.306931][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 1054.537345][ T5] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1054.548862][ T5] usb 6-1: config 0 has no interface number 0 [ 1054.565971][ T5] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1054.594666][ T5] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1054.617377][T17875] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1054.627643][ T5] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1054.646316][T17875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.663581][ T5] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1054.675357][T17875] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1054.676923][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1054.676934][ T27] audit: type=1804 audit(1593993009.467:4410): pid=18795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/937/bus" dev="sda1" ino=16346 res=1 [ 1054.709706][T17875] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1054.732240][ T27] audit: type=1804 audit(1593993009.527:4411): pid=18796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/937/bus" dev="sda1" ino=16346 res=1 [ 1054.793863][T17875] usb 5-1: config 0 descriptor?? [ 1054.800616][ T27] audit: type=1804 audit(1593993009.587:4412): pid=18797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/675/bus" dev="sda1" ino=16292 res=1 [ 1054.838484][T17875] option 5-1:0.0: GSM modem (1-port) converter detected [ 1054.867050][ T27] audit: type=1804 audit(1593993009.657:4413): pid=18800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/675/bus" dev="sda1" ino=16292 res=1 [ 1054.892821][ T27] audit: type=1804 audit(1593993009.667:4414): pid=18800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/675/bus" dev="sda1" ino=16292 res=1 [ 1054.946993][ T5] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1054.956027][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.976892][ T5] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1055.000701][ T5] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1055.036026][ T5] usb 6-1: config 0 descriptor?? [ 1055.048785][T17875] usb 5-1: USB disconnect, device number 45 [ 1055.060556][T17875] option 5-1:0.0: device disconnected [ 1055.089317][ T5] option 6-1:0.92: GSM modem (1-port) converter detected [ 1055.289287][T26642] usb 6-1: USB disconnect, device number 70 [ 1055.296028][T26642] option 6-1:0.92: device disconnected 23:50:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x82, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 23:50:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ea"}}}}, 0x30) 23:50:10 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3900000000000000) 23:50:10 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xe000000) 23:50:10 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0xd9, &(0x7f00000005c0)={0x5, 0xf, 0xd9, 0x3, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) [ 1055.926935][ T27] audit: type=1804 audit(1593993010.717:4415): pid=18844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/938/bus" dev="sda1" ino=16307 res=1 23:50:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ea"}}}}, 0x30) [ 1055.955112][ T27] audit: type=1804 audit(1593993010.747:4416): pid=18843 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir665368793/syzkaller.GkfwQY/676/bus" dev="sda1" ino=16302 res=1 23:50:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 1056.127434][T18461] usb 5-1: new high-speed USB device number 46 using dummy_hcd 23:50:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 1056.168774][T26642] usb 6-1: new high-speed USB device number 71 using dummy_hcd 23:50:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ea"}}}}, 0x30) 23:50:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) [ 1056.368288][T18461] usb 5-1: Using ep0 maxpacket: 32 [ 1056.426907][T26642] usb 6-1: Using ep0 maxpacket: 32 23:50:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7"}}}}, 0x31) [ 1056.629203][T26642] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 1056.643049][T26642] usb 6-1: config 0 has no interface number 0 [ 1056.663602][T26642] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1136, setting to 64 [ 1056.690937][ T27] audit: type=1804 audit(1593993011.487:4417): pid=18891 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/938/bus" dev="sda1" ino=16307 res=1 [ 1056.705835][T26642] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x7 has an invalid bInterval 18, changing to 8 [ 1056.727162][T18461] usb 5-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1056.736251][T18461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.769216][T18461] usb 5-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1056.788985][ T27] audit: type=1804 audit(1593993011.567:4418): pid=18892 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/938/bus" dev="sda1" ino=16307 res=1 [ 1056.802583][T26642] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1056.831842][ T27] audit: type=1804 audit(1593993011.617:4419): pid=18893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir298903383/syzkaller.Azj0Qy/938/bus" dev="sda1" ino=16307 res=1 [ 1056.845910][T18461] usb 5-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1056.896903][T26642] usb 6-1: config 0 interface 92 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1056.911331][T18461] usb 5-1: config 0 descriptor?? [ 1056.949108][T18461] option 5-1:0.0: GSM modem (1-port) converter detected [ 1057.066949][T26642] usb 6-1: New USB device found, idVendor=12d1, idProduct=6d73, bcdDevice=5a.f7 [ 1057.076068][T26642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.096920][T26642] usb 6-1: Product: မ䂸᫲㶙皖쏚콖윻积募එ䲥免譇焼閛閉ৄ擎⤸㫅猱ᒾ瓷媠ﺸᤉ웵奞Ϛ鼥둼㎚뽻㮛﨔㓾㓀㜥学蓕ᇔ搆곒輣镾鼹䜹ᐾ蒆絠ኼ礙盚景᷶耼멲㐊傮씀䅱⧷낐궢⥊楚⒕쯾桌㧎 [ 1057.120668][T26642] usb 6-1: SerialNumber: ⻘ඁ뿟ꔗ煤휴៯ﰙ韌立츛ꀢ举幓榘䫇さ擶쓳览⛯㪳㔌샜泛甑ℭဥ懶厷꫹汤稏Бឨ譢敯扮ౚȡ⁆茩㝃䌝┽鶽䜺瀲⦼ᦒ롇卒룶綃꯲鿖ꌿ連뭮╎阩槸ⲿ⫦ᦷ⓸퍂八㝷휹엧퐇史蜅Ꮒ淁塼뼤ꉔ极᎔輪㽘ﰬ溽䂛퓬ꊌ牫蜒䇼殘 [ 1057.159072][T18461] usb 5-1: USB disconnect, device number 46 [ 1057.165807][T26642] usb 6-1: config 0 descriptor?? [ 1057.172073][T18461] option 5-1:0.0: device disconnected [ 1057.218576][T26642] option 6-1:0.92: GSM modem (1-port) converter detected [ 1057.436661][T18461] usb 6-1: USB disconnect, device number 71 [ 1057.446359][T18461] option 6-1:0.92: device disconnected 23:50:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x82, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x5, 0xff, 0x1, 0x7b, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x470, 0x0, 0x81, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x43e71a2b97c86dd1, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xb, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x12, 0x9b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5680}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x8, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7f, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd9, 0x8}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6e, 0x8, 0xfc}, 0x102, &(0x7f00000005c0)={0x5, 0xf, 0x102, 0x6, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00, 0x8001, [0xff00, 0x0, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x1, 0xc000}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x3e, 0x1e00, 0x2, [0xc0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3f, 0x0, 0xfff, 0x8}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "a44da75fed9f92fc6aa827ab68b11def1d5d55f768cc38198a3a49e8ba140addd9e08cb95294eb686e1bcce11547f5243c4ada02a460a1197ce3bcc81e0b0b6ba558d8e6f3accb5fc89033b62264b849a6706c2574626283d769f3cbcdb3ba118b75b476a3668614280773eef1285e36f9a0a4c2daf2646db52872dec81869c7b29553ae196a22f87f0005a920130204687f394efad085220e3f9bcd582e1ec1805983350a1e26098ffc7538388fb8f88f7c7b56da3e1eeed653113901f5c567247b13c80da12b6321feaa6b07d273c7683ab4692ac5218928a88102d1b4bfff84b1c5e78cbfd57b034b8d81d758a487442d21c089cd1473608c72f09cd006"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7"}}}}, 0x31) 23:50:12 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0xf000000) 23:50:12 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000900)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece52", 0x187, 0x0, 0x0, 0x0) 23:50:12 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x3a00000000000000) 23:50:12 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x97, 0xbf, 0xb7, 0x20, 0x12d1, 0x6d73, 0x5af7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x7b}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0xd9, &(0x7f00000005c0)={0x5, 0xf, 0xd9, 0x3, [@generic={0xa8, 0x10, 0x3, "9d8eec4c4a9386c8b21844722f479259615623a2e6bfb41ce0202ae35235e4a10b4ad9b9f118fc2aee1f908b40c095a3fd248691956e4d543e3f922cf8d05c6b931b4f6eb1305499dd883e210c6f4f90ee4c13b11764b6c7dbc57a0f3a926142b77e4cdbf329548fcc5f806728b8754975301b89bed635eec83214d2ee75bb3d1d9095b00958a651a3c464d209dfe2f4350d84c9e1d678575f21ae67f5878a73683d391cec"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "02064c4b6324196d72a76a2f2178ea07"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0x0, 0x8001, [0xff00, 0x0, 0xc0cf]}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000740)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "1910b840f21a993d9676dac356cf3bc7ef79df52910da54c32fa478b3c719b958995c40976f5ce643829c53a3173be14f774a05ab8fe0919f5c65e59da03259f7cb49a337bbf9b3b14fafe34c0342537665bd584d4110664d2ac238f7e95399f394751d83e148684607dbc12b7dd1979da766f66f61d3c8072ba0a34ae5000c57141e7ecf72990b017e404d8a2ad4a295a699524fecb4c68ce3981"}}, {0xdc, &(0x7f0000000940)=@string={0xdc, 0x3, "c6e5d82e810d21f7c3e4dfbf17a5647134d7ef1719fcd5efcc97cb7a1bce22a03e4e535e9869c74a5530f664f3c4c889ef26b33a0c35dcc0db6c11752d2125100df9b75311f4f9aa646c0f7a1104a817628b6f656e621af35a0c21024620b3f72983433754e148f41d433d25bd9d3a47327062e5bc29921947b85253e2f8f6b8d8f7837df2abd69f3fa39af96ebbb2e64e252996f869e1dabf2ce62aa9d9b719f82442d36b51773739d7e7c507d4f2530587c213c16d7c5824bf54a281679413d7f9583f2cfcbd6e16f09b40ecd48ca26b7260db1287fc41986b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x447}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "c3ff51c768df477e8852a425125b64"}}]}) 23:50:12 executing program 1: mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 23:50:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 23:50:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, "b90005"}, "c1ead7"}}}}, 0x31) [ 1058.237307][ T5027] usb 5-1: new high-speed USB device number 47 using dummy_hcd 23:50:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@ipv4={[], [], @multicast2}}, {@in=@remote, 0x0, 0x32}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x40, "e570a1553933aa244f9b133cc78cecc57debbcd162da13ee00000000"}}]}, 0x158}}, 0x0) [ 1058.346983][T18461] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1058.476959][ T5027] usb 5-1: Using ep0 maxpacket: 32 23:50:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 23:50:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@ipv4={[], [], @multicast2}}, {@in=@remote, 0x0, 0x32}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x40, "e570a1553933aa244f9b133cc78cecc57debbcd162da13ee00000000"}}]}, 0x158}}, 0x0) [ 1058.586874][T18461] usb 6-1: Using ep0 maxpacket: 32 [ 1058.651117][T18982] ================================================================== [ 1058.659231][T18982] BUG: KCSAN: data-race in __writeback_single_inode / ext4_sync_file [ 1058.667292][T18982] [ 1058.669659][T18982] write to 0xffff8880b9f19ac0 of 8 bytes by task 18986 on cpu 0: [ 1058.677386][T18982] __writeback_single_inode+0x168/0x610 [ 1058.682938][T18982] writeback_single_inode+0x121/0x530 [ 1058.688319][T18982] sync_inode_metadata+0x52/0x70 [ 1058.693264][T18982] ext4_sync_file+0x335/0x6e0 [ 1058.697944][T18982] vfs_fsync_range+0x107/0x120 [ 1058.702714][T18982] ext4_buffered_write_iter+0x369/0x3b0 [ 1058.708269][T18982] ext4_file_write_iter+0x76f/0x1010 [ 1058.713558][T18982] __vfs_write+0x2d8/0x340 [ 1058.717975][T18982] vfs_write+0x19b/0x350 [ 1058.722214][T18982] ksys_write+0xce/0x180 [ 1058.726455][T18982] __x64_sys_write+0x3e/0x50 [ 1058.731036][T18982] do_syscall_64+0x51/0xb0 [ 1058.735448][T18982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1058.741323][T18982] [ 1058.743647][T18982] read to 0xffff8880b9f19ac0 of 8 bytes by task 18982 on cpu 1: [ 1058.751276][T18982] ext4_sync_file+0x26c/0x6e0 [ 1058.755944][T18982] vfs_fsync_range+0x107/0x120 [ 1058.760703][T18982] ext4_buffered_write_iter+0x369/0x3b0 [ 1058.766248][T18982] ext4_file_write_iter+0x76f/0x1010 [ 1058.771530][T18982] do_iter_readv_writev+0x321/0x3c0 [ 1058.776721][T18982] do_iter_write+0x10e/0x470 [ 1058.781300][T18982] vfs_iter_write+0x4c/0x70 [ 1058.785794][T18982] iter_file_splice_write+0x41a/0x770 [ 1058.791154][T18982] direct_splice_actor+0x95/0x160 [ 1058.796161][T18982] splice_direct_to_actor+0x365/0x660 [ 1058.801520][T18982] do_splice_direct+0xf2/0x170 [ 1058.806328][T18982] do_sendfile+0x562/0xb10 [ 1058.810783][T18982] __x64_sys_sendfile64+0xf2/0x130 [ 1058.815908][T18982] do_syscall_64+0x51/0xb0 [ 1058.820327][T18982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1058.826200][T18982] [ 1058.828526][T18982] Reported by Kernel Concurrency Sanitizer on: [ 1058.834669][T18982] CPU: 1 PID: 18982 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 1058.843320][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1058.853362][T18982] ================================================================== [ 1058.861419][T18982] Kernel panic - not syncing: panic_on_warn set ... [ 1058.868014][T18982] CPU: 1 PID: 18982 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 1058.876689][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1058.886886][T18982] Call Trace: [ 1058.890187][T18982] dump_stack+0x10f/0x19d [ 1058.894519][T18982] panic+0x207/0x64a [ 1058.898420][T18982] ? vprintk_emit+0x44a/0x4f0 [ 1058.903112][T18982] kcsan_report+0x684/0x690 [ 1058.907632][T18982] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 1058.913196][T18982] ? ext4_sync_file+0x26c/0x6e0 [ 1058.918062][T18982] ? vfs_fsync_range+0x107/0x120 [ 1058.923005][T18982] ? ext4_buffered_write_iter+0x369/0x3b0 [ 1058.928754][T18982] ? ext4_file_write_iter+0x76f/0x1010 [ 1058.934215][T18982] ? do_iter_readv_writev+0x321/0x3c0 [ 1058.939586][T18982] ? do_iter_write+0x10e/0x470 [ 1058.944342][T18982] ? vfs_iter_write+0x4c/0x70 [ 1058.949012][T18982] ? iter_file_splice_write+0x41a/0x770 [ 1058.954548][T18982] ? direct_splice_actor+0x95/0x160 [ 1058.959744][T18982] ? splice_direct_to_actor+0x365/0x660 [ 1058.965294][T18982] ? do_splice_direct+0xf2/0x170 [ 1058.970222][T18982] ? do_sendfile+0x562/0xb10 [ 1058.974811][T18982] ? __x64_sys_sendfile64+0xf2/0x130 [ 1058.980084][T18982] ? do_syscall_64+0x51/0xb0 [ 1058.984667][T18982] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1058.990754][T18982] ? __filemap_fdatawait_range+0x17e/0x1b0 [ 1058.996554][T18982] kcsan_setup_watchpoint+0x453/0x4d0 [ 1059.001918][T18982] ext4_sync_file+0x26c/0x6e0 [ 1059.006605][T18982] ? tsan.module_ctor+0x10/0x10 [ 1059.011450][T18982] vfs_fsync_range+0x107/0x120 [ 1059.016206][T18982] ext4_buffered_write_iter+0x369/0x3b0 [ 1059.021756][T18982] ext4_file_write_iter+0x76f/0x1010 [ 1059.027030][T18982] ? aa_file_perm+0x129/0xe00 [ 1059.031699][T18982] ? find_get_entry+0x2ed/0x320 [ 1059.036538][T18982] do_iter_readv_writev+0x321/0x3c0 [ 1059.041729][T18982] do_iter_write+0x10e/0x470 [ 1059.046303][T18982] ? check_preemption_disabled+0x51/0x140 [ 1059.051993][T18982] ? debug_smp_processor_id+0x18/0x20 [ 1059.057334][T18982] ? splice_from_pipe_next+0x217/0x260 [ 1059.062768][T18982] vfs_iter_write+0x4c/0x70 [ 1059.067251][T18982] iter_file_splice_write+0x41a/0x770 [ 1059.072596][T18982] ? splice_from_pipe+0xc0/0xc0 [ 1059.077440][T18982] direct_splice_actor+0x95/0x160 [ 1059.082447][T18982] splice_direct_to_actor+0x365/0x660 [ 1059.087801][T18982] ? do_splice_direct+0x170/0x170 [ 1059.092805][T18982] do_splice_direct+0xf2/0x170 [ 1059.097545][T18982] ? check_preemption_disabled+0x70/0x140 [ 1059.103242][T18982] do_sendfile+0x562/0xb10 [ 1059.107633][T18982] __x64_sys_sendfile64+0xf2/0x130 [ 1059.112717][T18982] do_syscall_64+0x51/0xb0 [ 1059.117235][T18982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1059.123095][T18982] RIP: 0033:0x45cb29 [ 1059.126958][T18982] Code: Bad RIP value. [ 1059.131021][T18982] RSP: 002b:00007f50885ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1059.139477][T18982] RAX: ffffffffffffffda RBX: 00000000004fd880 RCX: 000000000045cb29 [ 1059.147426][T18982] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1059.155376][T18982] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1059.163334][T18982] R10: 000000000000a198 R11: 0000000000000246 R12: 00000000ffffffff [ 1059.171308][T18982] R13: 0000000000000905 R14: 00000000004cbe3c R15: 00007f50885de6d4 [ 1059.180401][T18982] Kernel Offset: disabled [ 1059.184751][T18982] Rebooting in 86400 seconds..