27143c7e7011172f64055f65fa37f3f4f9963f24271fdb1d641c03ab0e65538878dfb59d0d3bc4a461bc457e977ec1093438321a08fa3db3e57f9dc8e5d3c23ae24f9fa9d4cbaab8d6abec60be0f9ee38462c203ac53ef015727f68b"}, {0x48, 0x0, 0x0, "1936fcc11e7adc5b267573bd1b2f490f62cd206b552de94aff6587f89d702dce8f89bf779e30528b23a99a8cf6c0fe0b12"}, {0x90, 0x0, 0x0, "0766107b3bad86c0e3c13b4e2ea34e1d094fb9381b7b5b8b326d48266b9687e9b366190e6f06e604b0ea3613b93e44dd4fe5ffd1dca7907a2a80bca21014ce738da2df53623635398b2a1bac0496ea47e12bcd00c53818ee1998f3fcade51bceed4967a403134cb650718d2f76e47a6104728cc462f78a248d"}, {0xb8, 0x0, 0x0, "ce68f4c1d9e3df1bceb4b9335884c2f59ac684418671888a2687945391da3fd29ddf6d0ed5109d49b4b1bea359aa43db72b5a04112ef7f0d63739bbb52cbcd7c1488fad76f199acba8e770283d5c8e396a42c23307d68bb81c96b6f7330b51f782a71914a30b7d4a1ae0305e629cd7f53ed5ee92986bd201ac4ad72008d1008001ef523c806f0c3c6be97bcb2fa2692e32789f380eb2c52d3cb742b946a8528226"}, {0xd40, 0x0, 0x0, "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"}], 0x2008}, 0x0) 17:47:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0, 0xffffff7f}}, 0x0) 17:47:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) sendmsg$inet6(r0, &(0x7f0000001540)={&(0x7f0000001480)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 17:47:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x8040) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="0feec965cbc315c81824932a7b", 0xd}, {&(0x7f0000000480)="55686ee7af6fa67b5b6c145abbb6a8c048eb2828e74f344fe8aa1a666bca209f97ba3cea15b3a7d6970b46479896ef135e50f2289c36e9ad74e62240fd8d9f914349c901d893b01be60785bc60339b8347b4c4ec741e668d29c3e9401b9386a19eb031b6fac26a9f671a61df326c9902956c717a9cd618486c91c8", 0x7b}, {&(0x7f0000000500)="1d38c7f17100cb347ca352851e086cdc2b7f892b3c3222d4f3e5ef883ee96359c794612b7c16927e81f356ae200cd5c37ccd5a96e177cc", 0x37}], 0x3}, 0x0) 17:47:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:47:52 executing program 2: request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) 17:47:52 executing program 1: r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000004300)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/132, 0x84}], 0x2, 0x0) 17:47:52 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f0000008600)={0x9}, 0x0, 0x0, &(0x7f0000008700), 0x0) 17:47:52 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8983, 0x0) 17:47:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 17:47:52 executing program 0: timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3a, 0x4, @tid=0xffffffffffffffff}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x8201000, 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000680)="c489298f5176a861fe6f078e3e1f7d332603115248b8e50a285cf07948b760448152a49e05b1c1a4db02d4f5154995318952fcf4438a23022373b32137c115e30ea90913132683507b8c8da75dd0666637758dbe6fdc4f22b38012dd48e6128b030eb99bac07dbfc4e164a1fd84ad7d5") 17:47:52 executing program 1: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) 17:47:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:47:52 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x7fffffff}, 0x8) 17:47:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000016c0)={&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @local}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001340)="f1", 0x1}], 0x1, &(0x7f0000001680)=[@dstopts_2292={{0x18}}], 0x18}, 0x0) 17:47:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x8040) sendmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1c) 17:47:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x14}, 0x14}}, 0x0) 17:47:52 executing program 0: sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x9e7e202a078f304) 17:47:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp, @generic, @jmp, @kfunc]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xff, &(0x7f00000000c0)=""/255, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:47:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:47:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}, 0x8}, 0x0) 17:47:52 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x1000}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 17:47:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x8040) sendmmsg$inet(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a40)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6e97}}], 0x18}}], 0x2, 0x0) 17:47:52 executing program 0: pselect6(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xfffffffffffffffd]}, 0x8}) 17:47:52 executing program 1: socket(0xe, 0x0, 0x0) 17:47:52 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}}) 17:47:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001780)={0x34, 0x0, &(0x7f0000000300)=[@request_death, @increfs_done, @request_death], 0x0, 0x0, 0x0}) 17:47:53 executing program 5: timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) 17:47:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x0) 17:47:53 executing program 0: syz_clone(0xb654444368e4752, 0x0, 0x0, 0x0, 0x0, 0x0) 17:47:53 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0xfffffffffffffff9) 17:47:53 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) 17:47:53 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x280082, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000380), r0) 17:47:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="a3", 0x1}], 0x1}}], 0x2, 0x40080c0) 17:47:53 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='#\x00') 17:47:53 executing program 4: modify_ldt$read_default(0x2, &(0x7f00000004c0)=""/68, 0x44) 17:47:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000b040)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001e40)=@nl=@proc, 0x80, 0x0}}], 0x2, 0x0) 17:47:53 executing program 0: pselect6(0x40, &(0x7f0000000080)={0x5}, 0x0, 0x0, 0x0, 0x0) 17:47:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=@gettfilter={0x24, 0x2e, 0x311}, 0x24}}, 0x0) 17:47:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000002900000036000000000000000000000014"], 0x30}, 0x0) 17:47:53 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f00000011c0)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000000)) 17:47:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c, 0x0}, 0x7ffffff7) 17:47:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x200400d0) 17:47:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 17:47:53 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0}, 0x0) 17:47:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hoplimit_2292={{0x14}}, @rthdr={{0x18}}], 0x30}, 0x0) 17:47:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@hoplimit={{0x14}}], 0x18}, 0x0) 17:47:53 executing program 1: pselect6(0x40, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 17:47:53 executing program 2: syz_clone(0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000680)="c4") getrusage(0x0, &(0x7f0000000440)) 17:47:54 executing program 0: process_vm_readv(0x0, &(0x7f0000004300)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000004540)=[{0x0}, {0x0}], 0x2, 0x0) 17:47:54 executing program 5: timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 17:47:54 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001340)) 17:47:54 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "65fffcab"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 17:47:54 executing program 2: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "65fffcab", {0x1, 0x9, 0xc3fd, 0x0, 0x80}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000380)=@conn_svc_rsp={0x0, 0x0, 0xa, "8a4e46c0", {0x3, 0x102, 0x0, 0x0, 0x0, 0x2}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000009c0)=""/128) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) 17:47:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) 17:47:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1, 0x7}, 0x1c, 0x0}, 0x0) 17:47:54 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 17:47:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/207, 0xcf}], 0x1}}], 0x1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="0a000300010000", 0x7) 17:47:54 executing program 3: mknod(&(0x7f0000000040)='./file1\x00', 0x8006, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 17:47:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f00000004c0)={"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"}) 17:47:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f00000004c0)={"06000000dd245c84e0060000c9c8dc1964325fa96fa42b767f0400002bec0ba41f011f013a40c8a4710000403b00000001ffff80003c5ca2c2000000ee377abaece6b88378e3d63a03000040361d26a4e34849485f02baee010100c04252066178868d1ef4b5ffff5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcdb5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b54200000000000000bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c089e390d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963d0717a77f8df8d46099b1f58e06caf6afbbc19db161c6df1e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af706f1b1152c691611f897558d542f7e2483978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4e7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c117bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46824a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb57d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 17:47:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[{@fat=@dmask}]}) 17:47:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:47:54 executing program 1: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000cc0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x0, 0x0, "f00baa7183d001dc9f869f83e2ffcde327b66c3f388e44d997f9cd6a7f471575719aa360f36b14baaac0e50682d6502606ee483449436884bf34130b707bd3416291cdb30c0794c049d0bb4fc0d7ec9a"}, 0xd8) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) [ 570.303174][T18660] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 570.328301][T19474] FAT-fs (loop3): bogus number of reserved sectors [ 570.344695][T19474] FAT-fs (loop3): Can't find a valid FAT filesystem [ 570.542231][ T3676] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 570.912025][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.923043][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.934577][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.942229][T18660] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 570.947903][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 570.965721][T18660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.972103][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.981990][T18660] usb 5-1: Product: syz [ 570.986257][T18660] usb 5-1: Manufacturer: syz [ 570.993966][T18660] usb 5-1: SerialNumber: syz [ 571.044860][T18660] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 571.465693][ T3676] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.002F/input/input35 [ 571.481569][ T3676] cm6533_jd 0003:0D8C:0022.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 571.673346][ T3676] usb 6-1: USB disconnect, device number 20 [ 571.682396][T18660] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 571.890370][ T3746] usb 5-1: USB disconnect, device number 16 17:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4008ae89, &(0x7f00000004c0)={"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"}) 17:47:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f00000004c0)={"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"}) 17:47:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f0000001600)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x15, r1, 0x0) 17:47:56 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights], 0x10}, 0x0) 17:47:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"06000000dd245c84074d564bc9c8dc1964325fa96fa42b76710000402bec0ba41f011f013a40c8a4710000403b00000001ffff80003c5ca2c2000000ee377abaece6b88378e3d63a03000040361d26a4e34849485f02baee010100c04252066178868d1ef4b5ffff5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcdb5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b54200000000000000bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c089e390d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963d0717a77f8df8d46099b1f58e06caf6afbbc19db161c6df1e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af706f1b1152c691611f897558d542f7e2483978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4e7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c117bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46824a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb57d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 17:47:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:47:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000480)=""/170, 0x32, 0xaa, 0x1}, 0x20) 17:47:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:47:56 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a40000000400000000000000000000030000000004"], &(0x7f0000000140)=""/221, 0xc0, 0xdd, 0x1}, 0x20) 17:47:56 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000140)=""/212, 0x26, 0xd4, 0x1}, 0x20) 17:47:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000001000000000000000000670000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:47:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 572.702057][T18667] usb 6-1: new high-speed USB device number 21 using dummy_hcd 17:47:56 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x8, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/212, 0x2d, 0xd4, 0x1}, 0x20) 17:47:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000480)=""/170, 0x1000000, 0xaa, 0x1}, 0x20) 17:47:56 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x28041, 0x0) 17:47:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:47:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000001880)=@framed={{}, [@map_fd={0x18, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 572.779991][T18660] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 572.800878][T18660] ath9k_htc: Failed to initialize the device [ 572.842074][ T3746] usb 5-1: ath9k_htc: USB layer deinitialized [ 573.082014][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.093112][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.103424][T18667] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 573.116581][T18667] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 573.126094][T18667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.625602][T18667] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0030/input/input36 [ 573.652617][T18667] cm6533_jd 0003:0D8C:0022.0030: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 573.838233][T18667] usb 6-1: USB disconnect, device number 21 17:47:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:47:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x600, 0x0) 17:47:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000480)=""/170, 0x1a, 0xaa, 0x1}, 0x20) 17:47:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000001000000000000000000250000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:47:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d800000009000000020000000800000604"], &(0x7f00000009c0)=""/232, 0xf9, 0xe8, 0x1}, 0x20) 17:47:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x11}]}]}}, &(0x7f0000000000)=""/184, 0x32, 0xb8, 0x1}, 0x20) 17:47:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x8, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/255, 0x34, 0xff, 0x1}, 0x20) 17:47:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3000000}}]}}, &(0x7f0000000480)=""/170, 0x32, 0xaa, 0x1}, 0x20) 17:47:58 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000001000000000000000000150000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x9, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x29dd9, r0}, 0x80) 17:47:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000480)=""/170, 0x1a, 0xaa, 0x1}, 0x20) 17:47:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x3, &(0x7f0000001880)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:47:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000001f000000000000000000c0000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 574.691962][T18667] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 575.102275][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.118540][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.129073][T18667] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 575.146368][T18667] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 575.155474][T18667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.655528][T18667] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0031/input/input37 [ 575.670814][T18667] cm6533_jd 0003:0D8C:0022.0031: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 575.866579][ T3674] usb 6-1: USB disconnect, device number 22 17:48:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x0, 0x0, 0x0, 0x12}, 0x48) 17:48:00 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2f, 0x28, 0x6, [@array, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/170, 0x46, 0xaa, 0x1}, 0x20) 17:48:00 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x4c, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000480)=""/170, 0x1a, 0xaa, 0x1}, 0x20) 17:48:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x6, &(0x7f00000006c0)=@raw=[@map_idx, @ldst, @call, @exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x19, 0x3, &(0x7f0000001880)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0xa7e, 0xe29}, 0x48) 17:48:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x0, 0x1c10}, 0x48) 17:48:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0xa8, 0x0, 0x0, "abfab158444e3cdc5a38efcec17c1587588a38add77bfbe787c6379aecdd19153bdcb7cc8a24fcc621affafdea6b887f1502b0a69168ac71687fa1a0fd6b5311335bc3518d37954266dc85aca48ddbf00a7c3863309f049e7f67527e68792c15382666b88eef1e48f81b12dc43a9b0b8d0e3b3a8d4d9d8543995467a462582f0b7e8eacbab52dd555e305d6e49d96756cf"}, {0x110, 0x0, 0x0, "4a3d851eb3fb25bc0564c21202447eccecd128b6197bfd950e4005d94367eaf4a2511616341a62f2c44a1f6ee793305506aad06aca484c2f272f0e449f290907de60726eea43d97971e9b0f154c1a716760068582ed3e52e9685fd07a2fd8cc5ea1dd4fe71d9bbb47fe1bce83c6f0de80f3ee028c7ace5e5261e8ef4d80b3eb4df193bff933666f55f9fc6945bd68b04ab9b95a077ebf2028d6a7f304b187934bbcd8c6ef0b78de6110519f5528543de5fcc44c14b6f8dae89b99db758b38e349ce8e3a883e70eb9daf4e5e28635e0d907bc9937ac2a0eb430641f72bcc4ef1a66b5b7438f381d991b739fbad0c4e24989d897aff6e224a3d1"}, {0x78, 0x0, 0x0, "7fcf6551ccfaa0744422c24eca4a13fb348ab1315e1396329cb6a11867d073dd3b6fe1da932dd8242206d9b566f18c74b7ca57be173321eb0e3aeffbb275182837b3d8d96862582988b5569a4c8e2cf116fcb19b2ecadd6278942ebb4b4fe23314"}, {0xb8, 0x0, 0x0, "52a23d2727aa033c5bbaedb179575406f4d953a669daa1abad77fc53067519604016d6d3665d95539cff7be6c7a0dca94e835baab31e710b6c6ae825c4b284193927c726b1a14c369b23ad09211b835f5b6f05cf2510e3ec3c0b17e4ca2f4a1fa9a5b70dfb1e63edad642cb960585c250c9e9ced9f88bf7595accf6228ab0fd9bd9686c7b1ed2c8833d7c06eda15d267d1485e284b49a98e04f89d33509838aae4"}, {0x1010, 0x0, 0x0, "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"}, {0xe0, 0x0, 0x0, "a1eac7b9939b8f4756ac2b4100dec74c17bf8f7bd9bd65333696791c9ce222e1c28378a0b4c319290c926355ce82fa10eaaa11a7b43f21ffdcb5e6f29a40e46529012f51b029f833d55c83e9dcb75bb1bbf3989225e5f55c60b3e58af6a7abb76d36189b0dcdc77ff3cd983ec101815050ce386a865339e28dff452e627178f831f50f288a66eaef6b8dd5f337c4ca85a598cd722ec6cc517343980a4a64fcc671cd250e0b1e54aa079a8a711600cd7aa65ca1ed43c532972d02f53d5974d8948f3b21b03b45573e1c"}, {0x90, 0x0, 0x0, "951bf192474a1da0125b6b6cc937c5ae669030a7f3b8ba7f103d0d95801c0b488ff3492887bab92d18604f4936a63b897f955aba6b230f9a09760c1bca7f3254fe57d5c3006f3fed3a9599b67a8be17eca6ffbb94cd95fdc9e9a84531f03e7a35075ac0fc6f861956769a8ba3cc83e215afc2a8f3222b24db9"}, {0xc8, 0x0, 0x0, "1806451ad5dcb84ef4370d7136ec6e1c07e9dd6da7f257b4bc3f7e96366121e641cb06f2248379774b394906a71bffe40e51457a0095290a8cd9dffddc0ef08cdb906c3293c20cc89ad726252381f272a361fda82537b4d073eaf4c4138835a6d10afc359373ed2782e5c698a74185e9433655379f654838ca12154ef74441f99e62fd61e80bb9f176758f425e514d004a6c6fa7cd47fb6291f8c071c1b295ea01da4282d99d6c816caf6e4208c4458ef3"}, {0x70, 0x0, 0x0, "7018fe655982a24099ffc0eaff539034aaeed6a8df5ea5653e68cc92869225958f09523f6230c58547cf28edf04e0a421a9dcb9c9dc33aba956002fbd207de5b55f4f78f96d0aae4dbac09c53811849e2c1a4f08e789402ac0"}, {0xa68, 0x0, 0x0, "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"}], 0x2008}, 0x0) 17:48:00 executing program 3: syz_clone(0xa00aa180, 0x0, 0x0, 0x0, 0x0, 0x0) 17:48:00 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000013c0)="26199ec50881615e03d2a1ab4fba763ba8ff6b19e51c55d68e53c6269db23b43fc1881f7a5fabd45c82b648357fcef36cab2b6398098cb90edaced962cde463c80d4fbae9586234d4e45606515e6e10ad30f4998f1823f7258f7a22c6c9844c823b6d99c37588a1304fac50a239923591efd91204fa29c33c63cad476a16f277f0a621d6dbbbc58dc0fb49e8a28446ac385bef3d4f7585d1e80146ad496a974c4de813c09dfb43d2e790c84cb76ed0e9a7b2f326666c18", 0xb7}, {&(0x7f0000000180)="3a241cc7a0c2045717b644335586599b014c0c7c8d5be26bd5189d55241419c32eb7bb87198273e86f536440b61eb481e44015a88ce3f874269a9297923f595d3afc071315fcff02c94f22b4cf6d53cc5b57645e2c8db660a6b354e6a8ad1b121a36011701461cb9b7bc6281", 0x6c}, {&(0x7f0000000200)="5e2a0d0c112f43b1314b7333cfb1bb518e33ec870dbdf802e726bc35db45b03cf3353723497b97ad", 0x28}, {&(0x7f0000000240)="1d3733e69b58d77941c798de5f8b2ea97f761dce1fb24ceaf0d90c857f1c0cf3e7e800529f8d8f1e876258e4751fa295613725db2ac688ee512b27ee9d69951a3f7be4aabc5411d4730ce65bb80e4e300da2c144903ba1661bd6ca0e8df361701a292bcca5ed655db4274a859e35c3bfe75f5d3bb1579a39e379aa27b80464ef", 0x80}, {&(0x7f00000002c0)="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", 0xe36}], 0x5}, 0x0) 17:48:00 executing program 0: syz_clone(0x8420b600, 0x0, 0x22, 0x0, 0x0, 0x0) [ 576.732065][ T3746] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 577.102047][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.113060][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.123190][ T3746] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.136282][ T3746] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 577.146939][ T3746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.625390][ T3746] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0032/input/input38 [ 577.640520][ T3746] cm6533_jd 0003:0D8C:0022.0032: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 577.836131][ T3746] usb 6-1: USB disconnect, device number 23 17:48:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfb, &(0x7f0000000140)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfb, &(0x7f0000000140)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:02 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 17:48:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003a40)={0x12, 0x2, &(0x7f0000003840)=@raw=[@btf_id], &(0x7f0000003880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000011c0)='freezer.self_freezing\x00', 0x0, 0x0) 17:48:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:02 executing program 3: syz_clone(0x42a03000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x6, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000032c0)=@base={0x0, 0x0, 0x0, 0xffffffc0, 0x100, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003380)=@bpf_ext={0x1c, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003200), 0x8, 0x10, &(0x7f0000003240)={0x0, 0xd, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x2e7f, 0xe7, &(0x7f0000000200)=""/231, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000300)={0xa}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x5, 0x5, 0x7}, 0x10, 0x2d6ec, 0xffffffffffffffff, 0x0, &(0x7f0000000380)}, 0x80) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="ff01736530323700d5b863f9cb04880ce7260995ea39bf4c4511924675a196c491114cacb5d9dd7ed35356f2fe083b6b32a19726efadabed3491c7c18a74b0178a00"/75, @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES64=r2, @ANYRES32=r4], 0x8) 17:48:02 executing program 1: syz_clone(0x42a03000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, 0x0, 0x0, 0x2e7f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7}, 0x10, 0x2d6ec}, 0x80) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYRES32], 0x8) 17:48:02 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000013c0)="26199ec50881615e03d2a1ab4fba763ba8ff6b19e51c55d68e53c6269db23b43fc1881f7a5fabd45c82b648357fcef36cab2b6398098cb90edaced962cde463c80d4fbae9586234d4e45606515e6e10ad30f4998f1823f7258f7a22c6c9844c823b6d99c37588a1304fac50a239923591efd91204fa29c33c63cad476a16f277f0a621d6dbbbc58dc0fb49e8a28446ac385bef3d4f7585d1e80146ad496a974c4de813c09dfb43d2e790c84cb76ed0e9a7b2f326666c18", 0xb7}, {&(0x7f0000000180)="3a241cc7a0c2045717b644335586599b014c0c7c8d5be26bd5189d55241419c32eb7bb87198273e86f536440b61eb481e44015a88ce3f874269a9297923f595d3afc071315fcff02c94f22b4cf6d53cc5b57645e2c8db660a6b354e6a8ad1b121a36011701461cb9b7bc6281", 0x6c}, {&(0x7f0000000200)="5e2a0d0c112f43b1314b7333cfb1bb518e33ec870dbdf802e726bc35db45b03cf3353723497b97ad", 0x28}, {&(0x7f0000000240)="1d3733e69b58d77941c798de5f8b2ea97f761dce1fb24ceaf0d90c857f1c0cf3e7e800529f8d8f1e876258e4751fa295613725db2ac688ee512b27ee9d69951a3f7be4aabc5411d4730ce65bb80e4e300da2c144903ba1661bd6ca0e8df361701a292bcca5ed655db4274a859e35c3bfe75f5d3bb1579a39e379aa27b80464ef", 0x80}, {&(0x7f00000002c0)="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", 0xcf6}], 0x5}, 0x0) 17:48:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfb, &(0x7f0000000140)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfb, &(0x7f0000000140)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:02 executing program 2: syz_clone(0x40204400, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 17:48:02 executing program 0: syz_clone(0x42a03000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000a00)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2e7f, 0xe7, &(0x7f0000000200)=""/231, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x5}, 0x10, 0x2d6ec, 0xffffffffffffffff, 0x0, &(0x7f0000000380)}, 0x80) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="ff01736530323700d5b863f9cb04880ce7260995ea39bf4c4511924675a196c491114cacb5d9dd7ed35356f2fe083b6b32a19726efadabed3491", @ANYRESHEX, @ANYBLOB="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", @ANYRES64, @ANYRES32], 0x8) [ 578.703260][T17940] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 579.072079][T17940] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.083357][T17940] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.093839][T17940] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 579.106750][T17940] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 579.115884][T17940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.616091][T17940] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0033/input/input39 [ 579.647103][T17940] cm6533_jd 0003:0D8C:0022.0033: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 579.816139][T17940] usb 6-1: USB disconnect, device number 24 17:48:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003a40)={0x1e, 0x2, &(0x7f0000003840)=@raw=[@btf_id], &(0x7f0000003880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x0, 0x0, 0x0, 0x82, 0x1}, 0x48) 17:48:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfb, &(0x7f0000000140)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x41) 17:48:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfb, &(0x7f0000000140)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:04 executing program 0: syz_clone(0x92881100, 0x0, 0x0, 0x0, 0x0, 0x0) 17:48:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003080)={&(0x7f0000002c80)=ANY=[@ANYBLOB="9feb01001800000000000000540000000a"], &(0x7f0000002f80)=""/195, 0x70, 0xc3, 0x1}, 0x20) 17:48:04 executing program 2: syz_clone(0x5c69605d78da2585, 0x0, 0x0, 0x0, 0x0, 0x0) 17:48:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/192, 0x1000000, 0xc0, 0x1}, 0x20) 17:48:04 executing program 4: timer_create(0x2, &(0x7f0000000140)={0x0, 0x14}, &(0x7f0000000180)) 17:48:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2f, 0x10, 0x2, [@var]}}, &(0x7f0000000040)=""/248, 0x2a, 0xf8, 0x1}, 0x20) 17:48:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000380)=""/180, 0x2e, 0xb4, 0x1}, 0x20) 17:48:04 executing program 0: syz_clone(0x40000100, 0x0, 0x0, &(0x7f00000027c0), 0x0, &(0x7f0000002840)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4, 0x2fa5}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 17:48:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x32}]}}, &(0x7f0000000240)=""/198, 0x2a, 0xc6, 0x1}, 0x20) 17:48:04 executing program 4: syz_clone(0x40000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) [ 580.662214][ T3746] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 581.032100][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.043956][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.054906][ T3746] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 581.068081][ T3746] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 581.077541][ T3746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.575552][ T3746] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0034/input/input40 [ 581.592245][ T3746] cm6533_jd 0003:0D8C:0022.0034: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 581.775605][T17940] usb 6-1: USB disconnect, device number 25 17:48:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000280)=""/151, 0x26, 0x97, 0x4}, 0x20) 17:48:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x12063) 17:48:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x12, 0x8f73, 0x0, 0x4}, 0x48) 17:48:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002740)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000002780)='cpuacct.usage_percpu\x00', 0x0, 0x0) 17:48:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:06 executing program 4: r0 = syz_clone(0x40000100, 0x0, 0x0, &(0x7f00000027c0), &(0x7f0000002800), &(0x7f0000002840)="87433493912bae06389e300b98d67913e36d8a7296dade1df9b8ba2cd48718d4b4805146e39c34d22d6363bc2874") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000200)=""/185, 0x0, 0xb9, 0x1}, 0x20) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002740)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000540)='ns/pid_for_children\x00') r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) 17:48:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000200)=""/185, 0x2e, 0xb9, 0x1}, 0x20) 17:48:06 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000500)) 17:48:06 executing program 0: ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) 17:48:06 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000840)='w', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/92, 0x5c}], 0x1}, 0x0) 17:48:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6e, 0x0, 0x38, 0x4}]}}, &(0x7f0000001300)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 17:48:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x0, 0x0, 0x0, 0x10, 0x2}]}}, &(0x7f0000000040)=""/248, 0x2a, 0xf8, 0x1}, 0x20) 17:48:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f00000001c0)=""/191, 0x26, 0xbf, 0x1}, 0x20) 17:48:06 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000180)=@raw=[@map_idx], &(0x7f00000001c0)='GPL\x00', 0x0, 0xe9, &(0x7f0000000200)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:06 executing program 0: setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 17:48:06 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000000600)) [ 582.662147][T17940] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 583.042040][T17940] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.057152][T17940] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.068078][T17940] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 583.086244][T17940] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 583.096046][T17940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.565652][T17940] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0035/input/input41 [ 583.580843][T17940] cm6533_jd 0003:0D8C:0022.0035: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 583.764584][T17940] usb 6-1: USB disconnect, device number 26 17:48:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:08 executing program 1: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 17:48:08 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) 17:48:08 executing program 3: pipe(&(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) 17:48:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x0, 0x0, 0x0, 0xaa}, 0x48) 17:48:08 executing program 4: r0 = syz_clone(0x40000100, 0x0, 0x0, &(0x7f00000027c0), &(0x7f0000002800), &(0x7f0000002840)="87433493912bae06389e300b98d67913e36d8a7296dade1df9b8ba2cd48718d4b4805146e39c34d22d6363bc2874") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000200)=""/185, 0x0, 0xb9, 0x1}, 0x20) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002740)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000540)='ns/pid_for_children\x00') r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) 17:48:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 17:48:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) 17:48:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0xe7, 0x21b, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) 17:48:08 executing program 3: socket(0x1d, 0x0, 0x401) 17:48:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) 17:48:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}}, 0x0) [ 584.612049][ T6] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 584.972504][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.983698][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.997414][ T6] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 585.010390][ T6] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 585.019686][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.572096][ T6] usbhid 6-1:8.0: can't add hid device: -71 [ 585.578075][ T6] usbhid: probe of 6-1:8.0 failed with error -71 [ 585.586507][ T6] usb 6-1: USB disconnect, device number 27 17:48:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:10 executing program 0: syz_mount_image$ext4(&(0x7f0000002a00)='ext2\x00', &(0x7f0000002a40)='./file0\x00', 0x0, 0x0, &(0x7f0000002c40), 0x0, &(0x7f0000002cc0)) 17:48:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x541b, 0x0) 17:48:10 executing program 2: ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) 17:48:10 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/net\x00') 17:48:10 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 17:48:10 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x3, r0, &(0x7f0000000080)) 17:48:10 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4208, r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002040), 0x4, 0x0) write$UHID_CREATE2(r2, &(0x7f0000002080)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1c, 0x7, 0x0, 0x2, 0x8, 0x36ca, "f7f9c72e7010829af0fe433b5b33d827b0471b74ab08d510d205fa8f"}}, 0x134) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000021c0)={'\x00', 0x5, 0x9e12, 0x1f, 0x8000000000000000, 0x2, r1}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002240), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000002280)={0xe, {0x1, 0x0, 0x1, 0x6e, "f86e29d0d9150ed511776a1f8627e98337783f83ac43f358cccd87ced800160f36b20907410e551e9680870d9483b706ea4ffa971b074b5e8b14fd45e66510c134f5f3fc34e8ff658a451f1437a1f9de58003d1b083d79f41077197e3bbdb58c07fd037cb005b86b76712ad1efa9"}}, 0x7a) syz_mount_image$ext4(&(0x7f0000002a00)='ext2\x00', &(0x7f0000002a40)='./file0\x00', 0x40, 0x3, &(0x7f0000002c40)=[{&(0x7f0000002a80)="28b5630f02741ba58870f7cff12114a5f96b48ab227fdba595481226aed16e711f8f6c3fcc73fd1b67f87bb29a06fc9acb3d006158c7bb571051a087c04b933519b2dd6f73cef5d0de9790fca1b0bcfd24698baa535a9f43aaae0f06108eb224930329fa4ca824580a260ff1a83f865e3b100f352556a8a98e31ac2fdaea72aacf07d80bea4673", 0x87, 0x1229}, {&(0x7f0000002b40)="7b7f0dbc54cb458d02a4abab97ff7806f9d9b94a54ad8af871331f1cc9d4e12c4f83d4b6f1abedf1548a78d4010bf53af6aee115274d4ad455a298012578bb9a0da109a77f27ae6ab3459378f1f3e8235b", 0x51, 0x4}, {&(0x7f0000002bc0)="04b3c95a2122c863caa4e04912bf8451e32d6988e077e38725f70630a4be867c5c0aeb2a523c4c321b72fe61542e05c9f0dd899de10b6660450ec1445a2970c110e9db7ad025ee9761caf6d0", 0x4c, 0x7}], 0x4, &(0x7f0000002cc0)={[{@data_journal}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, r0}}, {@barrier_val={'barrier', 0x3d, 0x76}}, {@resgid={'resgid', 0x3d, r0}}, {@bsdgroups}, {@nobarrier}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x36, 0x64, 0x39, 0x35, 0x61, 0x65, 0x33], 0x2d, [0x66, 0x32, 0x38, 0x64], 0x2d, [0x32, 0x62, 0x62, 0x33], 0x2d, [0x63, 0x66, 0x61, 0x37], 0x2d, [0x35, 0x65, 0x61, 0x64, 0x37, 0x64, 0x34, 0x38]}}}]}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000002f00), 0x2, 0x0) geteuid() syz_open_dev$ndb(&(0x7f0000004280), 0x0, 0x40) read$FUSE(0xffffffffffffffff, &(0x7f00000059c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000007ac0)='\x00', 0x7) read$FUSE(r3, &(0x7f0000007b40)={0x2020}, 0x2020) 17:48:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000700)="fd3dcf96de336290cb2044cefb5168fde6fff4eacec6cf683a2ccfe919f1a5fae4ce33012619d50fa16fb0aadece912aef13ef513b04df262a51d3538d68e23e142ea894a8e632c2dd98d4d11e60b15b259913d365aad256019431c85ae08c321e8c5a3a9383f380c29f3f797d935f95f95268b98944ea88214cc1ed7d02af74a2a73410a625382858276d33adac371977623d8c84392daad6be800947305653b97709e8baadbe816f569e72a58002bd947c56c28c152fbc2bd23d9d85392dba6ecef369fcd1680ef4db44aab633f92f565a18f52575d932", 0xd8}, {&(0x7f0000000800)="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", 0xde9}], 0x2, &(0x7f0000001ac0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 17:48:10 executing program 2: add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0x200000, 0xffffffffffffffff) 17:48:10 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x141982) [ 586.104054][T19720] loop3: detected capacity change from 0 to 18 [ 586.111763][T19720] ext2: Unknown parameter 'hash' 17:48:10 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/user\x00') [ 586.361993][ T3751] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 586.762144][ T3751] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.773873][ T3751] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.783905][ T3751] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 586.797674][ T3751] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 586.807427][ T3751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.382106][ T3751] usbhid 6-1:8.0: can't add hid device: -71 [ 587.389497][ T3751] usbhid: probe of 6-1:8.0 failed with error -71 [ 587.400099][ T3751] usb 6-1: USB disconnect, device number 28 17:48:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', 0x0}) 17:48:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="4bf579a035db", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:48:11 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x492201, 0x0) 17:48:11 executing program 1: getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x6, &(0x7f0000000200)=[{0x0, 0x1f, 0x9}, {}, {0x1000, 0x1, 0x0, 0x1}, {0x0, 0x1f, 0x2, 0x8000}, {0x0, 0xfe, 0x9}, {0x0, 0x0, 0x0, 0x1000}]}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000f80)={0xe0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:48:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:11 executing program 3: syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x440) 17:48:12 executing program 2: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) 17:48:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 17:48:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) 17:48:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) 17:48:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2287, 0x0) 17:48:12 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 17:48:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[], 0x30}, 0x300}, 0x0) 17:48:12 executing program 3: add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0x0, @auto=[0x0]}, 0x9, 0xffffffffffffffff) 17:48:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000013c0)) 17:48:12 executing program 1: socketpair(0xf, 0x3, 0x0, &(0x7f0000000400)) [ 588.132105][ T3751] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 588.522105][ T3751] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.539026][ T3751] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.557668][ T3751] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.578441][ T3751] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 588.587788][ T3751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.172031][ T3751] usbhid 6-1:8.0: can't add hid device: -71 [ 589.178059][ T3751] usbhid: probe of 6-1:8.0 failed with error -71 [ 589.187383][ T3751] usb 6-1: USB disconnect, device number 29 17:48:13 executing program 1: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{}, {}, {}, {}], 0xfffffffffffffce6) 17:48:13 executing program 3: r0 = syz_io_uring_setup(0x70fd, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) 17:48:13 executing program 2: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) 17:48:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x4020940d, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:48:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:13 executing program 4: add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0xfffff, 0xffffffffffffffff) 17:48:13 executing program 0: syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}], [{@subj_role={'subj_role', 0x3d, '/dev/rtc#\x00'}}]}}) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 17:48:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) 17:48:13 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x517001, 0x0) 17:48:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:48:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/4096, 0x29, 0x1000, 0x1}, 0x20) 17:48:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}}, &(0x7f0000000080)=""/138, 0x2a, 0x8a, 0x1}, 0x20) 17:48:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[{0x10}], 0x10}, 0x0) 17:48:13 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x10, &(0x7f0000001380)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 589.752346][T19781] fuse: Bad value for 'fd' 17:48:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x800000, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000080), 0x0}, 0x20) 17:48:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000180)=""/201, 0x2e, 0xc9, 0x1}, 0x20) [ 589.992060][ T3751] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 590.372188][ T3751] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.383189][ T3751] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.393407][ T3751] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 590.406531][ T3751] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 590.415910][ T3751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.961961][ T3751] usbhid 6-1:8.0: can't add hid device: -71 [ 590.967955][ T3751] usbhid: probe of 6-1:8.0 failed with error -71 [ 590.977589][ T3751] usb 6-1: USB disconnect, device number 30 17:48:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x11}, 0x11}}, 0x0) 17:48:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "0480dc713a35cf12744d134058ee011e"}) 17:48:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)) 17:48:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x800000, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) 17:48:15 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x430080, 0x0) 17:48:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1}, 0x48) 17:48:15 executing program 4: syz_open_dev$admmidi(&(0x7f0000000000), 0x7, 0x0) 17:48:15 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000e00)=""/81, 0x51}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/194, 0xc2}], 0x147, &(0x7f0000000b00)=[@rdma_dest={0x18}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000006c0)=""/98, 0x62}, &(0x7f0000000740)}}, @cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000780), &(0x7f00000007c0), 0x0, 0xffffffffffffffff}}, @mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000800), &(0x7f0000000840)}}, @mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000880), &(0x7f00000008c0)}}, @cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000900), &(0x7f0000000940)}}, @mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000980), &(0x7f00000009c0)}}, @mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000a00), &(0x7f0000000a40)}}, @fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000a80), &(0x7f0000000ac0)}}], 0x2b0}, 0x0) 17:48:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 17:48:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 17:48:15 executing program 3: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sync() [ 591.701922][ T3674] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 592.062103][ T3674] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.073639][ T3674] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.084303][ T3674] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 592.100001][ T3674] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 592.109319][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.652007][ T3674] usbhid 6-1:8.0: can't add hid device: -71 [ 592.658061][ T3674] usbhid: probe of 6-1:8.0 failed with error -71 [ 592.673902][ T3674] usb 6-1: USB disconnect, device number 31 17:48:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}}, 0x0) 17:48:17 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="8682474f96b5b3747340bf5095e220de9c2477e5d19947860e8adf47d232fcb8617cc7602d709131fa3d89083752d8cad19be194d426777965caf07372e332d46e7d827712d4e49ed76ddeb0790605bec447c24396f41fec6d7640d1412df0d4e14014f6c2dba0dfa80a4dad5d0ec24888b98c41fb8659e3c670468a4140bc26bf1319bd9f08035257d66fc9fad2ab9d8b5788c1fb272f8f99dd0e692216941850d566b11f2b7928892612e61911c20f34b2ede31b074a9597ec33a0e9a1b37062dde41ea5b1374d09175a67591152f23d8568cc0fd208dad74bd48fc991175401c041de993d691b50741ef4548d4e6f05867e26ad631aa68e91a659e0555495198865f931503a6b1cbe9ba8bc09efdf5e2eb135b0be2e3719dc688b9d9a758b299e3e8f8409885eb7a384681543c0cea95c2d898ef11dfe3fc74c7c44b2ceab6ae0252614fefe8ea1a2d59d02828f415b6e9f8eb79b94ba8dd32f280c83e43dd8f5bd73624131880709c69df48e4dac00d9f4ed7f2835547ceddfd032ef55fd3c7ed3c63e2557f538dc11fa6545894e8676584467c7fd1c0bf67c0d2259b05554b2952b257803a9c6cb0115fc69d07a819d10146e64be9b28b3bd83d14a70365bd1784cc764cb54c95a474244e0bd9abad36027c2a36f9aecf24747df977d84495f4026c314c583d075ab3a7a128b343c01809b996b1210e5c3737874f696ebb0352ba4e1c3791e1000fead1bdae48c4f00a392a749addcfa2d1947144cec715e04f63188fed77773ebeac2251737c8ff1d77a94f352065fd6c6018820e4d38e5b0cf0e394d7528ca49fba614a69778cf6a8d9f9b319d091cfd75bb74525a16c3a3bd35436a0f07fa4d24c40b2d61806150db8f0ca9c83f12e65098d0f046ae28c73a215e115a2f9106f617230aba27981e13a7ecb69fbcbf294f83de9719f7cb08ee6a184b66d489eaa7f6142717759d16f62b204565701f069c4342ed3eb1ba9694d2f00e4467a575601b929393f9f0e81274d2214892c50fe5888200067cadd390002fc6f5c7715cbc411a8b3509dbd1213c4ef2a45f60dedfcd500f2adb0aa2b29fc712949b36f7aa8d893705ca9d9e1946ac2c59100a43a1e84fcf4b4769341e4843de96b7f455957258673e29f7c6d0060490d9aec2477ab3543d6b398940fb10e6b95170d91c61b4a5d07e52be63d77c7254f404ba70a2dcfc693bb1013564beefd69cb9c7b8a632c46331b84475d86ef371a128e363d8c15f81b88b1fa0df609995087fe3974e65db90bff00a5651c8137c1099f7de833ac9f1b52508be4527a6ea45405f95c752066dd975666b97a505ad06f3a8b912b479f964f06a5b8a586d52cd6c7ae5a491d1909a3e8bae8413fb2563c1548546920be791d078c3af51992a16816ed60a4bcd0c4e8cf20518f7c72de201beee6ade9bcae189bb70fd46b4519b6a2a62f3db372189ac791ab7210385aebd4ef47a7bd7fa6d619c16ebe1ab7881226b5286e6c80c69051aca5ce0ecb37983aa3b9d750ad6eb878937ed931bc914a9246d81f4c5e071a83b09dc957cf8c936334d95d5aa3bbc2f87e907b840eb720504b91ebeb7e1f68bb1a5c70b089db297e6e1ffba7eb0d58fbd3ba6616dcae91414cd25fdd99749b7a896492e95b9fb06eb43afd17428c8a4a0da658a1689a4dae2f28598e1616a8590955de05843f4623ed5503ca561849c1924a0da0f15b40140cc7d1de1db79c54045ea97023592e053ca7d7481173fc306c5d0e2245555f4c74a9d699cc60e29ee8b6b9c0838e7d6aabe5ae8e3e7041a95e07031432d026ceb65e47f05b23f7fa0b29c1e8b19c2bb70c6a536c875d243420eeca73048ed5432ae100c0f6bf45e4aaf8abd02f30a463250da09e6ce8816d9aaca8ca6e27aeae0667cb7003fdfc659aa733b86bf287588033bd204f0bc7b4aeda8a3a71194002ddeda1f0cb0065acda12fb4e599fc7d49a6a16d8d02285fc0d0ed0aea9f54a6ed7c535721bddacc568d41aaf24679ab5b8e81793b45d0d3f8a4a730e8e729d4234df755a2f27a86077756d8de0a8d5f4a85cf81011d126bbaf4544cb6f5fcbc1ae40815a0d61ac812f292934cb13e9864188edd9e996699661fa6832d0bb47577a230580541074a19578de45e35ef4cd34b85675a52eb17e833b311874d79466b71116056bc5d6b852c8576de4a21aa25fd195e7869a3a9da2a0a097059863ca0155776c762b35ef2c621e8cd930941da78411bf4a03b6c21f90124e81874791c3c9ba815355b7a1cf1a292b989e338d84a441781e2c89b3757f1288c222952d77bdf73f38e9d3596020fac2956cee3f5a85ab21a7a12a270b882da2c66bc67cfcf8c6979f60843291cb1dabe6323fee28af15d2e0d45630443215c7406ef9d19dc834759aced0bddd4392429b11d5d22b823a2915e21026f0f3097c4510f921868438662f8a8c31081005ce9698ce39d199f86c67566d703b853ff5e35c5526689166774e8510f30af4e3b3c2811a0b82774a481cde5a8247fe2a46e030fd13f58e367c8c4d77bac45140b547bb0b71cbcadb6c1da59768f2507958c924b6177a31bfa39f22fe3efc4c20d3f0339d9071d89d98e0726b923c3a9463d2287d18c77e1dde203ca2af88c96095ccfee1f3776257e901a50f15b8c23e6c0bcf5cf9ebcc949cac061684dd3757c424fdd9a197cb2a8e8c6d2e04482a93ff516aa009105b4691e0ed85c51fb7684cd37acefb7aad87337010de2edf4a857bc384e03645f42f29d0ed49e0e787ea71c9d7b78a155ae8737152838f98578e135bdb24b3cfdd8305397b8eea39fc31531c0ce5838b9d5d0888a576894fe8ceafc3d10795ff171c144a042bc6444634645d7e021e0e70351ad44bb49b3d8e0362366fd34eeb07c1696fb54ed207b57c1aefb6259560ed9e584db30916f0191cb005137ca9c24d24e8cdba26b6821b95346ca2baf7a0680b9949f8b95039548ef18f378b17c38768e1a96513f11b1a8077b2c6e5a1d12de3c2fcd1ab25eab9e1d57d5165a9048d77b3aed85d61de1030130e1661acdb71b42b36d6a3b9358dde6d6c88c7daf71f37a0b9b24c5a7656a76d2ff588579d321a90a597bfa55521f5e9d42b0c92c5352eea9937c29d4908761e19f71264ea877c3d465a90bf6ffa00bc946ef52f381c8a215d54bbe3a0832a23803a0a7f396aff2aa653929a62679f07ced279e28c4224fc791ce818545d84a4e1f3cf204514fa0ce890446ff85a1d84d3575fafe642e5dfe9a50981dedfc09e840c41fed11530e75b8fec3fc50121b12be8e7ac299943cdd2d9f40136f5e7b358d34d5e43bab98c3f2b3a623bc2118890c1d9139906ef4a2e6afbb4551d18517299431d9f0ddf75c003e76bff355160a8bfeaeb30179a7000649c7f872b7f299078d32173eff9955946314fb25768f947b43debde8b25434e2515a0055651de90fa2939b394a81813155478950aca89959d0e5fc5bb003acd5847487eb5c7b2e8c61e74051d2e308f984d8b6f776481dd66f0fe318f2418435cef7df6c7ce25aa6e009cfa629b068e8b58f41e44728b9e20432aca800cd0183c18b241daa472729dddf4800385a51d473bb762d9d95839d23a0524643ecaea22813be7e2dbd75c8ad174fadeb667326d24a1e96cf31c69a8b011cc542a6a52ea6a263bf6644dce117c634986a1dc73595333f9f5a5ab9450794c656fdef3905af17ea870367f06a2dfe793de21b395e2f63932688f4ec145e82e1560674f3b0ed5ef216b404126de555bd8de6fe823098b9c88a3eb844d1d22957e98c8b75f8ffcc36b579bd5abf2abde53da247f4bf7854f048447d1062c11ecb11c86517d37166f9315828d408b4edf7db97e0d1c688e21f2509b45144e7f23017cc0cd08ecfa2b9b9f8a62984f03cc7fe5aa5afef71614fbc5352abe624907ac220354c8cad5cf5ac5b1a2711677e05ce510b277d7d17de437b4889d7f209329beee1edcdfd484cfe8f7e35f5c37149c90a175157ae1e135f89f603651ba198174f013cbfe40d535138073567427f97ccb8ec0bdf574dc8dcafe331037f3f8b57e731af95b71a7818eaa97af5380be615f6cb783d4cae9d8c5f509c65642b62a89be0b689f6", 0xb6f) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 17:48:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 17:48:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x24}, 0x25}, 0x0) 17:48:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x3}]}, 0x20}}, 0x0) 17:48:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040), 0x10) [ 593.105812][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:48:17 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x11}, 0x0) 17:48:17 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0xc000) 17:48:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x11}]}, 0x20}}, 0x0) 17:48:17 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 17:48:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x9, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 593.277373][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 593.451988][ T3674] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 593.812131][ T3674] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.823389][ T3674] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.833532][ T3674] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.847429][ T3674] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 593.856947][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.402071][ T3674] usbhid 6-1:8.0: can't add hid device: -71 [ 594.408190][ T3674] usbhid: probe of 6-1:8.0 failed with error -71 [ 594.417482][ T3674] usb 6-1: USB disconnect, device number 32 17:48:18 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0x2}, 0x0) 17:48:18 executing program 3: socket(0x2c, 0x3, 0x7fffffff) 17:48:18 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000017c0)={0x4, 0x0, @dev}, 0x10) 17:48:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2506"], 0x1c}}, 0x0) 17:48:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x7ffff000}}, 0x0) 17:48:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 17:48:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x81, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x10000, 0x229800) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000080)) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000100)={0x60a, 0x8ced, 0x4, 0x8, '\x00', '\x00', '\x00', 0x3, 0x0, 0x40, 0x6ef75780, "0480dc713a35cf12744d134058ee011e"}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5d}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008095}, 0x10000001) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000340)="8030fb3e1b3f923d2caf36a6cdb23f6cc4cdf8c1c0644b1a990fac2c702ce6509fc2d40206035c693431495bc61a0fe75547c622344a25ae13ea98ab5b15b105266b27ccb3bba27a8540a04664abfcd20376ba0182809b3921c5a33c3413048ceb6c2f9ee5494f3471a9c8e1b39d0f528167bc040e499b1b5dbcad6893c324cc09a77b22e1a7d7a78efd0656625fa5d834be09918e9e194f245a018e0cf8b198701872f78f85ee7aa8a05d0b8949f4e01221ce0d45d9e40525a37a98ebfa9e7a3f9fd9ac0c53617276d25a8a94") ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000440)) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000480)) r3 = syz_open_dev$audion(&(0x7f00000004c0), 0x3, 0x401) ioctl$sock_bt_hci(r3, 0x400448c9, &(0x7f0000000500)="2501f345c0737ae36d377843f2f4309b7e4db375677e2e60f4be6869e793cafb8c2afffe34903030752062b9045a332de1e82eabcb99487c07460fab0c66d5e93a363aa3ff20a5361ff87608007347a3e969c5e47f7692dcc919f7a39b701e2ebe5ca176557924ec5b893f25fc04c5262338fbe37a95f105d1874e5c0cdfe97fce278782677445241e0b4abe94fc94f5c43976896fb2937ac29065bfd420041bc6e9eff60178b9af171fe96048f4e6d5b87a272a3ebf3b75743917618016de627d8dfb1ebb19edc07a12c5b555") ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000600)={0x200}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x72, &(0x7f00000006c0)=@generic={0x1, 0x2, 0x6a, "d8beca79", "d16205f6aac13af523d7db69ab147639fa0ee39b2e2f1c93c12276eec7d57f6b9177d67a2cc052af6a1430211df009c601623263968178cc5d9feec640292df774064dee1f5490f54d290720ae85b580083e719364af72d1f808ab35d04aa7c4fb709b0e3a2372e6acbf"}) socket(0x2, 0x800, 0x1) 17:48:19 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x0) 17:48:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}}, 0x0) 17:48:19 executing program 3: syz_open_dev$audion(&(0x7f00000004c0), 0x0, 0x401) 17:48:19 executing program 1: socket$rds(0x15, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0xc000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000004) [ 594.926614][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 595.282011][ T3751] usb 3-1: new high-speed USB device number 18 using dummy_hcd 17:48:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4fc7a67e51934c9d7f9f5b"], 0x24}}, 0x0) 17:48:19 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:19 executing program 0: syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) 17:48:19 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000dc0)={&(0x7f00000002c0)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) 17:48:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x24}, 0x300}, 0x0) 17:48:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='\r', 0x1}) 17:48:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 595.892818][ T3751] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 595.901966][ T3751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.909985][ T3751] usb 3-1: Product: syz [ 595.915000][ T3751] usb 3-1: Manufacturer: syz [ 595.919610][ T3751] usb 3-1: SerialNumber: syz [ 595.972781][ T3751] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 596.612060][ T3751] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 597.067157][ T3673] usb 3-1: USB disconnect, device number 18 17:48:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0xec0}}, 0x0) 17:48:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xfffffdef}}, 0x0) 17:48:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xb}]}, 0x20}}, 0x0) 17:48:21 executing program 3: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000050017"], 0x24}}, 0x0) 17:48:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x5, &(0x7f0000000780)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000800)='syzkaller\x00', 0x4, 0xf5, &(0x7f0000000840)=""/245, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:21 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:21 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0xffffffffffffffcd, 0x0}, 0x0) 17:48:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x4000000) 17:48:21 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0xc000) [ 597.633053][T19891] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 597.653815][ T3751] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 597.660811][ T3751] ath9k_htc: Failed to initialize the device 17:48:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4810200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 17:48:21 executing program 1: syz_usb_connect(0x0, 0x46, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x22, 0x89, 0xae, 0x20, 0x1608, 0x7, 0x968d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0xb9, 0xf2, 0x50, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x3, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x93, 0x5b}}]}}]}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=@raw=[@cb_func], 0x0, 0x0, 0x48, &(0x7f0000000080)=""/72, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3f}, 0x10, 0xfd82, 0xffffffffffffffff, 0x0, &(0x7f0000000200)}, 0x80) 17:48:21 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000018c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) [ 597.676772][T19892] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 597.684233][ T3673] usb 3-1: ath9k_htc: USB layer deinitialized 17:48:21 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 17:48:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000440), 0x4) 17:48:21 executing program 0: syz_clone(0x7f000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 17:48:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x15, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180000001f0000000000000000000000bcb60200f4ffffff95"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:48:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00'}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x3f00000000000000, 0x0, 0x200000000000008) 17:48:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x83801, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f00000000c0)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000040)="ed411a080004dff4655fd8f4655f04000000000000000000040020000000001d", 0x20, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)) [ 598.072001][T18667] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 598.092033][T18660] usb 5-1: new high-speed USB device number 17 using dummy_hcd 17:48:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) [ 598.372050][T18667] usb 2-1: Using ep0 maxpacket: 32 [ 598.377336][T18660] usb 5-1: Using ep0 maxpacket: 8 [ 598.493375][T18667] usb 2-1: config 0 has an invalid interface number: 166 but max is 1 [ 598.501578][T18667] usb 2-1: config 0 has no interface number 1 [ 598.508276][T18667] usb 2-1: config 0 interface 166 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 598.519570][T18660] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 598.528859][T18667] usb 2-1: config 0 interface 166 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 598.539929][T18660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.550871][T18660] usb 5-1: config 0 descriptor?? [ 598.732156][T18667] usb 2-1: New USB device found, idVendor=1608, idProduct=0007, bcdDevice=96.8d [ 598.741339][T18667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.749488][T18667] usb 2-1: Product: syz [ 598.754489][T18667] usb 2-1: Manufacturer: syz [ 598.759232][T18667] usb 2-1: SerialNumber: syz [ 598.766063][T18667] usb 2-1: config 0 descriptor?? [ 598.805652][T18667] io_edgeport 2-1:0.166: required endpoints missing [ 598.816304][T18667] io_edgeport 2-1:0.0: required endpoints missing [ 599.005437][T18667] usb 2-1: USB disconnect, device number 9 [ 599.012323][T18660] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 599.029504][T18660] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 599.039892][T18660] asix: probe of 5-1:0.0 failed with error -61 [ 599.216509][ T3674] usb 5-1: USB disconnect, device number 17 17:48:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:23 executing program 4: syz_usb_connect(0x3, 0x42, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x22, 0x89, 0xae, 0x20, 0x1608, 0x7, 0x968d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xb9, 0xf2, 0x50, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x400}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0x0, [@generic={0x3, 0x5, "ba"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200}}]}}]}}]}}, 0x0) 17:48:23 executing program 1: syz_usb_connect(0x0, 0x46, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x22, 0x89, 0xae, 0x20, 0x1608, 0x7, 0x968d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0xb9, 0xf2, 0x50, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x3, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x93, 0x5b}}]}}]}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=@raw=[@cb_func], 0x0, 0x0, 0x48, &(0x7f0000000080)=""/72, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3f}, 0x10, 0xfd82, 0xffffffffffffffff, 0x0, &(0x7f0000000200)}, 0x80) 17:48:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:23 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57"]}]}, 0x114}], 0x1}, 0x0) 17:48:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:23 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:23 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) [ 599.748445][T19947] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 599.762566][T19948] loop3: detected capacity change from 0 to 15 17:48:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x124) fallocate(r0, 0x100000001, 0x0, 0x2811fdff) socket$inet_udplite(0x2, 0x2, 0x88) 17:48:24 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:24 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:24 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="000600000000000007"], 0x40) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="e0", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 600.002061][ T3674] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 600.016696][T19962] loop3: detected capacity change from 0 to 15 [ 600.052322][ T6] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 600.242061][ T3674] usb 2-1: Using ep0 maxpacket: 32 [ 600.301952][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 600.362242][ T3674] usb 2-1: config 0 has an invalid interface number: 166 but max is 1 [ 600.370419][ T3674] usb 2-1: config 0 has no interface number 1 [ 600.376853][ T3674] usb 2-1: config 0 interface 166 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.387722][ T3674] usb 2-1: config 0 interface 166 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.422153][ T6] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.433005][ T6] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.443696][ T6] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 600.455106][ T6] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.465766][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.552176][ T3674] usb 2-1: New USB device found, idVendor=1608, idProduct=0007, bcdDevice=96.8d [ 600.561227][ T3674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.573982][ T3674] usb 2-1: Product: syz [ 600.578160][ T3674] usb 2-1: Manufacturer: syz [ 600.584646][ T3674] usb 2-1: SerialNumber: syz [ 600.601214][ T3674] usb 2-1: config 0 descriptor?? [ 600.642876][ T6] usb 5-1: New USB device found, idVendor=1608, idProduct=0007, bcdDevice=96.8d [ 600.656587][ T3674] io_edgeport 2-1:0.166: required endpoints missing [ 600.663406][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.671400][ T6] usb 5-1: Product: syz [ 600.679485][ T3674] io_edgeport 2-1:0.0: required endpoints missing [ 600.696459][ T6] usb 5-1: Manufacturer: syz [ 600.704380][ T6] usb 5-1: SerialNumber: syz [ 600.717723][ T6] usb 5-1: config 0 descriptor?? [ 600.763919][ T6] io_edgeport 5-1:0.0: required endpoints missing [ 600.868991][ T6] usb 2-1: USB disconnect, device number 10 [ 600.967518][ T3676] usb 5-1: USB disconnect, device number 18 17:48:25 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587c3"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 17:48:25 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012b00)) 17:48:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x124) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(0xffffffffffffffff) 17:48:25 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x1000, &(0x7f0000000100)=ANY=[]) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000b40)=[{0x0, 0x0, 0xfffffffffffffffd}], 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r0, 0xea) 17:48:25 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) [ 601.496114][T19974] loop3: detected capacity change from 0 to 15 17:48:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:25 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:25 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) [ 601.732305][T19988] loop3: detected capacity change from 0 to 15 17:48:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) [ 601.841924][ T3676] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 601.951992][T19995] loop3: detected capacity change from 0 to 15 [ 602.212268][ T3676] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 602.227472][ T3676] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 602.238061][ T3676] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 602.247367][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.313025][ T3676] yealink 5-1:4.0: invalid payload size 0, expected 16 [ 602.331269][ T3676] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.0/input/input42 [ 602.607952][ T3676] usb 5-1: USB disconnect, device number 19 [ 602.621918][ C0] yealink 5-1:4.0: urb_ctl_callback - urb status -2 17:48:27 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587c3"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 17:48:27 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:27 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x1000, &(0x7f0000000100)=ANY=[]) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000b40)=[{0x0, 0x0, 0xfffffffffffffffd}], 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r0, 0xea) 17:48:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 17:48:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x124) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(0xffffffffffffffff) [ 603.245075][T20001] loop3: detected capacity change from 0 to 15 17:48:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 17:48:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:27 executing program 0: socket(0x0, 0x8080b, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 603.437610][T20013] loop3: detected capacity change from 0 to 15 17:48:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 603.522189][T17940] usb 6-1: new high-speed USB device number 33 using dummy_hcd 17:48:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) [ 603.576195][ T3676] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 603.597068][T20020] loop3: detected capacity change from 0 to 15 [ 603.737120][T17940] usb 6-1: device descriptor read/64, error 18 [ 603.962158][ T3676] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 603.982344][ T3676] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 603.997185][ T3676] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 604.006504][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.022321][T17940] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 604.079919][ T3676] yealink 5-1:4.0: invalid payload size 0, expected 16 [ 604.105713][ T3676] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.0/input/input43 [ 604.226167][T17940] usb 6-1: device descriptor read/64, error 18 [ 604.352384][T17940] usb usb6-port1: attempt power cycle [ 604.374140][ T3676] usb 5-1: USB disconnect, device number 20 [ 604.381985][ C0] yealink 5-1:4.0: urb_ctl_callback - urb status -2 [ 604.772018][T17940] usb 6-1: new high-speed USB device number 35 using dummy_hcd 17:48:29 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587c3"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 17:48:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:29 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) [ 604.962112][T17940] usb 6-1: device descriptor read/8, error -61 [ 605.008602][T20028] fuse: Bad value for 'fd' [ 605.012119][T20029] loop3: detected capacity change from 0 to 15 [ 605.241985][T17940] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 605.341942][T18660] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 605.422107][T17940] usb 6-1: device descriptor read/8, error -61 [ 605.542286][T17940] usb usb6-port1: unable to enumerate USB device [ 605.702741][T18660] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 605.718610][T18660] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 605.728429][T18660] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 605.737693][T18660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.795625][T18660] yealink 5-1:4.0: invalid payload size 0, expected 16 [ 605.811991][T18660] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.0/input/input44 [ 606.086547][T18660] usb 5-1: USB disconnect, device number 21 [ 606.101900][ C1] yealink 5-1:4.0: urb_ctl_callback - urb status -2 17:48:30 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 17:48:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x124) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(0xffffffffffffffff) 17:48:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:30 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x4c880) 17:48:30 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) 17:48:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) [ 606.286679][T20039] loop3: detected capacity change from 0 to 15 17:48:30 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 17:48:30 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587c3"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 17:48:30 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0x0, @loopback, 0x0, 0x0, 'none\x00'}, {@broadcast}}, 0x44) 17:48:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) [ 606.711887][ T3751] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 606.749994][T20055] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 606.911912][ T3751] usb 6-1: device descriptor read/64, error 18 [ 607.032002][ T3746] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 607.181908][ T3751] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 607.372085][ T3751] usb 6-1: device descriptor read/64, error 18 [ 607.402054][ T3746] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 607.413155][ T3746] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 607.423068][ T3746] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 607.432254][ T3746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.485841][ T3746] yealink 5-1:4.0: invalid payload size 0, expected 16 [ 607.493310][ T3751] usb usb6-port1: attempt power cycle [ 607.499462][ T3746] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.0/input/input45 [ 607.785320][ T3746] usb 5-1: USB disconnect, device number 22 [ 607.801879][ C1] yealink 5-1:4.0: urb_ctl_callback - urb status -2 [ 607.901960][ T3751] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 608.072032][ T3751] usb 6-1: device descriptor read/8, error -61 [ 608.351921][ T3751] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 608.522134][ T3751] usb 6-1: device descriptor read/8, error -61 [ 608.643227][ T3751] usb usb6-port1: unable to enumerate USB device 17:48:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:33 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000500)) 17:48:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 17:48:33 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587c3"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:48:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 17:48:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:48:33 executing program 1: pipe2(&(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) 17:48:33 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:33 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) 17:48:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x200040) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) [ 609.602124][T18667] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 609.771968][ T3751] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 609.962006][T18667] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 609.973031][ T3751] usb 6-1: device descriptor read/64, error 18 [ 609.979261][T18667] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 609.989946][T18667] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 609.999386][T18667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.044358][T18667] yealink 5-1:4.0: invalid payload size 0, expected 16 [ 610.052284][T18667] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.0/input/input46 [ 610.241944][ T3751] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 610.349811][T18667] usb 5-1: USB disconnect, device number 23 [ 610.371858][ C1] yealink 5-1:4.0: urb_ctl_callback - urb status -2 [ 610.441931][ T3751] usb 6-1: device descriptor read/64, error 18 [ 610.563521][ T3751] usb usb6-port1: attempt power cycle [ 610.991913][ T3751] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 611.162215][ T3751] usb 6-1: device descriptor read/8, error -61 [ 611.451936][ T3751] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 611.642161][ T3751] usb 6-1: device descriptor read/8, error -61 [ 611.764610][ T3751] usb usb6-port1: unable to enumerate USB device 17:48:36 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) 17:48:36 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 17:48:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) 17:48:36 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587c3"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 17:48:36 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:36 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r0 = geteuid() syz_mount_image$bfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, 0x4, &(0x7f0000000400)=[{&(0x7f0000000100)="13ebab012a6fc3b4c0285703345aa43ec473e516d2f629957e577d4870451dbea219b7", 0x23, 0x100000}, {&(0x7f0000000140)="f95e443d0337361d129becec8f131e797b2e5e1e2a16ac23eab1287232bb00bde3e75e86a53901f2ccc2b54e5398b858f0924e39d252d1602effb60f4f893f22c274d810f90cce7fd373938b9b9c8ef33166ab0a948cee5c507b9aa3c610d96ceaf0595619b430a202d84c2cae3b022a6bf753d0f390292e39444a684ccc71c218d23cda8d5b99c6ec323d0f2a9f75712be86494c0387badccedfea8a26c89b4507af6", 0xa3, 0x400}, {&(0x7f0000000200)="4f677bf60b5a866a964a8fefe39ce252084e5516f36efd6187942365b3cf8f12771b7de6a3d425104713cf2af5cd5e57e4ec6ea9ac1f7f1f48359000ac05ef9adcfe682729ee6d3d0e52964fa2cdc00828f78ebadb427832a4820678a48c8091c6203764d61fd6c61c42b22ff11227b1ca64c2c86a7f07a0b8cada763bf5fca0153062990585cff24e3dc544f6b4621cc051f8af5a07ba0c56456c28c9e9be7b17af5c8ff2ba18437b6182cc526f6da35759853e886cb7f2d885edc83bdf34974307256429d554810f4a91cda6b9c0069b9529b070520cd6c36f664078457c4b45dd50c309dacab380a164760463fd207451a6691062e24f07", 0xf9}, {&(0x7f0000000300)="e7d60435a934e07cc762352f2b770fef8a0a4939f7045a1b8711ad55d3656d042826e9be82b5e46e8921110b634fd12af949704bafa29a2d0aae567087599b52fccb8efa4abb32d7dff3e497c990d55c5d6a471cbf2abf0cc3c8e198091485f10d8f774235b1234e2148802d8c903881bc36e3eb25ff77dafa76e7f1f365f83e84c18e5747c2fc5011fde8981955adedfca93b22310a4600059ff87f3d55f99f20f78716c1f6", 0xa6, 0x8}], 0x800080, &(0x7f0000000480)={[{}, {'/dev/dlm-monitor\x00'}, {'/dev/dlm-monitor\x00'}, {'$'}, {'/dev/dlm-monitor\x00'}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@audit}, {@euid_eq={'euid', 0x3d, r0}}, {@fsname={'fsname', 0x3d, '\\'}}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@smackfshat={'smackfshat', 0x3d, '/dev/dlm-monitor\x00'}}]}) 17:48:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) 17:48:36 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000180, 0x0, 0x0, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=[{}, {}, {}]}, 0x108) [ 612.428835][T20090] loop3: detected capacity change from 0 to 15 17:48:36 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:36 executing program 0: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@session={'session', 0x3d, 0x8000000000000001}}]}) 17:48:36 executing program 1: r0 = socket(0x29, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmmsg$unix(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000884}}], 0x1, 0x0) 17:48:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) [ 612.613261][T20103] loop3: detected capacity change from 0 to 15 [ 612.681981][ T918] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 612.741960][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 612.862139][T17940] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 613.042094][ T918] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 613.053091][T17940] usb 6-1: device descriptor read/64, error 18 [ 613.064281][ T918] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 613.077889][ T918] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 613.090895][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.153194][ T918] yealink 5-1:4.0: invalid payload size 0, expected 16 [ 613.160991][ T918] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.0/input/input47 [ 613.322119][T17940] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 613.471874][ C0] yealink 5-1:4.0: urb_ctl_callback - urb status -71 [ 613.479105][ T918] usb 5-1: USB disconnect, device number 24 [ 613.491955][ C0] yealink 5-1:4.0: urb_ctl_callback - urb status -2 [ 613.511921][T17940] usb 6-1: device descriptor read/64, error 18 [ 613.632059][T17940] usb usb6-port1: attempt power cycle [ 614.041980][T17940] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 614.212064][T17940] usb 6-1: device descriptor read/8, error -61 [ 614.482014][T17940] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 614.652307][T17940] usb 6-1: device descriptor read/8, error -61 [ 614.772655][T17940] usb usb6-port1: unable to enumerate USB device 17:48:39 executing program 0: syz_mount_image$squashfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580), &(0x7f00000015c0)=ANY=[], 0xa, 0x0) 17:48:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, '\x00\x00cq'}}}}}, 0x0) 17:48:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:39 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587c3"], 0x0) syz_usb_disconnect(r0) 17:48:39 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 17:48:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, '\x00\x00cq'}}}}}, 0x0) 17:48:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="b9ef2a23a25850f27184c3bb59291f", 0xf}, {&(0x7f0000000200)='E', 0x1}], 0x2}, 0x0) 17:48:39 executing program 1: syz_mount_image$reiserfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000024c0)=[{&(0x7f00000001c0)="c5", 0x1}, {&(0x7f00000011c0)="f7", 0x1}], 0x0, 0x0) [ 615.510573][T20117] loop3: detected capacity change from 0 to 15 17:48:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:39 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 17:48:39 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@nobarrier}, {}]}) 17:48:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, '\x00\x00cq'}}}}}, 0x0) [ 615.687527][T20133] loop3: detected capacity change from 0 to 15 [ 615.752230][ T3676] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 615.921956][ T918] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 616.112260][ T3676] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 616.123535][ T918] usb 6-1: device descriptor read/64, error 18 [ 616.129886][ T3676] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 616.140213][ T3676] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 616.149474][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.194780][ T3676] yealink 5-1:4.0: invalid payload size 0, expected 16 [ 616.202948][ T3676] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.0/input/input48 [ 616.392113][ T918] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 616.498265][ T3676] usb 5-1: USB disconnect, device number 25 [ 616.511882][ C0] yealink 5-1:4.0: urb_ctl_callback - urb status -71 [ 616.518595][ C0] yealink 5-1:4.0: urb_ctl_callback - usb_submit_urb failed -19 [ 616.592023][ T918] usb 6-1: device descriptor read/64, error 18 [ 616.712479][ T918] usb usb6-port1: attempt power cycle [ 617.121919][ T918] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 617.292160][ T918] usb 6-1: device descriptor read/8, error -61 [ 617.562181][ T918] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 617.732159][ T918] usb 6-1: device descriptor read/8, error -61 [ 617.852095][ T918] usb usb6-port1: unable to enumerate USB device 17:48:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$input_event(r0, &(0x7f00000000c0), 0x18) 17:48:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101c00) ioctl$LOOP_CLR_FD(r0, 0x4c01) 17:48:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b"}}}}}, 0x0) 17:48:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:42 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587c3"], 0x0) 17:48:42 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 17:48:42 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 17:48:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b"}}}}}, 0x0) [ 618.549098][T20142] loop3: detected capacity change from 0 to 15 17:48:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:42 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000200), 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x100000001}], 0x0, &(0x7f0000000300)={[{@jqfmt_vfsv0}]}) 17:48:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x0, 0xffff3028, 0x0, 0x0, "1557fc3f09e07b8abc955fed6dfb75a412b6ef"}) [ 618.668471][T20153] loop3: detected capacity change from 0 to 15 [ 618.812061][T18660] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 618.972147][ T918] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 619.162144][ T918] usb 6-1: device descriptor read/64, error 18 [ 619.222127][T18660] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 619.233478][T18660] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 619.243960][T18660] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 619.253216][T18660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.323233][T18660] yealink 5-1:4.0: invalid payload size 0, expected 16 [ 619.334352][T18660] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.0/input/input49 [ 619.431937][ T918] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 619.621959][ T918] usb 6-1: device descriptor read/64, error 18 [ 619.665098][T18660] usb 5-1: USB disconnect, device number 26 [ 619.681898][ C1] yealink 5-1:4.0: urb_ctl_callback - urb status -2 [ 619.742715][ T918] usb usb6-port1: attempt power cycle [ 620.151993][ T918] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 620.322072][ T918] usb 6-1: device descriptor read/8, error -61 [ 620.593247][ T918] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 620.772065][ T918] usb 6-1: device descriptor read/8, error -61 [ 620.892887][ T918] usb usb6-port1: unable to enumerate USB device 17:48:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b"}}}}}, 0x0) 17:48:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 17:48:45 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000180)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:48:45 executing program 4: 17:48:45 executing program 4: 17:48:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) bind$l2tp6(r0, 0x0, 0x0) 17:48:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:48:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c"}}}}}, 0x0) 17:48:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:45 executing program 4: [ 621.981980][T18667] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 622.372239][T18667] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 622.382550][T18667] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 622.391529][T18667] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 622.405233][T18667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.055458][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.061760][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 17:48:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:48 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff0001, 0x208000) 17:48:48 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001580)='2', 0x1}], 0x1, &(0x7f0000001400)=[{0x10}], 0x10}, 0x0) 17:48:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c"}}}}}, 0x0) 17:48:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:48 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 17:48:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c"}}}}}, 0x0) [ 624.667815][ T3674] usb 6-1: USB disconnect, device number 57 17:48:48 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x10041, 0x0, 0x0) 17:48:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000000b45e5"], 0x74}}, 0x0) 17:48:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:48 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xfffffffffffffd85) 17:48:49 executing program 1: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x22002, &(0x7f0000002280)) [ 624.849860][T20201] FAT-fs (loop3): bogus number of reserved sectors [ 624.871422][T20201] FAT-fs (loop3): Can't find a valid FAT filesystem [ 625.111921][ T3674] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 625.471993][ T3674] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 625.484074][ T3674] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 625.493304][ T3674] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 625.502379][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:48:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:51 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:48:51 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x86440, 0x0) 17:48:51 executing program 1: pipe2(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000400), 0x241, 0x0) 17:48:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:51 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 17:48:51 executing program 2: socket$inet(0x2, 0x805, 0x2) [ 627.722921][ T3674] usb 6-1: USB disconnect, device number 58 17:48:51 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002640), 0x1001200, &(0x7f0000002d40)) 17:48:51 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000380)={0x28}, 0x28) [ 627.781649][T20215] FAT-fs (loop3): bogus number of reserved sectors [ 627.814313][T20215] FAT-fs (loop3): Can't find a valid FAT filesystem 17:48:52 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @dev}, &(0x7f0000000040)=0xc) 17:48:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:52 executing program 1: socket(0x25, 0x1, 0x1000) [ 627.999922][T20235] FAT-fs (loop3): bogus number of reserved sectors [ 628.030334][T20235] FAT-fs (loop3): Can't find a valid FAT filesystem [ 628.162039][ T3674] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 628.522166][ T3674] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 628.532522][ T3674] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 628.541565][ T3674] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 628.551356][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:48:54 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={0x0}) 17:48:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x66e6, &(0x7f0000000140)=0x0) pipe2(&(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 17:48:54 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000180), 0x4) 17:48:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:54 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 630.794899][ T3746] usb 6-1: USB disconnect, device number 59 17:48:55 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x4, {0xa, 0x4e21, 0x7f, @empty, 0x20}}}, 0x3a) 17:48:55 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) [ 630.838309][T20244] FAT-fs (loop3): bogus number of reserved sectors 17:48:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) [ 630.887074][T20244] FAT-fs (loop3): Can't find a valid FAT filesystem 17:48:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x148, 0x148, 0xffffffff, 0x148, 0x0, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key, @gre_key}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@loopback, @private1, [], [], 'veth0_vlan\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @ipv4=@remote, @gre_key, @icmp_id}}}, {{@ipv6={@mcast2, @remote, [], [], 'caif0\x00', 'macvtap0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"99b3"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 17:48:55 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0xf, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x2}, 0x20) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x20008801) openat$full(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) 17:48:55 executing program 2: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) [ 631.016630][T20258] x_tables: duplicate underflow at hook 1 17:48:55 executing program 1: r0 = add_key$user(&(0x7f00000004c0), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="b64f", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="f2", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r1, r0}, 0x0, 0x0, 0x0) 17:48:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0xf}, 0x0) 17:48:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 631.086796][T20261] FAT-fs (loop3): bogus number of reserved sectors [ 631.112432][T20261] FAT-fs (loop3): Can't find a valid FAT filesystem [ 631.282161][ T3746] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 631.681973][ T3746] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 631.692270][ T3746] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 631.705279][ T3746] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 631.714428][ T3746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.763770][ T3746] usbhid 6-1:8.0: couldn't find an input interrupt endpoint 17:48:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:48:58 executing program 1: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 17:48:58 executing program 2: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='cdg\x00', 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000800), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000840)) 17:48:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={0x1}) 17:48:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:58 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) 17:48:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) [ 633.885881][T18667] usb 6-1: USB disconnect, device number 60 17:48:58 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={'sha256-arm64-neon\x00'}}) 17:48:58 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x2}, 0x0) 17:48:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) [ 633.953678][T20282] FAT-fs (loop3): bogus number of reserved sectors [ 633.971949][T20282] FAT-fs (loop3): Can't find a valid FAT filesystem 17:48:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:48:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000001000), 0xffffffffffffffff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001040)) [ 634.117963][T20297] loop3: detected capacity change from 0 to 15 [ 634.169736][T20297] FAT-fs (loop3): bogus number of reserved sectors [ 634.197899][T20297] FAT-fs (loop3): Can't find a valid FAT filesystem [ 634.221953][ T3746] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 634.318364][T20293] could not allocate digest TFM handle sha256-arm64-neon [ 634.431995][ T3746] usb 5-1: device descriptor read/64, error 18 [ 634.438264][T18667] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 634.722162][ T3746] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 634.891986][T18667] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 634.902747][T18667] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 634.915908][T18667] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 634.925574][T18667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.933882][ T3746] usb 5-1: device descriptor read/64, error 18 [ 634.974830][T18667] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 635.052342][ T3746] usb usb5-port1: attempt power cycle [ 635.471947][ T3746] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 635.642086][ T3746] usb 5-1: device descriptor read/8, error -61 [ 635.912126][ T3746] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 636.082006][ T3746] usb 5-1: device descriptor read/8, error -61 [ 636.203677][ T3746] usb usb5-port1: unable to enumerate USB device 17:49:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:01 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 17:49:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x7}, "3e00267978cd4374", "8522e11ddba5cd3706dae6008c120218df58f9509cf6ece0bd15fe14d3c58382", "76a8d1f1", "87354960d2480a92"}, 0x38) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_clone(0x100, &(0x7f0000000140)="8660d86c1503dfa37a7dca347b4c6e3bc62e4067be76cc405a341cb5fef99b5afe22a38bc334ee3896a55bb93e95c897f997aa128e42566653900c4b1c22c3f528804e3aa2de7a782464abf24696a410208ce40eb1f31d0d6a426ea870d9b956ea5f33ec6d4faa71b58e7897586d3ae0bfc07f696ecf666495a4638dfaca9f2ca7f7154dd0caf2e71f957575f2c42d0912bbb23ae5b56f337b1ba446307d600f3ecfb0328bc748fa014af81be9e498f07981c29f00505a8d9cedde24cae60c43ea081ccc", 0xc4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="81efb7c6e37ed6e02db91b983036d602e854c741571ac80aeb69e5b871f9d1f6f6435c38b79d2349d645403c39d4ab2ed272cff877bef8731b1bef2b7ab07f2dd0e5bf626fc9d968f9705fac9fb6f2d4cd37fd74cd1646383b2610654ac19cdbbcdff60bd0544c5de0912645f3d9875a108e252e06385882a5a3b8267054c71de997c79cf6095833432f8f4228ca3d82f0bbf69147833f310817b42f387b8829bfed5fc255763aa2b7c6ba3491db07f38dd52ed998") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000400), &(0x7f0000000440)=0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000480)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000500)=[@sack_perm, @sack_perm], 0x2) 17:49:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:01 executing program 1: getpgrp(0x0) syz_clone(0x40280000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380)) 17:49:01 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) [ 637.011359][ T3674] usb 6-1: USB disconnect, device number 61 17:49:01 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000940)={0xa00000, 0x7f, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, '\x00', @string=0x0}}) 17:49:01 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000000280), 0x202802, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000002c0)='^-{%{}\x00', &(0x7f0000000300)='./file0\x00', r1) [ 637.053545][T20314] loop3: detected capacity change from 0 to 15 17:49:01 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) [ 637.111521][T20314] FAT-fs (loop3): bogus number of reserved sectors [ 637.134141][T20314] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:01 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socketpair(0x1f, 0x0, 0x0, &(0x7f00000004c0)) 17:49:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:01 executing program 2: bind$rds(0xffffffffffffffff, 0x0, 0x0) [ 637.281343][T20328] loop3: detected capacity change from 0 to 15 [ 637.302614][T20328] FAT-fs (loop3): bogus number of reserved sectors [ 637.332956][T20328] FAT-fs (loop3): Can't find a valid FAT filesystem [ 637.396665][ T3676] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 637.482824][ T3674] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 637.612053][ T3676] usb 5-1: device descriptor read/64, error 18 [ 637.842294][ T3674] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 637.856901][ T3674] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 637.870619][ T3674] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 637.879911][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.888126][ T3676] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 637.944966][ T3674] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 638.082041][ T3676] usb 5-1: device descriptor read/64, error 18 [ 638.202226][ T3676] usb usb5-port1: attempt power cycle [ 638.612354][ T3676] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 638.782144][ T3676] usb 5-1: device descriptor read/8, error -61 [ 639.051950][ T3676] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 639.222089][ T3676] usb 5-1: device descriptor read/8, error -61 [ 639.342102][ T3676] usb usb5-port1: unable to enumerate USB device 17:49:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:04 executing program 0: sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) 17:49:04 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000940)={0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 17:49:04 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) 17:49:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:04 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) 17:49:04 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 17:49:04 executing program 2: openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) [ 640.073849][T18660] usb 6-1: USB disconnect, device number 62 [ 640.111230][T20341] loop3: detected capacity change from 0 to 15 17:49:04 executing program 1: add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000003c0)="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", 0x1000, 0xffffffffffffffff) [ 640.167435][T20341] FAT-fs (loop3): bogus number of reserved sectors [ 640.202604][T20341] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000400), &(0x7f0000000440)=0x4) 17:49:04 executing program 1: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x807c6406, &(0x7f00000000c0)=""/158) 17:49:04 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001100)={&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) [ 640.501979][T18667] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 640.531947][T18660] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 640.691954][T18667] usb 5-1: device descriptor read/64, error 18 [ 640.892030][T18660] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 640.902551][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 640.915696][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 640.924975][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.972124][T18667] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 640.981292][T18660] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 641.183809][T18667] usb 5-1: device descriptor read/64, error 18 [ 641.302055][T18667] usb usb5-port1: attempt power cycle [ 641.732069][T18667] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 641.952046][T18667] usb 5-1: device descriptor read/8, error -61 [ 642.221952][T18667] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 642.392509][T18667] usb 5-1: device descriptor read/8, error -61 [ 642.513931][T18667] usb usb5-port1: unable to enumerate USB device 17:49:07 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020) 17:49:07 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001100)={&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 17:49:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:07 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), 0xffffffffffffffff) 17:49:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:07 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 17:49:07 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002140), 0x10) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000022c0)=""/135) 17:49:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 643.122417][ T3674] usb 6-1: USB disconnect, device number 63 17:49:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000023c0)={0x1, &(0x7f0000002380)=[{}]}) [ 643.184230][T20370] loop3: detected capacity change from 0 to 15 17:49:07 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002140), 0x10) 17:49:07 executing program 0: socketpair(0x21, 0x0, 0x0, &(0x7f0000001080)) [ 643.236209][T20370] FAT-fs (loop3): bogus number of reserved sectors 17:49:07 executing program 1: r0 = socket(0x18, 0x0, 0x2) connect$caif(r0, 0x0, 0x0) 17:49:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x4004811) [ 643.294474][T20370] FAT-fs (loop3): Can't find a valid FAT filesystem [ 643.582032][ T3674] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 643.611920][T18660] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 643.821941][T18660] usb 5-1: device descriptor read/64, error 18 [ 643.942099][ T3674] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 643.956730][ T3674] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 643.969694][ T3674] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 643.985833][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.036053][ T3674] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 644.101915][T18660] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 644.291909][T18660] usb 5-1: device descriptor read/64, error 18 [ 644.412588][T18660] usb usb5-port1: attempt power cycle [ 644.822007][T18660] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 645.024386][T18660] usb 5-1: device descriptor read/8, error -61 [ 645.292031][T18660] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 645.473948][T18660] usb 5-1: device descriptor read/8, error -61 [ 645.592742][T18660] usb usb5-port1: unable to enumerate USB device 17:49:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 17:49:10 executing program 2: r0 = socket(0x2, 0x3, 0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2}, 0x200000cc, &(0x7f00000002c0)={0x0}}, 0x0) 17:49:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0xfffffff8, 0x4) 17:49:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:10 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 17:49:10 executing program 2: bpf$BPF_BTF_LOAD(0x4, 0x0, 0x700) 17:49:10 executing program 0: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000240)) [ 646.199052][ T918] usb 6-1: USB disconnect, device number 64 [ 646.224627][T20394] loop3: detected capacity change from 0 to 15 17:49:10 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) accept$phonet_pipe(r0, 0x0, 0x0) [ 646.277821][T20394] FAT-fs (loop3): bogus number of reserved sectors [ 646.293213][T20394] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 17:49:10 executing program 0: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 646.419392][T20410] loop3: detected capacity change from 0 to 15 [ 646.457722][T20410] FAT-fs (loop3): bogus number of reserved sectors [ 646.465202][T20410] FAT-fs (loop3): Can't find a valid FAT filesystem [ 646.631974][ T3674] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 646.691970][ T918] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 646.822030][ T3674] usb 5-1: device descriptor read/64, error 18 [ 647.052451][ T918] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 647.066977][ T918] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 647.080054][ T918] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 647.092411][ T3674] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 647.106120][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.154047][ T918] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 647.282000][ T3674] usb 5-1: device descriptor read/64, error 18 [ 647.402193][ T3674] usb usb5-port1: attempt power cycle [ 647.812049][ T3674] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 647.982714][ T3674] usb 5-1: device descriptor read/8, error -61 [ 648.251961][ T3674] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 648.422024][ T3674] usb 5-1: device descriptor read/8, error -61 [ 648.542883][ T3674] usb usb5-port1: unable to enumerate USB device 17:49:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000440)) 17:49:13 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x8140, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 17:49:13 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x80c0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x200, &(0x7f00000001c0)) 17:49:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:13 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) [ 649.275861][ T918] usb 6-1: USB disconnect, device number 65 17:49:13 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x80c0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x0, &(0x7f00000001c0)) 17:49:13 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x80442, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x40, &(0x7f00000001c0)) [ 649.317435][T20426] loop3: detected capacity change from 0 to 15 [ 649.350096][T20426] FAT-fs (loop3): bogus number of reserved sectors 17:49:13 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x8140, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) 17:49:13 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x80c0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x8, &(0x7f0000000080)) [ 649.382441][T20426] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x0, 0x0, 0x0, 0x1000, 0x1}, 0x48) 17:49:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'macvlan0\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x400454ca, &(0x7f0000000040)) [ 649.701922][ T3674] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 649.751919][ T918] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 649.891932][ T3674] usb 5-1: device descriptor read/64, error 18 [ 650.112047][ T918] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 650.125263][ T918] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 650.134415][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.162011][ T3674] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 650.193452][ T918] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 650.351957][ T3674] usb 5-1: device descriptor read/64, error 18 [ 650.473658][ T3674] usb usb5-port1: attempt power cycle [ 650.881898][ T3674] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 651.052243][ T3674] usb 5-1: device descriptor read/8, error -61 [ 651.321939][ T3674] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 651.492299][ T3674] usb 5-1: device descriptor read/8, error -61 [ 651.612252][ T3674] usb usb5-port1: unable to enumerate USB device 17:49:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100cf"], &(0x7f0000000180)=""/239, 0xcf, 0xef, 0x1}, 0x20) 17:49:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x5}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/194, 0x4a, 0xc2, 0x1}, 0x20) 17:49:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000800)={[{0x0, 'perf_event'}]}, 0xc) 17:49:16 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d000000010902"], 0x0) 17:49:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) [ 652.355286][T18660] usb 6-1: USB disconnect, device number 66 17:49:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'macvlan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x10d}]}) 17:49:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003f00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003f80)="f012b8a9ad011d359cbece9939a61042de97a7c8ee96b4360dad6d2eb4381d30029ad6c5efa563c2794a3ae5a94bb1427bd74c9a65635f407f76a61f303a68081869c42a632554551aab73d13a7de466b18de80699bdb1a02003cef167527fd3d5ded7b2c48e770f7688028433b078e82bb72a1099b722a6aeb7ee4afb85b232dd9db28518c7416a7dd8ae38b11d48f5c6ca5c01be5532519af0b1b3b937c9b1c82fb8d95b92c2cfd47df6774584", 0xae}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001800)=""/174, 0xae}], 0x1}, 0x0) 17:49:16 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) [ 652.396670][T20450] loop3: detected capacity change from 0 to 15 17:49:16 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0x10) [ 652.464352][T20450] FAT-fs (loop3): bogus number of reserved sectors [ 652.470902][T20450] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:16 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') 17:49:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x5}]}]}}, &(0x7f00000001c0)=""/162, 0x32, 0xa2, 0x1}, 0x20) 17:49:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200643, 0x0) close(r0) 17:49:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:16 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000240)=""/173, 0x2e, 0xad, 0x1}, 0x20) 17:49:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000240)=""/173, 0x2e, 0xad, 0x1}, 0x20) [ 652.732740][T20478] loop3: detected capacity change from 0 to 15 [ 652.757795][T20478] FAT-fs (loop3): bogus number of reserved sectors [ 652.776363][ T3674] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 652.782054][T20478] FAT-fs (loop3): Can't find a valid FAT filesystem [ 652.822041][T18660] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 653.142662][ T3674] usb 5-1: config 0 has no interfaces? [ 653.148176][ T3674] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 653.162041][ T3674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.178813][ T3674] usb 5-1: config 0 descriptor?? [ 653.242113][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 653.255436][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 653.264948][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.324282][T18660] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 653.424701][T18660] usb 5-1: USB disconnect, device number 51 17:49:18 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d000000010902"], 0x0) [ 654.216996][ T3674] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 654.582141][ T3674] usb 5-1: config 0 has no interfaces? [ 654.587742][ T3674] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 654.601713][ T3674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.620621][ T3674] usb 5-1: config 0 descriptor?? [ 654.867481][T18660] usb 5-1: USB disconnect, device number 52 17:49:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:19 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:49:19 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001ac0)='syz0\x00', 0x1ff) 17:49:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:49:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:19 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d000000010902"], 0x0) 17:49:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@call], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:49:19 executing program 0: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000400)=[{0x0}, {0x0, 0x0, 0x400}, {&(0x7f0000000200)}], 0x0, &(0x7f0000000480)={[{'/dev/dlm-monitor\x00'}, {'}][*:\\-'}, {'/dev/dlm-monitor\x00'}, {'$'}], [{@hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@audit}, {@euid_eq}, {@euid_gt={'euid>', 0xee00}}]}) 17:49:19 executing program 2: bpf$BPF_PROG_ATTACH(0x7, &(0x7f0000000200)={@map}, 0x14) [ 655.393977][ T3676] usb 6-1: USB disconnect, device number 67 [ 655.429587][T20487] loop3: detected capacity change from 0 to 15 17:49:19 executing program 2: bpf$BPF_PROG_ATTACH(0x12, &(0x7f0000000200)={@map}, 0x14) [ 655.473864][T20487] FAT-fs (loop3): bogus number of reserved sectors [ 655.501327][T20487] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x200003a5, 0x2, [@typedef]}}, &(0x7f0000000380)=""/232, 0x26, 0xe8, 0x1}, 0x20) 17:49:19 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) [ 655.712436][ T3674] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 655.862060][ T3676] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 656.072080][ T3674] usb 5-1: config 0 has no interfaces? [ 656.077613][ T3674] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 656.086688][ T3674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.101530][ T3674] usb 5-1: config 0 descriptor?? [ 656.222044][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 656.235051][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 656.244405][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.293979][ T3676] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 656.344120][ T3676] usb 5-1: USB disconnect, device number 53 17:49:22 executing program 0: bpf$BPF_PROG_ATTACH(0xb, 0x0, 0x0) 17:49:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:22 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x300}]}}, &(0x7f0000000380)=""/232, 0x26, 0xe8, 0x1}, 0x20) 17:49:22 executing program 1: socketpair(0x38, 0x0, 0x0, &(0x7f00000000c0)) 17:49:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000108000000090400000903000000092100000001220900090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:22 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400"], 0x0) 17:49:22 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) [ 658.460632][ T3676] usb 6-1: USB disconnect, device number 68 17:49:22 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000a00)) 17:49:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x1}) 17:49:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 658.512698][T20516] loop3: detected capacity change from 0 to 15 [ 658.529192][T20516] FAT-fs (loop3): bogus number of reserved sectors [ 658.536101][T20516] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16}, 0x48) 17:49:22 executing program 0: munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) 17:49:22 executing program 1: mlockall(0x3) io_setup(0x0, &(0x7f0000000080)) 17:49:22 executing program 2: mlockall(0x3) io_setup(0x0, &(0x7f0000000000)=0x0) io_destroy(r0) 17:49:22 executing program 0: munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) [ 658.686927][T20532] loop3: detected capacity change from 0 to 15 17:49:22 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) [ 658.757915][T20532] FAT-fs (loop3): invalid media value (0x00) [ 658.797430][T20532] FAT-fs (loop3): Can't find a valid FAT filesystem [ 658.811916][ T3746] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 658.942060][ T3676] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 659.272060][ T3746] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 659.287958][ T3746] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 659.307320][ T3746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.308181][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.351429][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.393774][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 659.419468][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.492326][ T3676] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 659.598482][ T3746] usb 5-1: USB disconnect, device number 54 17:49:25 executing program 0: munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) 17:49:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:25 executing program 2: epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000280), 0x4197218b8b476291) 17:49:25 executing program 1: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 17:49:25 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400"], 0x0) 17:49:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000108000000090400000903000000092100000001220900090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:25 executing program 1: madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xb) 17:49:25 executing program 0: statx(0xffffffffffffff9c, &(0x7f0000002b00)='.\x00', 0x2000, 0x0, &(0x7f0000002b40)) [ 661.564195][T18660] usb 6-1: USB disconnect, device number 69 [ 661.600427][T20555] loop3: detected capacity change from 0 to 15 17:49:25 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xd0000011}) 17:49:25 executing program 1: r0 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc}) 17:49:25 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0x14f141, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x800000a6) 17:49:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) [ 661.697096][T20555] FAT-fs (loop3): invalid media value (0x00) [ 661.726429][T20555] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:25 executing program 2: mq_open(&(0x7f0000000040)='fr\xb6\xe7\x16\xcaeeze\t.sate:\x87\x19x\x86\xaa,\xe6#v:\xfe\xc7\x0flR\x1c\xcfb\x96', 0x0, 0x181, 0x0) 17:49:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:26 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x14f141, 0x0) listxattr(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 17:49:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) [ 661.917832][T20580] loop3: detected capacity change from 0 to 15 [ 661.924324][ T3746] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 661.954512][T20580] FAT-fs (loop3): invalid media value (0x00) [ 661.978948][T20580] FAT-fs (loop3): Can't find a valid FAT filesystem [ 662.082048][T18660] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 662.352072][ T3746] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 662.362285][ T3746] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 662.371328][ T3746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.482120][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.491963][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 662.504876][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 662.514027][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.564660][T18660] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 662.625150][T18660] usb 5-1: USB disconnect, device number 55 17:49:27 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400"], 0x0) [ 663.421917][T18660] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 663.842015][T18660] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 663.852379][T18660] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 663.861537][T18660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.125237][ T6] usb 5-1: USB disconnect, device number 56 17:49:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000108000000090400000903000000092100000001220900090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:28 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0xe141, 0x20) 17:49:28 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x14f141, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x880, 0x1df) 17:49:28 executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x0) 17:49:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:28 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b0001040000000904000001030000"], 0x0) [ 664.643041][T18660] usb 6-1: USB disconnect, device number 70 [ 664.666413][ T27] audit: type=1804 audit(1650304168.815:15): pid=20591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir973796358/syzkaller.bizCDE/1366/file0" dev="sda1" ino=1169 res=1 errno=0 17:49:28 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2400, 0xcb) [ 664.686011][T20590] loop3: detected capacity change from 0 to 15 17:49:28 executing program 0: open$dir(&(0x7f00000000c0)='./file0\x00', 0x14f141, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4082, 0x80) 17:49:28 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') [ 664.764210][T20590] FAT-fs (loop3): invalid media value (0x00) 17:49:29 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x14f141, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x101000, 0x1a8) 17:49:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0xc0045878, 0x0) 17:49:29 executing program 0: open$dir(&(0x7f00000000c0)='./file0\x00', 0x14f141, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) [ 664.797889][ T27] audit: type=1800 audit(1650304168.945:16): pid=20602 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1184 res=0 errno=0 [ 664.816589][T20590] FAT-fs (loop3): Can't find a valid FAT filesystem [ 664.908882][ T27] audit: type=1804 audit(1650304169.055:17): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir973796358/syzkaller.bizCDE/1368/file0" dev="sda1" ino=1182 res=1 errno=0 [ 665.022460][ T3673] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 665.161946][T18660] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 665.432092][ T3673] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 665.446538][ T3673] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.459736][ T3673] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 665.469384][ T3673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.526880][ T3673] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 665.572258][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.582170][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 665.595607][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 665.604966][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.654453][T18660] usbhid 6-1:8.0: couldn't find an input interrupt endpoint [ 665.727512][ T6] usb 5-1: USB disconnect, device number 57 17:49:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x60, 0x0, 0x0, 0x0) 17:49:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x80) 17:49:31 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x14f141, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x141000, 0x23) 17:49:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:31 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b0001040000000904000001030000"], 0x0) [ 667.725252][ T3673] usb 6-1: USB disconnect, device number 71 [ 667.760295][T20621] loop3: detected capacity change from 0 to 15 17:49:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 17:49:31 executing program 0: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3b9aca00}}, 0x0) [ 667.768796][ T27] audit: type=1804 audit(1650304171.925:18): pid=20618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4245904450/syzkaller.Z0HGpA/1268/file0" dev="sda1" ino=1176 res=1 errno=0 17:49:32 executing program 1: r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x18, 0x1}, 0xc) 17:49:32 executing program 2: setuid(0xffffffffffffffff) socket$inet(0x1e, 0x3, 0x0) 17:49:32 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002b40)=[{0x0}], 0x1}, 0x0) [ 667.826512][T20621] FAT-fs (loop3): invalid media value (0x00) [ 667.841731][T20621] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 667.977468][T20636] loop3: detected capacity change from 0 to 15 [ 667.990309][T20636] FAT-fs (loop3): invalid media value (0x00) [ 668.007727][T20636] FAT-fs (loop3): Can't find a valid FAT filesystem [ 668.047142][T18660] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 668.271996][ T3673] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 668.421993][T18660] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 668.432453][T18660] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 668.445535][T18660] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 668.454772][T18660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.504812][T18660] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 668.632076][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.643049][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.653120][ T3673] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 668.666222][ T3673] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 668.675467][ T3673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.705045][T18660] usb 5-1: USB disconnect, device number 58 [ 669.222015][ T3673] usbhid 6-1:8.0: can't add hid device: -71 [ 669.228039][ T3673] usbhid: probe of 6-1:8.0 failed with error -71 [ 669.239950][ T3673] usb 6-1: USB disconnect, device number 72 17:49:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:33 executing program 1: recvmsg(0xffffffffffffff9c, 0x0, 0x0) 17:49:33 executing program 0: socketpair(0x18, 0x1, 0x0, &(0x7f0000000040)) 17:49:33 executing program 2: r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000), 0x10) 17:49:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:33 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b0001040000000904000001030000"], 0x0) 17:49:33 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0xffffffffffffffff}}) semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000000)=""/130) 17:49:33 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18, 0x2}, 0xc) poll(&(0x7f0000000180), 0x5d, 0x0) 17:49:33 executing program 2: msgsnd(0x0, &(0x7f00000000c0), 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 669.671873][T20643] loop3: detected capacity change from 0 to 15 17:49:33 executing program 1: r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0x0, 0x100000}, 0x10) 17:49:33 executing program 0: r0 = socket(0x18, 0x3, 0x0) connect(r0, &(0x7f0000000100)=@in={0x2, 0x3}, 0xc) [ 669.728024][T20643] FAT-fs (loop3): bogus number of FAT sectors [ 669.759181][T20643] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:33 executing program 2: socketpair(0x1, 0x0, 0x1, 0x0) [ 669.951969][ T6] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 670.001948][T18660] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 670.312006][ T6] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 670.322584][ T6] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 670.336638][ T6] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 670.346026][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.396307][ T6] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 670.412151][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.423200][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.434844][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.447889][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 670.457316][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.596672][ T6] usb 5-1: USB disconnect, device number 59 [ 670.992011][T18660] usbhid 6-1:8.0: can't add hid device: -71 [ 670.998000][T18660] usbhid: probe of 6-1:8.0 failed with error -71 [ 671.007457][T18660] usb 6-1: USB disconnect, device number 73 17:49:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:35 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 17:49:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:35 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)) 17:49:35 executing program 2: r0 = msgget(0x0, 0x301) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/147) 17:49:35 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b0001040000000904000001030000000905"], 0x0) 17:49:35 executing program 0: r0 = socket(0x2, 0x2, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 17:49:35 executing program 1: pipe2(&(0x7f00000022c0)={0xffffffffffffffff}, 0x0) listen(r0, 0x0) [ 671.443252][T20668] loop3: detected capacity change from 0 to 15 [ 671.470783][T20668] FAT-fs (loop3): bogus number of FAT sectors [ 671.479620][T20668] FAT-fs (loop3): Can't find a valid FAT filesystem 17:49:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:35 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x2400, 0x18a) 17:49:35 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x6857b21ff1155d10) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000001c0)=ANY=[], 0x1c) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:49:35 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) [ 671.576620][T20679] loop3: detected capacity change from 0 to 15 [ 671.589187][T20679] FAT-fs (loop3): bogus number of FAT sectors [ 671.605401][T20679] FAT-fs (loop3): Can't find a valid FAT filesystem [ 671.722442][T18660] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 671.741990][ T142] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 672.102014][ T142] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.113652][T18660] usb 5-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 672.124254][ T142] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.134097][T18660] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 672.143331][ T142] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 672.156204][T18660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.164693][ T142] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 672.175665][ T142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.214373][T18660] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 672.418267][T18660] usb 5-1: USB disconnect, device number 60 [ 672.732167][ T142] usbhid 6-1:8.0: can't add hid device: -71 [ 672.738272][ T142] usbhid: probe of 6-1:8.0 failed with error -71 [ 672.746829][ T142] usb 6-1: USB disconnect, device number 74 17:49:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) 17:49:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:37 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) 17:49:37 executing program 0: io_setup(0x800, &(0x7f0000000000)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) 17:49:37 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b0001040000000904000001030000000905"], 0x0) 17:49:37 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b0001040000000904000001030000"], 0x0) 17:49:37 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) [ 673.186342][T20695] loop3: detected capacity change from 0 to 15 17:49:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:49:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:37 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) 17:49:37 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) [ 673.369596][T20706] loop3: detected capacity change from 0 to 15 [ 673.452160][T18660] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 673.491991][ T6] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 673.522012][ T142] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 673.852020][T18660] usb 5-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 673.852127][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.862946][T18660] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 673.880620][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.884011][T18660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.901994][ T6] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.919676][ T6] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 673.928957][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.932107][ T142] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 673.951312][T18660] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 673.960084][ T142] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.973118][ T142] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 673.982337][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.037840][ T142] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 674.150437][T18667] usb 5-1: USB disconnect, device number 61 [ 674.244443][ T142] usb 2-1: USB disconnect, device number 11 [ 674.481971][ T6] usbhid 6-1:8.0: can't add hid device: -71 [ 674.488065][ T6] usbhid: probe of 6-1:8.0 failed with error -71 [ 674.508343][ T6] usb 6-1: USB disconnect, device number 75 17:49:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:39 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c03"}}}}}, 0x0) 17:49:39 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e08a3f0fcf020000000c00", 0xe, 0x400}, {&(0x7f0000010100)="08000000c041", 0x6, 0x480}], 0x0, &(0x7f0000000040)={[{@noacl}, {}, {@acl}]}) 17:49:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:39 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b0001040000000904000001030000000905"], 0x0) 17:49:39 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:39 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:39 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000017c0)=""/102397, 0x18ffd}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001}, 0x8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:49:39 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 674.939707][T20716] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 674.970525][T20719] loop3: detected capacity change from 0 to 15 17:49:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 675.019342][T20725] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:39 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:39 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 675.088027][T20729] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 675.105074][T20731] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 675.184777][T20733] loop3: detected capacity change from 0 to 15 [ 675.202156][ T6] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 675.243111][T20735] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 675.302115][ T142] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 675.409540][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 675.572315][ T6] usb 5-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 675.588084][ T6] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 675.597279][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.645418][ T6] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 675.732142][ T142] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.743173][ T142] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.753098][ T142] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 675.767853][ T142] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 675.777081][ T142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.844378][ T6] usb 5-1: USB disconnect, device number 62 [ 676.341992][ T142] usbhid 6-1:8.0: can't add hid device: -71 [ 676.348100][ T142] usbhid: probe of 6-1:8.0 failed with error -71 [ 676.366355][ T142] usb 6-1: USB disconnect, device number 76 17:49:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:40 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:40 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:40 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000017c0)=""/102397, 0x18ffd}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001}, 0x8) syz_open_dev$evdev(0x0, 0x0, 0x412000) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) 17:49:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:40 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587"], 0x0) 17:49:40 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 676.800311][T20741] loop3: detected capacity change from 0 to 15 [ 676.804654][T20745] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:49:41 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:41 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:41 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:41 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 676.977107][T20756] loop3: detected capacity change from 0 to 15 [ 677.082199][ T6] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 677.112358][ T3674] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 677.128836][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 677.462217][ T6] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 677.472116][ T6] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 677.481164][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.490040][ T3674] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.502739][ T3674] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.513775][ T3674] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 677.527149][ T3674] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 677.536991][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.554282][ T6] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 677.755417][T18667] usb 5-1: USB disconnect, device number 63 [ 678.082016][ T3674] usbhid 6-1:8.0: can't add hid device: -71 [ 678.088054][ T3674] usbhid: probe of 6-1:8.0 failed with error -71 [ 678.109893][ T3674] usb 6-1: USB disconnect, device number 77 17:49:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000001240)={0x8, {"9140b7e8789a7f91287befc93797e6cc2851777eb4cdad37351118536314b7068d6ff8b0ee9f4331a140ac003a9682a54244eab276051f2d18f027af1d507f19155a071ab8a67172663ce203457ed25c70df825898efd1aa08db9f5e9f8ed3d9a1c307a25c0a693e7d6b6a7c0e1ddb4d88e2e2e9df201d411f8f37ece014f76097b9255b2f21c85744b2bfd6e3b75c277c44e3efc0e66a995678ed0db6b427640f4067278d835f5fd28ff4e691bac1a95dfbadc5729b64ba1e60493f1c5fbe7ce812ab76a0a210d965f7ddc6a74282f44503d2308d550ca58249d6236a58bc3903143370d8a09f66f3ff7142af4eaf70fb13b9e64a76139235ceaf7f8288e42a1cad1322e353830c18940cf420a010b73ee75c56c0863cc9cb92d2f1b3d929f107e2f555eef02cba05e5921579902f5af30edc405cd05022cecb897c7cd83e9ccc89d36fb9d311114f5ec187c0ff8bd838f2a6e764115a2e8746ddeb697f4a25e4fc52dcafd572d77aa131bb60988339a03107a072dd1fa3149a415510422b1dfa5f451942ff63ad17aa263d04a30b985e9dab48d8db48f9c41e28c68834bdd7527260a386ce3b8995d3ab2022ddf82c9c1f040ebb4a2cbbcb1fcee39a24ffdef8f2e78f59a3d03d746388a5085b33e10701c96c3584acf2de748fbb0931fa3127c32124887c6e290d400b325955b57d053b256b0a65f5f58de208a2b9c98e3e6b1199552cb432ad0d3db9dcc67b500bf4a66b2b1a40c3aec99f8de7aa4a6eff91b7d4f7de91522dd5a90d7c1fca56172a88b07219187023c2e91add085e3dfe4ce95e9703e6d50352f2727cbb7b131b0139f1b785d82fb0d771937c4598121c19efdb1e82e4a383a9770f1483504c72775c7a07aa5d0ca8e892f595cf179e11a899e1f53fb50ec0e3c19b7ceb93e86e61e512bc1f612c7c9e3f5a448e84bd20f366b763ee494dae35a7216d445a902db6d5cbf9935878436435324aaff6b699f0a3c261182489aa26369cdc01757187c1dbdcc7af77e5efccac5069baffbcca9b2c5df98efedcf0a59e4a7273655977750ab3e20bf316c5a2fa4ec2e781bac4be6d62b3ee69c5c88582c89a5d7b72ec3919d60bf1906f500d577cd53b85f7381e9f1c0cce2b1a29a6a766342a2c3fb30263e8614deb36d577accc77d5dc03592b5ef98913b97f6423332bc92cb8ce381206d0a90e17790bd20271f5049fa52fc8155cd50b08e54844e465b31c5650500475469ba5bfad6f157b68c3eead4153556db268f7d618128d7ba76e26ff72922085da3ec590d8dd8b6d3d17552a2fb4f73554cc9030727cda5fc61b431a5cf5139a4e1c754977d5f512928bed8f80752909b17ace052ff3e496f093e2332f57caf744343f38c89d44688cad1f2c936ce706f41ec61324fc9af3e9540dc5981b68467535d5d7f7a00ecd64d2a7303cabead5ae3ab0467cac984d1b709fdfae57e4c37b1efe1b2490e7536562be5d596bdf21a830afc1cee3b396fd84316f67fe3ae70c51917a1ef99d35636f66255d6677238871debb15441682df25cd8a5a099451c904ee09ae0c462bd6e593bbf73a4aab5bfd5d40c486488bde387054ab99d634407615ceb7afe7d2cc10fe8a55e108d86d252df8ec831823f8878e44c56bdc05dfcb8168fadafba858b0cd63fdbe7b7e1ddd259b942acffeeaf892684531eee9eddaa4bfe04aed6edb0cb3553776e5eeb8d10019cc214c052716db3a02f8d1a4115bd8dbad1885d92cc0ab8144d8f1aced84ea4ef9ab5fdfe47840079af552fac3147ff38fc23bf43778d8cae68c8220aa647e23852c47303ba92d375ef380b5cf4192298ae1e1cb97ca6756789efaa625944287c54bc7843066d830e41a46bbe858a794b19b8f03ffb784ed3a022b97e19a506d6ac397e7a8d6d5bf9cd2712a059364f581b73e6445c6a7884f1877f705b76db3d1348e0fc5346005a7315320b64c8dcc90d2dec46019bd678dc939f2410ea230f75d564e07f63c3d3e5844f03abb1063ce6330e49ace64919ef0c9d68ff38400cc1d0e277284689b9c10c44c282bf59ea6662c41f4ee9838980e464abef8e38a07252e5321f76204a63beb2b8a5e90ae88e29cb4c816c31c8e5765830d0832f0ee3b932d4852bf1d13645ecbeab315c22b85199cf739a270bb922ba7c65344f26f6a21020f7b9235c0f926d03d20adf6f87a3fdabb2938aead88fd31309d47c11c6e77d25e7afe97ad43963edb64cd0a250ab453314f936c9dcc213bd9af6bcc904b8e79580d7d1d09a248a0ccb671470d7991fbb95006116b86a82064b6d9e0a119055ad5e5a655df33dbf31503d29244b988f4728491ba708652fc50650d5cb04468db4992882466c7b04544d289c0299493b9bd6d1b99a4b57ccc61197726a7e4e60f0a6858be9b324293da7dfc330c1348e40d053f5fd6e6bb2049856cba25eef10a79644343d26f4287c1d4c79a39eff7fa632082b8e5ae135950b7567c32a105953c565b88886b5c454f8e702dcbeae3ecdd16b5bddb8fe37ba90f4ea9edfa8303948aa2e7a2a97b18816b12253c5cd8fd0fc3d0c9aba5e7dfa13d397a17447f67f097633aa67e2c0e8d0879f5daa248a49209fb426f9fef83c2c5b2c6b684ea99cb72572e62f0c7e44f59a2fb8fcc40c6f130d863a98bc3f3044bd9f77455a9cda5e7886405eb3c7761f6e063c283e49c253c3b1ff3d9da0087578b98de0b3db85a4bb576d4b6413b54f8f9bef740486892ce80c226915e92e0943ff484c07b3c8f922db76c15df8260c60ef8dee6482bd6b2f0a8d7122a484a4831cd689b220d186d0ae6912a06726cd752fc8c03b3522436ccd00c0b6184966304bef88f3dfef19f5dc0102a9f4e14611b24e06286a063a1e8f9795241ec38d48e3d4ad911567146b151cda0db0ba79eadf5101a3b77f22cc33bf5e8f4391164f51a4b6baffaf571c7770597d1723d32ecc25cb4f9487eb4b4f2910b023a17c0f967316ed091f651260fa7cd6ada37d787dd4bd020e1d36de312c08d978d38944b1166b1ce4f418466985cd05b0013b142d272b42f65f7dd9535ed031d6c14a9b8fdd23955431723d3e9638a18b5655462b1a2925f6f08eeb75242f5f21aebc0c58a0a86b9a07510eb89656f312b4851dc4d6d16bc358c96a4993e1435443839a7af11e3401d107d07cfdbb3053f4c1dda7686f08f9492a9287b6de32657d77a340341f5defde4ac5b3297bd51a5561f242e528b48fa6c0c3901768cf701678b87c208c6719108bc5f832cbce51c6934079b5092bd1f5bb0a6883888c025911359d2e40225b4dc356f95aa386fb50ed8ff2e094266121a7829ac2618f1212993af1e636149359fda3d3d5dee5152c888edc451145aaea7ac0e029e8a4913e9858175d8cfd4b56c755585bc3ba519f84bba876e3eaedd12124d113e44affd3e4c2c5916f21c20fc5b183bb41911ab758e9f92a01bdee84c13664388520ddb7a171b19358d2b2ae25f1c194309da41738dbb54574a4cabd14d73951428623577224950a316e4611c14fbaa847a8b973b199d6932f680655a4c9cfba9b6b48d97d7b6b881c4a8eadf4720fc32ae1f7b50d1392b43895d71cb646f81c3f64f313a9613a8eecec8d88d9ac4a516560e57c8758365a951f24843f8643795560530649b026f3672a0d68d659737b33efa2dfde310e6d6975449eba8067ca10cbc05191396f7bd464157b278383ad7c567058244b88f80e902acd687d3b78f9eda892657c5379d636acbf459fedca27996f0b2977a918f1346c6e12fb14b6eb075b77eed6505f31d39a44fda8952a80fb6ed302a0e880e0f3a9bd5b14daa47b653286b6ff5d00170add43a72220d10f32c44b202f566e9566efe98c572dca6da9712d6bf9f210526998e2f37e6d065702875e7b9f4bb05d37bdb3fb24ae8ada1e6a041f3166fa3883997892d35ff85c16b19e2fa88594ae133b1d8979a62f224c90a3b155c43b2fc29d381b6edd4f1f522988316e480beab04556e323302ba4c9a47916f249549ea6f03c54ac740ea9b95514e3e11885fc5073380b5e1051bd996d2a831e651dbb49539f546db9e39f2b113253d41e9830641ae64eb79afc6cec7ce910a07c156f27a0a68360aff7475ba44be2df215ca5b82c67c9be23664639f27040c6a5e94b4c823fc51c45c83dd66848f7d1c6e485930531c7986af6b9931e081df4971ea5745d97512eeaa9998081cb0593347e45c1e54804875c0985a0716ca3478cd35bd0cda74ed4b2e184cf48f5d90460d60b403aca07d482415146e66c213120bad22f3783658edfe02be4c5c2ee086b68b817086abef70be52939ce631fd13bee6750c1511f5b0dd6ccd653d97f769b38dffa7fb20f44b02fc532b99bacc678797a30d216a69dcb87d46e4d6602ed8578cc950c94f614670f69e282d2804f7934c08afe67aa0b113b33a55e6a4e15d2adb3825619e65c89f948823eca938e630b84cdece4929919006d4258f441470b112483abe02cc6da05679a51fe0c09d28886b320f2b14d395745f919c0b14f240f6e8feb3cc02cd666940e37f972675dab58ab0e2cc55b35e75d39fb425396eca5bec031b6148ca7e4874222e747691d1ab4f2813ae7e25183a2e4bbaad45c607e17c84ed0a2638b9df8e04727dc395392b9a5853872ad0f134cb029e91d09c201be8bdc929830235b556e7b8cb24b087273855aaf9cdfc81b17fd84fe82664fc155574a4db83d157b703df3bfc37196fd9278dd73207c5b17224c91252af886c5b127e4dd3b452895a63e625c9779e7bdfc561d9f68561cb3261b80b27b15d417480ba887d1403a4377d4491fb01250f26040ba6188c39b994b721a6028eb9a5dcbda14d017d2c4cdda11cb6fe69aab99b814bff09ca0c583ceccaf35ef248fdee8f9eb3c50d1aee6f0a3239cef266cdf48c22f4faa7a007581b5308bdd810f9e0f63815ce4504792c3ca130be2dfac4bdd6f76c526c483ef303b9e05c668c5b2d2e16a4af90b4897bda564fc618a45abca9a0813fce82bc96451294f09a32de935cee75cd0dd93c8b65ac837ddb42867860c232db182d9ccebd729811ff6c95e3468dd6f36e8e94dbb895a28361f399ba212fe89226b2eaa4ac933dcc43457a24ddd42e547b2cdac6e08b8b2665bb368f4e8ab4a5c1b25448a7c015054f2d29fd4f4c0cc86743b45fce47e9083a7043b78096cb7d2ef170719cbadc8865b5b30eceff2c9b648e350dbf50db7369155048e9df0bb6dd35a992c1777ce5d7c03683eb4b9b614f3b03f76519f3f8558595069e7619537620cd29c4f0d71a2b1c41061aedc059c24635907c07fd40a308c945bec5823e60d60a4e51cce6452fdf0d0df795f939c00d9fb7992299a0fa8f15c7603e41b9822529e90d766264b9589b43ba5d6c830c34ecfc7ac5a9bb6674e768443fbaca806c4e0f2b1ad2bceca59e737c7c237ba5967610f0ece60ea2d117e40b5a3b551886c8c3277343e84968d4163f0f390ecae09178a81f1100627d70147d315b58256c60a6c87f1c5cc286d61e4c17b438a8f767aa2f5f8b3ab5d7556153fa45dac4e9f533371d300f6d3785982c25724f4f85a97451d8b713a2d58fda9ba532336015015ad6d2a38bfbd67062c637b2bf0967900d79e640f38353a0fce4c44221c31b6d64af7040a55597fa15c127f42d571b574a6d55ecd83f3a434612c0054d927bdbecb123098bfa48e587e70bc6ff6bacb3ab6a08cb4ff0e97a8e59f79ec44518498b828d808be8f77ea56613034fd37194341c", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 17:49:42 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:42 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:42 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587"], 0x0) 17:49:42 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:42 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:42 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 678.563858][T20768] loop3: detected capacity change from 0 to 15 17:49:42 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 17:49:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:42 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 678.805098][T20785] loop3: detected capacity change from 0 to 15 [ 678.822221][ T142] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 678.872137][T18667] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 679.232262][ T142] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 679.242599][ T142] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 679.251647][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.259970][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.280581][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.290639][T18667] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 679.304212][T18667] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 679.313471][T18667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.344044][ T142] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 679.534572][ T142] usb 5-1: USB disconnect, device number 64 [ 679.882014][T18667] usbhid 6-1:8.0: can't add hid device: -71 [ 679.888041][T18667] usbhid: probe of 6-1:8.0 failed with error -71 [ 679.897427][T18667] usb 6-1: USB disconnect, device number 78 17:49:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:44 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 17:49:44 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 17:49:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:44 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ea107340936901b0293d0000000109021b000104000000090400000103000000090587"], 0x0) 17:49:44 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 17:49:44 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) [ 680.340462][T20792] loop3: detected capacity change from 0 to 15 17:49:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:44 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 17:49:44 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) [ 680.546181][T20804] loop3: detected capacity change from 0 to 15 17:49:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 680.592103][ T6] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 680.652200][ T918] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 680.710077][T20810] loop3: detected capacity change from 0 to 15 [ 680.952070][ T6] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 680.962385][ T6] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 680.971641][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.022060][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.036286][ T6] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 681.049655][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.061322][ T918] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 681.074620][ T918] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 681.085136][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.236145][ T6] usb 5-1: USB disconnect, device number 65 [ 681.632251][ T918] usbhid 6-1:8.0: can't add hid device: -71 [ 681.638289][ T918] usbhid: probe of 6-1:8.0 failed with error -71 [ 681.646419][ T918] usb 6-1: USB disconnect, device number 79 17:49:46 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 17:49:46 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 17:49:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:46 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) [ 682.085670][T20816] loop3: detected capacity change from 0 to 15 17:49:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) syz_open_pts(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001240)={0x8, {"9140b7e8789a7f91287befc93797e6cc2851777eb4cdad37351118536314b7068d6ff8b0ee9f4331a140ac003a9682a54244eab276051f2d18f027af1d507f19155a071ab8a67172663ce203457ed25c70df825898efd1aa08db9f5e9f8ed3d9a1c307a25c0a693e7d6b6a7c0e1ddb4d88e2e2e9df201d411f8f37ece014f76097b9255b2f21c85744b2bfd6e3b75c277c44e3efc0e66a995678ed0db6b427640f4067278d835f5fd28ff4e691bac1a95dfbadc5729b64ba1e60493f1c5fbe7ce812ab76a0a210d965f7ddc6a74282f44503d2308d550ca58249d6236a58bc3903143370d8a09f66f3ff7142af4eaf70fb13b9e64a76139235ceaf7f8288e42a1cad1322e353830c18940cf420a010b73ee75c56c0863cc9cb92d2f1b3d929f107e2f555eef02cba05e5921579902f5af30edc405cd05022cecb897c7cd83e9ccc89d36fb9d311114f5ec187c0ff8bd838f2a6e764115a2e8746ddeb697f4a25e4fc52dcafd572d77aa131bb60988339a03107a072dd1fa3149a415510422b1dfa5f451942ff63ad17aa263d04a30b985e9dab48d8db48f9c41e28c68834bdd7527260a386ce3b8995d3ab2022ddf82c9c1f040ebb4a2cbbcb1fcee39a24ffdef8f2e78f59a3d03d746388a5085b33e10701c96c3584acf2de748fbb0931fa3127c32124887c6e290d400b325955b57d053b256b0a65f5f58de208a2b9c98e3e6b1199552cb432ad0d3db9dcc67b500bf4a66b2b1a40c3aec99f8de7aa4a6eff91b7d4f7de91522dd5a90d7c1fca56172a88b07219187023c2e91add085e3dfe4ce95e9703e6d50352f2727cbb7b131b0139f1b785d82fb0d771937c4598121c19efdb1e82e4a383a9770f1483504c72775c7a07aa5d0ca8e892f595cf179e11a899e1f53fb50ec0e3c19b7ceb93e86e61e512bc1f612c7c9e3f5a448e84bd20f366b763ee494dae35a7216d445a902db6d5cbf9935878436435324aaff6b699f0a3c261182489aa26369cdc01757187c1dbdcc7af77e5efccac5069baffbcca9b2c5df98efedcf0a59e4a7273655977750ab3e20bf316c5a2fa4ec2e781bac4be6d62b3ee69c5c88582c89a5d7b72ec3919d60bf1906f500d577cd53b85f7381e9f1c0cce2b1a29a6a766342a2c3fb30263e8614deb36d577accc77d5dc03592b5ef98913b97f6423332bc92cb8ce381206d0a90e17790bd20271f5049fa52fc8155cd50b08e54844e465b31c5650500475469ba5bfad6f157b68c3eead4153556db268f7d618128d7ba76e26ff72922085da3ec590d8dd8b6d3d17552a2fb4f73554cc9030727cda5fc61b431a5cf5139a4e1c754977d5f512928bed8f80752909b17ace052ff3e496f093e2332f57caf744343f38c89d44688cad1f2c936ce706f41ec61324fc9af3e9540dc5981b68467535d5d7f7a00ecd64d2a7303cabead5ae3ab0467cac984d1b709fdfae57e4c37b1efe1b2490e7536562be5d596bdf21a830afc1cee3b396fd84316f67fe3ae70c51917a1ef99d35636f66255d6677238871debb15441682df25cd8a5a099451c904ee09ae0c462bd6e593bbf73a4aab5bfd5d40c486488bde387054ab99d634407615ceb7afe7d2cc10fe8a55e108d86d252df8ec831823f8878e44c56bdc05dfcb8168fadafba858b0cd63fdbe7b7e1ddd259b942acffeeaf892684531eee9eddaa4bfe04aed6edb0cb3553776e5eeb8d10019cc214c052716db3a02f8d1a4115bd8dbad1885d92cc0ab8144d8f1aced84ea4ef9ab5fdfe47840079af552fac3147ff38fc23bf43778d8cae68c8220aa647e23852c47303ba92d375ef380b5cf4192298ae1e1cb97ca6756789efaa625944287c54bc7843066d830e41a46bbe858a794b19b8f03ffb784ed3a022b97e19a506d6ac397e7a8d6d5bf9cd2712a059364f581b73e6445c6a7884f1877f705b76db3d1348e0fc5346005a7315320b64c8dcc90d2dec46019bd678dc939f2410ea230f75d564e07f63c3d3e5844f03abb1063ce6330e49ace64919ef0c9d68ff38400cc1d0e277284689b9c10c44c282bf59ea6662c41f4ee9838980e464abef8e38a07252e5321f76204a63beb2b8a5e90ae88e29cb4c816c31c8e5765830d0832f0ee3b932d4852bf1d13645ecbeab315c22b85199cf739a270bb922ba7c65344f26f6a21020f7b9235c0f926d03d20adf6f87a3fdabb2938aead88fd31309d47c11c6e77d25e7afe97ad43963edb64cd0a250ab453314f936c9dcc213bd9af6bcc904b8e79580d7d1d09a248a0ccb671470d7991fbb95006116b86a82064b6d9e0a119055ad5e5a655df33dbf31503d29244b988f4728491ba708652fc50650d5cb04468db4992882466c7b04544d289c0299493b9bd6d1b99a4b57ccc61197726a7e4e60f0a6858be9b324293da7dfc330c1348e40d053f5fd6e6bb2049856cba25eef10a79644343d26f4287c1d4c79a39eff7fa632082b8e5ae135950b7567c32a105953c565b88886b5c454f8e702dcbeae3ecdd16b5bddb8fe37ba90f4ea9edfa8303948aa2e7a2a97b18816b12253c5cd8fd0fc3d0c9aba5e7dfa13d397a17447f67f097633aa67e2c0e8d0879f5daa248a49209fb426f9fef83c2c5b2c6b684ea99cb72572e62f0c7e44f59a2fb8fcc40c6f130d863a98bc3f3044bd9f77455a9cda5e7886405eb3c7761f6e063c283e49c253c3b1ff3d9da0087578b98de0b3db85a4bb576d4b6413b54f8f9bef740486892ce80c226915e92e0943ff484c07b3c8f922db76c15df8260c60ef8dee6482bd6b2f0a8d7122a484a4831cd689b220d186d0ae6912a06726cd752fc8c03b3522436ccd00c0b6184966304bef88f3dfef19f5dc0102a9f4e14611b24e06286a063a1e8f9795241ec38d48e3d4ad911567146b151cda0db0ba79eadf5101a3b77f22cc33bf5e8f4391164f51a4b6baffaf571c7770597d1723d32ecc25cb4f9487eb4b4f2910b023a17c0f967316ed091f651260fa7cd6ada37d787dd4bd020e1d36de312c08d978d38944b1166b1ce4f418466985cd05b0013b142d272b42f65f7dd9535ed031d6c14a9b8fdd23955431723d3e9638a18b5655462b1a2925f6f08eeb75242f5f21aebc0c58a0a86b9a07510eb89656f312b4851dc4d6d16bc358c96a4993e1435443839a7af11e3401d107d07cfdbb3053f4c1dda7686f08f9492a9287b6de32657d77a340341f5defde4ac5b3297bd51a5561f242e528b48fa6c0c3901768cf701678b87c208c6719108bc5f832cbce51c6934079b5092bd1f5bb0a6883888c025911359d2e40225b4dc356f95aa386fb50ed8ff2e094266121a7829ac2618f1212993af1e636149359fda3d3d5dee5152c888edc451145aaea7ac0e029e8a4913e9858175d8cfd4b56c755585bc3ba519f84bba876e3eaedd12124d113e44affd3e4c2c5916f21c20fc5b183bb41911ab758e9f92a01bdee84c13664388520ddb7a171b19358d2b2ae25f1c194309da41738dbb54574a4cabd14d73951428623577224950a316e4611c14fbaa847a8b973b199d6932f680655a4c9cfba9b6b48d97d7b6b881c4a8eadf4720fc32ae1f7b50d1392b43895d71cb646f81c3f64f313a9613a8eecec8d88d9ac4a516560e57c8758365a951f24843f8643795560530649b026f3672a0d68d659737b33efa2dfde310e6d6975449eba8067ca10cbc05191396f7bd464157b278383ad7c567058244b88f80e902acd687d3b78f9eda892657c5379d636acbf459fedca27996f0b2977a918f1346c6e12fb14b6eb075b77eed6505f31d39a44fda8952a80fb6ed302a0e880e0f3a9bd5b14daa47b653286b6ff5d00170add43a72220d10f32c44b202f566e9566efe98c572dca6da9712d6bf9f210526998e2f37e6d065702875e7b9f4bb05d37bdb3fb24ae8ada1e6a041f3166fa3883997892d35ff85c16b19e2fa88594ae133b1d8979a62f224c90a3b155c43b2fc29d381b6edd4f1f522988316e480beab04556e323302ba4c9a47916f249549ea6f03c54ac740ea9b95514e3e11885fc5073380b5e1051bd996d2a831e651dbb49539f546db9e39f2b113253d41e9830641ae64eb79afc6cec7ce910a07c156f27a0a68360aff7475ba44be2df215ca5b82c67c9be23664639f27040c6a5e94b4c823fc51c45c83dd66848f7d1c6e485930531c7986af6b9931e081df4971ea5745d97512eeaa9998081cb0593347e45c1e54804875c0985a0716ca3478cd35bd0cda74ed4b2e184cf48f5d90460d60b403aca07d482415146e66c213120bad22f3783658edfe02be4c5c2ee086b68b817086abef70be52939ce631fd13bee6750c1511f5b0dd6ccd653d97f769b38dffa7fb20f44b02fc532b99bacc678797a30d216a69dcb87d46e4d6602ed8578cc950c94f614670f69e282d2804f7934c08afe67aa0b113b33a55e6a4e15d2adb3825619e65c89f948823eca938e630b84cdece4929919006d4258f441470b112483abe02cc6da05679a51fe0c09d28886b320f2b14d395745f919c0b14f240f6e8feb3cc02cd666940e37f972675dab58ab0e2cc55b35e75d39fb425396eca5bec031b6148ca7e4874222e747691d1ab4f2813ae7e25183a2e4bbaad45c607e17c84ed0a2638b9df8e04727dc395392b9a5853872ad0f134cb029e91d09c201be8bdc929830235b556e7b8cb24b087273855aaf9cdfc81b17fd84fe82664fc155574a4db83d157b703df3bfc37196fd9278dd73207c5b17224c91252af886c5b127e4dd3b452895a63e625c9779e7bdfc561d9f68561cb3261b80b27b15d417480ba887d1403a4377d4491fb01250f26040ba6188c39b994b721a6028eb9a5dcbda14d017d2c4cdda11cb6fe69aab99b814bff09ca0c583ceccaf35ef248fdee8f9eb3c50d1aee6f0a3239cef266cdf48c22f4faa7a007581b5308bdd810f9e0f63815ce4504792c3ca130be2dfac4bdd6f76c526c483ef303b9e05c668c5b2d2e16a4af90b4897bda564fc618a45abca9a0813fce82bc96451294f09a32de935cee75cd0dd93c8b65ac837ddb42867860c232db182d9ccebd729811ff6c95e3468dd6f36e8e94dbb895a28361f399ba212fe89226b2eaa4ac933dcc43457a24ddd42e547b2cdac6e08b8b2665bb368f4e8ab4a5c1b25448a7c015054f2d29fd4f4c0cc86743b45fce47e9083a7043b78096cb7d2ef170719cbadc8865b5b30eceff2c9b648e350dbf50db7369155048e9df0bb6dd35a992c1777ce5d7c03683eb4b9b614f3b03f76519f3f8558595069e7619537620cd29c4f0d71a2b1c41061aedc059c24635907c07fd40a308c945bec5823e60d60a4e51cce6452fdf0d0df795f939c00d9fb7992299a0fa8f15c7603e41b9822529e90d766264b9589b43ba5d6c830c34ecfc7ac5a9bb6674e768443fbaca806c4e0f2b1ad2bceca59e737c7c237ba5967610f0ece60ea2d117e40b5a3b551886c8c3277343e84968d4163f0f390ecae09178a81f1100627d70147d315b58256c60a6c87f1c5cc286d61e4c17b438a8f767aa2f5f8b3ab5d7556153fa45dac4e9f533371d300f6d3785982c25724f4f85a97451d8b713a2d58fda9ba532336015015ad6d2a38bfbd67062c637b2bf0967900d79e640f38353a0fce4c44221c31b6d64af7040a55597fa15c127f42d571b574a6d55ecd83f3a434612c0054d927bdbecb123098bfa48e587e70bc6ff6bacb3ab6a08cb4ff0e97a8e59f79ec44518498b828d808be8f77ea56613034fd37194341c", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:46 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 17:49:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:46 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 17:49:46 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 17:49:46 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) [ 682.311117][T20831] loop3: detected capacity change from 0 to 15 17:49:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:46 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) [ 682.551992][ T918] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 682.594636][T20843] loop3: detected capacity change from 0 to 15 [ 682.922589][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.951223][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.983183][ T918] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 683.030585][ T918] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 17:49:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 683.078917][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.664007][ T918] usbhid 6-1:8.0: can't add hid device: -71 [ 683.669995][ T918] usbhid: probe of 6-1:8.0 failed with error -71 [ 683.683357][ T918] usb 6-1: USB disconnect, device number 80 17:49:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:48 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 17:49:48 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 17:49:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:49:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022090000000892"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) 17:49:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:48 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) [ 684.124402][T20855] loop3: detected capacity change from 0 to 15 17:49:48 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 17:49:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 17:49:48 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 17:49:48 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 17:49:48 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) [ 684.347743][T20867] loop3: detected capacity change from 0 to 15 [ 684.382018][ T6] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 684.472065][T18667] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 684.802136][ T6] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.813252][ T6] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.823093][ T6] usb 5-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 684.841761][ T6] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 684.842111][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.851036][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.864121][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.892731][T18667] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 684.905898][T18667] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 684.915958][T18667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.353926][ T6] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 685.361299][ T6] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 685.369084][ T6] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 685.376624][ T6] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 685.386148][ T6] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 685.396122][ T6] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/0003:0D8C:0022.0036/input/input51 [ 685.413864][ T6] cm6533_jd 0003:0D8C:0022.0036: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 685.462082][T18667] usbhid 6-1:8.0: can't add hid device: -71 [ 685.468072][T18667] usbhid: probe of 6-1:8.0 failed with error -71 [ 685.487177][T18667] usb 6-1: USB disconnect, device number 81 [ 685.503118][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.509437][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.561248][T18660] usb 5-1: USB disconnect, device number 66 17:49:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:50 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 17:49:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 17:49:50 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) [ 685.917092][T20877] loop3: detected capacity change from 0 to 15 17:49:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 17:49:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:50 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\t\x00\x00\x00\b'], 0x0}, 0x0) 17:49:50 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:50 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:50 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 686.118431][T20884] loop3: detected capacity change from 0 to 15 17:49:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, 0x0, 0x16) [ 686.203346][ T3676] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 686.352884][T20896] loop3: detected capacity change from 0 to 15 [ 686.421958][T18667] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 686.572025][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.591876][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.601644][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.642167][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 686.651240][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.832015][T18667] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.843150][T18667] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.853629][T18667] usb 5-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.867055][T18667] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 686.876670][T18667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.232057][ T3676] usbhid 6-1:8.0: can't add hid device: -71 [ 687.238900][ T3676] usbhid: probe of 6-1:8.0 failed with error -71 [ 687.249956][ T3676] usb 6-1: USB disconnect, device number 82 [ 687.373531][T18667] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 687.380799][T18667] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 687.388391][T18667] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 687.395929][T18667] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 687.403355][T18667] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 687.410555][T18667] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 687.418218][T18667] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 687.425683][T18667] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 687.434594][T18667] cm6533_jd 0003:0D8C:0022.0037: No inputs registered, leaving [ 687.446821][T18667] cm6533_jd 0003:0D8C:0022.0037: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 687.593906][T18667] usb 5-1: USB disconnect, device number 67 17:49:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:51 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:51 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, 0x0, 0x16) 17:49:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"9140b7e8789a7f91287befc93797e6cc2851777eb4cdad37351118536314b7068d6ff8b0ee9f4331a140ac003a9682a54244eab276051f2d18f027af1d507f19155a071ab8a67172663ce203457ed25c70df825898efd1aa08db9f5e9f8ed3d9a1c307a25c0a693e7d6b6a7c0e1ddb4d88e2e2e9df201d411f8f37ece014f76097b9255b2f21c85744b2bfd6e3b75c277c44e3efc0e66a995678ed0db6b427640f4067278d835f5fd28ff4e691bac1a95dfbadc5729b64ba1e60493f1c5fbe7ce812ab76a0a210d965f7ddc6a74282f44503d2308d550ca58249d6236a58bc3903143370d8a09f66f3ff7142af4eaf70fb13b9e64a76139235ceaf7f8288e42a1cad1322e353830c18940cf420a010b73ee75c56c0863cc9cb92d2f1b3d929f107e2f555eef02cba05e5921579902f5af30edc405cd05022cecb897c7cd83e9ccc89d36fb9d311114f5ec187c0ff8bd838f2a6e764115a2e8746ddeb697f4a25e4fc52dcafd572d77aa131bb60988339a03107a072dd1fa3149a415510422b1dfa5f451942ff63ad17aa263d04a30b985e9dab48d8db48f9c41e28c68834bdd7527260a386ce3b8995d3ab2022ddf82c9c1f040ebb4a2cbbcb1fcee39a24ffdef8f2e78f59a3d03d746388a5085b33e10701c96c3584acf2de748fbb0931fa3127c32124887c6e290d400b325955b57d053b256b0a65f5f58de208a2b9c98e3e6b1199552cb432ad0d3db9dcc67b500bf4a66b2b1a40c3aec99f8de7aa4a6eff91b7d4f7de91522dd5a90d7c1fca56172a88b07219187023c2e91add085e3dfe4ce95e9703e6d50352f2727cbb7b131b0139f1b785d82fb0d771937c4598121c19efdb1e82e4a383a9770f1483504c72775c7a07aa5d0ca8e892f595cf179e11a899e1f53fb50ec0e3c19b7ceb93e86e61e512bc1f612c7c9e3f5a448e84bd20f366b763ee494dae35a7216d445a902db6d5cbf9935878436435324aaff6b699f0a3c261182489aa26369cdc01757187c1dbdcc7af77e5efccac5069baffbcca9b2c5df98efedcf0a59e4a7273655977750ab3e20bf316c5a2fa4ec2e781bac4be6d62b3ee69c5c88582c89a5d7b72ec3919d60bf1906f500d577cd53b85f7381e9f1c0cce2b1a29a6a766342a2c3fb30263e8614deb36d577accc77d5dc03592b5ef98913b97f6423332bc92cb8ce381206d0a90e17790bd20271f5049fa52fc8155cd50b08e54844e465b31c5650500475469ba5bfad6f157b68c3eead4153556db268f7d618128d7ba76e26ff72922085da3ec590d8dd8b6d3d17552a2fb4f73554cc9030727cda5fc61b431a5cf5139a4e1c754977d5f512928bed8f80752909b17ace052ff3e496f093e2332f57caf744343f38c89d44688cad1f2c936ce706f41ec61324fc9af3e9540dc5981b68467535d5d7f7a00ecd64d2a7303cabead5ae3ab0467cac984d1b709fdfae57e4c37b1efe1b2490e7536562be5d596bdf21a830afc1cee3b396fd84316f67fe3ae70c51917a1ef99d35636f66255d6677238871debb15441682df25cd8a5a099451c904ee09ae0c462bd6e593bbf73a4aab5bfd5d40c486488bde387054ab99d634407615ceb7afe7d2cc10fe8a55e108d86d252df8ec831823f8878e44c56bdc05dfcb8168fadafba858b0cd63fdbe7b7e1ddd259b942acffeeaf892684531eee9eddaa4bfe04aed6edb0cb3553776e5eeb8d10019cc214c052716db3a02f8d1a4115bd8dbad1885d92cc0ab8144d8f1aced84ea4ef9ab5fdfe47840079af552fac3147ff38fc23bf43778d8cae68c8220aa647e23852c47303ba92d375ef380b5cf4192298ae1e1cb97ca6756789efaa625944287c54bc7843066d830e41a46bbe858a794b19b8f03ffb784ed3a022b97e19a506d6ac397e7a8d6d5bf9cd2712a059364f581b73e6445c6a7884f1877f705b76db3d1348e0fc5346005a7315320b64c8dcc90d2dec46019bd678dc939f2410ea230f75d564e07f63c3d3e5844f03abb1063ce6330e49ace64919ef0c9d68ff38400cc1d0e277284689b9c10c44c282bf59ea6662c41f4ee9838980e464abef8e38a07252e5321f76204a63beb2b8a5e90ae88e29cb4c816c31c8e5765830d0832f0ee3b932d4852bf1d13645ecbeab315c22b85199cf739a270bb922ba7c65344f26f6a21020f7b9235c0f926d03d20adf6f87a3fdabb2938aead88fd31309d47c11c6e77d25e7afe97ad43963edb64cd0a250ab453314f936c9dcc213bd9af6bcc904b8e79580d7d1d09a248a0ccb671470d7991fbb95006116b86a82064b6d9e0a119055ad5e5a655df33dbf31503d29244b988f4728491ba708652fc50650d5cb04468db4992882466c7b04544d289c0299493b9bd6d1b99a4b57ccc61197726a7e4e60f0a6858be9b324293da7dfc330c1348e40d053f5fd6e6bb2049856cba25eef10a79644343d26f4287c1d4c79a39eff7fa632082b8e5ae135950b7567c32a105953c565b88886b5c454f8e702dcbeae3ecdd16b5bddb8fe37ba90f4ea9edfa8303948aa2e7a2a97b18816b12253c5cd8fd0fc3d0c9aba5e7dfa13d397a17447f67f097633aa67e2c0e8d0879f5daa248a49209fb426f9fef83c2c5b2c6b684ea99cb72572e62f0c7e44f59a2fb8fcc40c6f130d863a98bc3f3044bd9f77455a9cda5e7886405eb3c7761f6e063c283e49c253c3b1ff3d9da0087578b98de0b3db85a4bb576d4b6413b54f8f9bef740486892ce80c226915e92e0943ff484c07b3c8f922db76c15df8260c60ef8dee6482bd6b2f0a8d7122a484a4831cd689b220d186d0ae6912a06726cd752fc8c03b3522436ccd00c0b6184966304bef88f3dfef19f5dc0102a9f4e14611b24e06286a063a1e8f9795241ec38d48e3d4ad911567146b151cda0db0ba79eadf5101a3b77f22cc33bf5e8f4391164f51a4b6baffaf571c7770597d1723d32ecc25cb4f9487eb4b4f2910b023a17c0f967316ed091f651260fa7cd6ada37d787dd4bd020e1d36de312c08d978d38944b1166b1ce4f418466985cd05b0013b142d272b42f65f7dd9535ed031d6c14a9b8fdd23955431723d3e9638a18b5655462b1a2925f6f08eeb75242f5f21aebc0c58a0a86b9a07510eb89656f312b4851dc4d6d16bc358c96a4993e1435443839a7af11e3401d107d07cfdbb3053f4c1dda7686f08f9492a9287b6de32657d77a340341f5defde4ac5b3297bd51a5561f242e528b48fa6c0c3901768cf701678b87c208c6719108bc5f832cbce51c6934079b5092bd1f5bb0a6883888c025911359d2e40225b4dc356f95aa386fb50ed8ff2e094266121a7829ac2618f1212993af1e636149359fda3d3d5dee5152c888edc451145aaea7ac0e029e8a4913e9858175d8cfd4b56c755585bc3ba519f84bba876e3eaedd12124d113e44affd3e4c2c5916f21c20fc5b183bb41911ab758e9f92a01bdee84c13664388520ddb7a171b19358d2b2ae25f1c194309da41738dbb54574a4cabd14d73951428623577224950a316e4611c14fbaa847a8b973b199d6932f680655a4c9cfba9b6b48d97d7b6b881c4a8eadf4720fc32ae1f7b50d1392b43895d71cb646f81c3f64f313a9613a8eecec8d88d9ac4a516560e57c8758365a951f24843f8643795560530649b026f3672a0d68d659737b33efa2dfde310e6d6975449eba8067ca10cbc05191396f7bd464157b278383ad7c567058244b88f80e902acd687d3b78f9eda892657c5379d636acbf459fedca27996f0b2977a918f1346c6e12fb14b6eb075b77eed6505f31d39a44fda8952a80fb6ed302a0e880e0f3a9bd5b14daa47b653286b6ff5d00170add43a72220d10f32c44b202f566e9566efe98c572dca6da9712d6bf9f210526998e2f37e6d065702875e7b9f4bb05d37bdb3fb24ae8ada1e6a041f3166fa3883997892d35ff85c16b19e2fa88594ae133b1d8979a62f224c90a3b155c43b2fc29d381b6edd4f1f522988316e480beab04556e323302ba4c9a47916f249549ea6f03c54ac740ea9b95514e3e11885fc5073380b5e1051bd996d2a831e651dbb49539f546db9e39f2b113253d41e9830641ae64eb79afc6cec7ce910a07c156f27a0a68360aff7475ba44be2df215ca5b82c67c9be23664639f27040c6a5e94b4c823fc51c45c83dd66848f7d1c6e485930531c7986af6b9931e081df4971ea5745d97512eeaa9998081cb0593347e45c1e54804875c0985a0716ca3478cd35bd0cda74ed4b2e184cf48f5d90460d60b403aca07d482415146e66c213120bad22f3783658edfe02be4c5c2ee086b68b817086abef70be52939ce631fd13bee6750c1511f5b0dd6ccd653d97f769b38dffa7fb20f44b02fc532b99bacc678797a30d216a69dcb87d46e4d6602ed8578cc950c94f614670f69e282d2804f7934c08afe67aa0b113b33a55e6a4e15d2adb3825619e65c89f948823eca938e630b84cdece4929919006d4258f441470b112483abe02cc6da05679a51fe0c09d28886b320f2b14d395745f919c0b14f240f6e8feb3cc02cd666940e37f972675dab58ab0e2cc55b35e75d39fb425396eca5bec031b6148ca7e4874222e747691d1ab4f2813ae7e25183a2e4bbaad45c607e17c84ed0a2638b9df8e04727dc395392b9a5853872ad0f134cb029e91d09c201be8bdc929830235b556e7b8cb24b087273855aaf9cdfc81b17fd84fe82664fc155574a4db83d157b703df3bfc37196fd9278dd73207c5b17224c91252af886c5b127e4dd3b452895a63e625c9779e7bdfc561d9f68561cb3261b80b27b15d417480ba887d1403a4377d4491fb01250f26040ba6188c39b994b721a6028eb9a5dcbda14d017d2c4cdda11cb6fe69aab99b814bff09ca0c583ceccaf35ef248fdee8f9eb3c50d1aee6f0a3239cef266cdf48c22f4faa7a007581b5308bdd810f9e0f63815ce4504792c3ca130be2dfac4bdd6f76c526c483ef303b9e05c668c5b2d2e16a4af90b4897bda564fc618a45abca9a0813fce82bc96451294f09a32de935cee75cd0dd93c8b65ac837ddb42867860c232db182d9ccebd729811ff6c95e3468dd6f36e8e94dbb895a28361f399ba212fe89226b2eaa4ac933dcc43457a24ddd42e547b2cdac6e08b8b2665bb368f4e8ab4a5c1b25448a7c015054f2d29fd4f4c0cc86743b45fce47e9083a7043b78096cb7d2ef170719cbadc8865b5b30eceff2c9b648e350dbf50db7369155048e9df0bb6dd35a992c1777ce5d7c03683eb4b9b614f3b03f76519f3f8558595069e7619537620cd29c4f0d71a2b1c41061aedc059c24635907c07fd40a308c945bec5823e60d60a4e51cce6452fdf0d0df795f939c00d9fb7992299a0fa8f15c7603e41b9822529e90d766264b9589b43ba5d6c830c34ecfc7ac5a9bb6674e768443fbaca806c4e0f2b1ad2bceca59e737c7c237ba5967610f0ece60ea2d117e40b5a3b551886c8c3277343e84968d4163f0f390ecae09178a81f1100627d70147d315b58256c60a6c87f1c5cc286d61e4c17b438a8f767aa2f5f8b3ab5d7556153fa45dac4e9f533371d300f6d3785982c25724f4f85a97451d8b713a2d58fda9ba532336015015ad6d2a38bfbd67062c637b2bf0967900d79e640f38353a0fce4c44221c31b6d64af7040a55597fa15c127f42d571b574a6d55ecd83f3a434612c0054d927bdbecb123098bfa48e587e70bc6ff6bacb3ab6a08cb4ff0e97a8e59f79ec44518498b828d808be8f77ea56613034fd37194341c", 0x1000}}, 0x1006) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:51 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x0, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:51 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x0, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 687.700941][T20902] loop3: detected capacity change from 0 to 15 [ 687.991954][ T3746] usb 6-1: new high-speed USB device number 83 using dummy_hcd 17:49:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022090000000892"], 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, 0x0, 0x16) 17:49:52 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x0, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:52 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x0, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:49:52 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x0, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 688.129591][T20916] loop3: detected capacity change from 0 to 15 [ 688.421916][ T3676] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 688.422288][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.440504][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.450288][ T3746] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 688.464422][ T3746] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 688.473721][ T3746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.782027][ T3676] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.793237][ T3676] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.803199][ T3676] usb 5-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 688.816145][ T3676] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 688.825371][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.032000][ T3746] usbhid 6-1:8.0: can't add hid device: -71 [ 689.038087][ T3746] usbhid: probe of 6-1:8.0 failed with error -71 [ 689.047430][ T3746] usb 6-1: USB disconnect, device number 83 [ 689.313258][ T3676] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 689.320495][ T3676] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 689.331921][ T3676] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 689.339172][ T3676] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 689.346521][ T3676] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 689.364560][ T3676] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/0003:0D8C:0022.0038/input/input52 [ 689.383132][ T3676] cm6533_jd 0003:0D8C:0022.0038: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 17:49:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x4, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:53 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x0, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022090000000892"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) 17:49:53 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x1e, 0x1}, 0x10}], 0x1}, 0x0) 17:49:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:53 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x1e, 0x1}, 0x10}], 0x1}, 0x0) 17:49:53 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x1e, 0x1}, 0x10}], 0x1}, 0x0) [ 689.575639][ T6] usb 5-1: USB disconnect, device number 68 [ 689.752036][ T3676] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 689.864031][ T3746] usb 6-1: new high-speed USB device number 84 using dummy_hcd 17:49:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022090000000892"], 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:54 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x1e, 0x1}, 0x10}], 0x1}, 0x0) 17:49:54 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x1e, 0x1}, 0x10}], 0x1}, 0x0) 17:49:54 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x1e, 0x1}, 0x10}], 0x1}, 0x0) 17:49:54 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) [ 690.122352][ T3676] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.150619][ T3676] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.185541][ T3676] usb 4-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 690.221212][ T3676] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 690.240826][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.252123][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.263454][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.273822][ T3746] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 690.287012][ T3746] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 690.298301][ T3746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.521996][ T6] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 690.723106][ T3676] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 690.730349][ T3676] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 690.742994][ T3676] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 690.750313][ T3676] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 690.758166][ T3676] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 690.768459][ T3676] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/0003:0D8C:0022.0039/input/input53 [ 690.786332][ T3676] cm6533_jd 0003:0D8C:0022.0039: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 690.882596][ T6] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.893581][ T6] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.904353][ T6] usb 5-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 690.917788][ T6] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 690.927003][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.961375][ T3676] usb 4-1: USB disconnect, device number 90 [ 691.052061][ T3746] usbhid 6-1:8.0: can't add hid device: -71 [ 691.058048][ T3746] usbhid: probe of 6-1:8.0 failed with error -71 [ 691.073388][ T3746] usb 6-1: USB disconnect, device number 84 [ 691.434355][ T6] cm6533_jd 0003:0D8C:0022.003A: unknown main item tag 0x0 [ 691.442029][ T6] cm6533_jd 0003:0D8C:0022.003A: unknown main item tag 0x0 [ 691.449261][ T6] cm6533_jd 0003:0D8C:0022.003A: unknown main item tag 0x0 [ 691.458823][ T6] cm6533_jd 0003:0D8C:0022.003A: unknown main item tag 0x0 [ 691.466168][ T6] cm6533_jd 0003:0D8C:0022.003A: unknown main item tag 0x0 17:49:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x4, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:55 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 17:49:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022090000000892"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) 17:49:55 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 17:49:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 691.475286][ T6] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/0003:0D8C:0022.003A/input/input54 17:49:55 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 17:49:55 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) [ 691.530842][ T6] cm6533_jd 0003:0D8C:0022.003A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 691.695924][T18660] usb 5-1: USB disconnect, device number 69 [ 691.881929][ T3746] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 691.901945][ T6] usb 4-1: new high-speed USB device number 91 using dummy_hcd 17:49:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022090000000892"], 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:56 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 17:49:56 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) 17:49:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:56 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) [ 692.262355][ T6] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.284587][ T6] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.303970][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.322622][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.326691][ T6] usb 4-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 692.343800][ T3746] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 692.361970][ T6] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 692.378315][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.399997][ T3746] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 692.414124][ T3746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.572095][T18667] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 692.883292][ T6] cm6533_jd 0003:0D8C:0022.003B: unknown main item tag 0x0 [ 692.890550][ T6] cm6533_jd 0003:0D8C:0022.003B: unknown main item tag 0x0 [ 692.899647][ T6] cm6533_jd 0003:0D8C:0022.003B: unknown main item tag 0x0 [ 692.907332][ T6] cm6533_jd 0003:0D8C:0022.003B: unknown main item tag 0x0 [ 692.917849][ T6] cm6533_jd 0003:0D8C:0022.003B: unknown main item tag 0x0 [ 692.927461][ T6] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/0003:0D8C:0022.003B/input/input55 [ 692.966908][ T6] cm6533_jd 0003:0D8C:0022.003B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 692.972030][T18667] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.991146][T18667] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.001244][T18667] usb 5-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 693.014454][T18667] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 693.023947][T18667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.110137][ T6] usb 4-1: USB disconnect, device number 91 [ 693.152012][ T3746] usbhid 6-1:8.0: can't add hid device: -71 [ 693.158189][ T3746] usbhid: probe of 6-1:8.0 failed with error -71 [ 693.168742][ T3746] usb 6-1: USB disconnect, device number 85 [ 693.513046][T18667] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 693.520320][T18667] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 693.527797][T18667] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 693.535464][T18667] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 693.543741][T18667] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 17:49:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x4, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:57 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) [ 693.552331][T18667] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/0003:0D8C:0022.003C/input/input56 [ 693.568455][T18667] cm6533_jd 0003:0D8C:0022.003C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 17:49:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, '\x00\x00\x00\x00\b\x00', "b13a0000004000", "3faf4d7f", "a7ca6b00"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, 0x0, 0x0) 17:49:57 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) 17:49:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:57 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) 17:49:57 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa4, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x91, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a825658"]}]}, 0xa4}], 0x1}, 0x0) [ 693.774169][T18667] usb 5-1: USB disconnect, device number 70 [ 693.951934][ T6] usb 6-1: new high-speed USB device number 86 using dummy_hcd 17:49:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, '\x00\x00\x00\x00\b\x00', "b13a0000004000", "3faf4d7f", "a7ca6b00"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) 17:49:58 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) 17:49:58 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa4, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x91, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a825658"]}]}, 0xa4}], 0x1}, 0x0) 17:49:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:58 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa4, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x91, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a825658"]}]}, 0xa4}], 0x1}, 0x0) [ 694.322115][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.340822][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.374811][ T6] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 694.408569][ T6] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 694.436278][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.212606][ T6] usbhid 6-1:8.0: can't add hid device: -71 [ 695.218846][ T6] usbhid: probe of 6-1:8.0 failed with error -71 [ 695.239593][ T6] usb 6-1: USB disconnect, device number 86 17:49:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x0, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:49:59 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa0, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x90, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a8256"]}]}, 0xa0}], 0x1}, 0x0) 17:49:59 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xcb, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3"]}]}, 0xdc}], 0x1}, 0x0) 17:49:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, '\x00\x00\x00\x00\b\x00', "b13a0000004000", "3faf4d7f", "a7ca6b00"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) 17:49:59 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:49:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:49:59 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa0, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x90, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a8256"]}]}, 0xa0}], 0x1}, 0x0) [ 695.692301][T21006] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. 17:49:59 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xcb, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3"]}]}, 0xdc}], 0x1}, 0x0) 17:49:59 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa0, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x90, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a8256"]}]}, 0xa0}], 0x1}, 0x0) 17:49:59 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:00 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xca, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98f"]}]}, 0xdc}], 0x1}, 0x0) [ 695.853140][T21022] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. 17:50:00 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 695.938794][T21028] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 696.049758][ T918] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 696.492261][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.503366][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.526291][ T918] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.540592][ T918] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 696.550269][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.023841][ T918] cm6533_jd 0003:0D8C:0022.003D: unknown main item tag 0x0 [ 697.032583][ T918] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.003D/input/input57 [ 697.047672][ T918] cm6533_jd 0003:0D8C:0022.003D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 697.227045][T18660] usb 6-1: USB disconnect, device number 87 17:50:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x0, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:01 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xcb, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3"]}]}, 0xdc}], 0x1}, 0x0) 17:50:01 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xca, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98f"]}]}, 0xdc}], 0x1}, 0x0) 17:50:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, '\x00\x00\x00\x00\b\x00', "b13a0000004000", "3faf4d7f", "a7ca6b00"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) 17:50:01 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:01 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:01 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xca, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98f"]}]}, 0xdc}], 0x1}, 0x0) 17:50:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xe8, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b"]}]}, 0xf8}], 0x1}, 0x0) 17:50:02 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xe8, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b"]}]}, 0xf8}], 0x1}, 0x0) 17:50:02 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xe7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d1"]}]}, 0xf8}], 0x1}, 0x0) [ 698.091991][T18667] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 698.492145][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.503130][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.513324][T18667] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 698.526486][T18667] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 698.536023][T18667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.023781][T18667] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 699.033093][T18667] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.003E/input/input58 [ 699.053616][T18667] cm6533_jd 0003:0D8C:0022.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 699.235506][T18660] usb 6-1: USB disconnect, device number 88 17:50:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x0, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xe8, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b"]}]}, 0xf8}], 0x1}, 0x0) 17:50:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xe7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d1"]}]}, 0xf8}], 0x1}, 0x0) 17:50:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "e53886a72afa65df", "bd13c0706c2b22b6bbacfb7c4f8c7e32425e7040faee88f3ddbcc66cc54b95aa", "c38a408f", "44cc08a76ca11b99"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 17:50:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d"]}]}, 0x108}], 0x1}, 0x0) 17:50:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "169b2c3e2bc996d5", "56a437b052e70cfc98e45c74f2d2f6221ac0b38008e4b22aca30e8278135b07d", "181c9bd0", "a8983a313b0c4329"}, 0x38) 17:50:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xe7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d1"]}]}, 0xf8}], 0x1}, 0x0) 17:50:04 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d"]}]}, 0x108}], 0x1}, 0x0) [ 700.132059][ T3746] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 700.547367][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.558284][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.568808][ T3746] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 700.581921][ T3746] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 700.590963][ T3746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.093834][ T3746] cm6533_jd 0003:0D8C:0022.003F: unknown main item tag 0x0 [ 701.103305][ T3746] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.003F/input/input59 [ 701.118918][ T3746] cm6533_jd 0003:0D8C:0022.003F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 701.299649][ T3746] usb 6-1: USB disconnect, device number 89 17:50:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x6, {[@local, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (fail_nth: 1) 17:50:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d"]}]}, 0x108}], 0x1}, 0x0) 17:50:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d"]}]}, 0x108}], 0x1}, 0x0) 17:50:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 17:50:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d"]}]}, 0x108}], 0x1}, 0x0) [ 701.842512][T21088] loop3: detected capacity change from 0 to 15 17:50:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 17:50:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d"]}]}, 0x108}], 0x1}, 0x0) [ 701.935883][T21088] FAULT_INJECTION: forcing a failure. [ 701.935883][T21088] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 701.991057][T21088] CPU: 1 PID: 21088 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller #0 [ 701.999872][T21088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.009942][T21088] Call Trace: [ 702.013233][T21088] [ 702.016177][T21088] dump_stack_lvl+0x1e3/0x2cb [ 702.020890][T21088] ? bfq_pos_tree_add_move+0x436/0x436 [ 702.026410][T21088] ? panic+0x76e/0x76e [ 702.030598][T21088] ? mark_lock+0x98/0x350 [ 702.034992][T21088] should_fail+0x384/0x4b0 [ 702.039475][T21088] prepare_alloc_pages+0x1d7/0x5a0 [ 702.044721][T21088] __alloc_pages+0x14d/0x5f0 [ 702.049338][T21088] ? __rmqueue_pcplist+0x1cb0/0x1cb0 [ 702.054647][T21088] ? rcu_lock_release+0x5/0x20 [ 702.059436][T21088] ? alloc_pages+0x43d/0x690 [ 702.064128][T21088] folio_alloc+0x1a/0x50 [ 702.068398][T21088] filemap_alloc_folio+0x7e/0x1c0 [ 702.073442][T21088] __filemap_get_folio+0x848/0x11f0 [ 702.078663][T21088] ? page_cache_prev_miss+0x500/0x500 [ 702.084056][T21088] ? fault_in_readable+0x170/0x360 17:50:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xfe, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d"]}]}, 0x110}], 0x1}, 0x0) 17:50:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) [ 702.089269][T21088] ? fault_in_readable+0x173/0x360 [ 702.094401][T21088] pagecache_get_page+0x2a/0x240 [ 702.099404][T21088] ? fat_block_truncate_page+0x50/0x50 [ 702.104940][T21088] block_write_begin+0x32/0x1f0 [ 702.109845][T21088] ? cont_write_begin+0x189/0x1f0 [ 702.114886][T21088] fat_write_begin+0xa2/0x170 [ 702.119578][T21088] ? fat_block_truncate_page+0x50/0x50 [ 702.125058][T21088] generic_perform_write+0x318/0x610 [ 702.130374][T21088] ? generic_file_direct_write+0x460/0x460 [ 702.136194][T21088] ? file_remove_privs+0x6a0/0x6a0 17:50:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xfe, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d"]}]}, 0x110}], 0x1}, 0x0) [ 702.141401][T21088] ? down_write+0x10d/0x170 [ 702.145984][T21088] __generic_file_write_iter+0x176/0x400 [ 702.151641][T21088] generic_file_write_iter+0xa7/0x1b0 [ 702.157028][T21088] vfs_write+0xa22/0xd40 [ 702.161466][T21088] ? file_end_write+0x230/0x230 [ 702.166357][T21088] ? mutex_lock_nested+0x17/0x20 [ 702.171310][T21088] ? __fdget_pos+0x247/0x2e0 [ 702.175911][T21088] ? ksys_write+0x77/0x2c0 [ 702.180347][T21088] ksys_write+0x19b/0x2c0 [ 702.181970][ T3676] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 702.184689][T21088] ? print_irqtrace_events+0x220/0x220 [ 702.184753][T21088] ? __ia32_sys_read+0x80/0x80 [ 702.202481][T21088] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 702.208480][T21088] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 702.214482][T21088] do_syscall_64+0x2b/0x70 [ 702.218912][T21088] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 702.224819][T21088] RIP: 0033:0x7f9be5e890e9 [ 702.229247][T21088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 702.248860][T21088] RSP: 002b:00007f9be6f41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 702.257291][T21088] RAX: ffffffffffffffda RBX: 00007f9be5f9bf60 RCX: 00007f9be5e890e9 [ 702.265275][T21088] RDX: 0000000000000016 RSI: 0000000020002580 RDI: 0000000000000003 [ 702.273253][T21088] RBP: 00007f9be6f411d0 R08: 0000000000000000 R09: 0000000000000000 [ 702.281230][T21088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.289208][T21088] R13: 00007ffc924be17f R14: 00007f9be6f41300 R15: 0000000000022000 [ 702.297207][T21088] [ 702.562125][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.577419][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.588044][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 702.601325][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 702.610618][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.372047][ T3676] usbhid 6-1:8.0: can't add hid device: -71 [ 703.378181][ T3676] usbhid: probe of 6-1:8.0 failed with error -71 [ 703.391126][ T3676] usb 6-1: USB disconnect, device number 90 17:50:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x6, {[@local, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xfc, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd"]}]}, 0x10c}], 0x1}, 0x0) 17:50:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 17:50:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (fail_nth: 2) 17:50:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xfe, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d"]}]}, 0x110}], 0x1}, 0x0) 17:50:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 17:50:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xfc, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd"]}]}, 0x10c}], 0x1}, 0x0) 17:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) [ 703.863877][T21114] loop3: detected capacity change from 0 to 15 [ 703.900892][T21114] FAULT_INJECTION: forcing a failure. [ 703.900892][T21114] name failslab, interval 1, probability 0, space 0, times 1 [ 703.931434][T21114] CPU: 1 PID: 21114 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller #0 [ 703.940244][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.950318][T21114] Call Trace: [ 703.953614][T21114] [ 703.956559][T21114] dump_stack_lvl+0x1e3/0x2cb [ 703.961259][T21114] ? bfq_pos_tree_add_move+0x436/0x436 [ 703.966729][T21114] ? panic+0x76e/0x76e [ 703.970837][T21114] should_fail+0x384/0x4b0 [ 703.975275][T21114] ? mempool_alloc+0x17d/0x5c0 [ 703.980053][T21114] should_failslab+0x5/0x20 [ 703.984573][T21114] kmem_cache_alloc+0x69/0x2f0 [ 703.989354][T21114] ? mempool_free+0x360/0x360 [ 703.992219][T21120] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 703.994042][T21114] mempool_alloc+0x17d/0x5c0 [ 704.008043][T21114] ? mempool_resize+0x8e0/0x8e0 [ 704.012928][T21114] ? __might_sleep+0xc0/0xc0 [ 704.017604][T21114] bio_alloc_bioset+0x144/0xce0 [ 704.022548][T21114] submit_bh_wbc+0x262/0x4e0 [ 704.027154][T21114] ? __getblk_gfp+0x50/0x290 17:50:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xfc, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd"]}]}, 0x10c}], 0x1}, 0x0) [ 704.031763][T21114] __bread_gfp+0x1aa/0x360 [ 704.036187][T21114] fat12_ent_bread+0x153/0x4f0 [ 704.040974][T21114] ? fat12_ent_set_ptr+0x230/0x230 [ 704.046099][T21114] fat_ent_read_block+0x3e4/0x510 [ 704.051142][T21114] ? fat_alloc_clusters+0x11e0/0x11e0 [ 704.056553][T21114] fat_alloc_clusters+0x502/0x11e0 [ 704.061706][T21114] ? fat_mirror_bhs+0x4e0/0x4e0 [ 704.066589][T21114] ? create_page_buffers+0x1c8/0x4b0 [ 704.071888][T21114] ? rcu_read_lock_sched_held+0x89/0x130 [ 704.077620][T21114] ? fat_bmap+0x45e/0x570 17:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) [ 704.081974][T21114] fat_get_block+0x4b4/0xce0 [ 704.086593][T21114] ? fat_block_truncate_page+0x50/0x50 [ 704.092071][T21114] ? create_page_buffers+0x244/0x4b0 [ 704.097368][T21114] ? fat_block_truncate_page+0x50/0x50 [ 704.102842][T21114] __block_write_begin_int+0x641/0x1da0 [ 704.108432][T21114] ? fat_block_truncate_page+0x50/0x50 [ 704.113913][T21114] ? page_zero_new_buffers+0xe30/0xe30 [ 704.119399][T21114] ? pagecache_get_page+0x105/0x240 [ 704.124612][T21114] ? fat_block_truncate_page+0x50/0x50 [ 704.130087][T21114] block_write_begin+0x97/0x1f0 [ 704.134950][T21114] ? cont_write_begin+0x189/0x1f0 [ 704.139989][T21114] fat_write_begin+0xa2/0x170 [ 704.144771][T21114] ? fat_block_truncate_page+0x50/0x50 [ 704.150248][T21114] generic_perform_write+0x318/0x610 [ 704.155567][T21114] ? generic_file_direct_write+0x460/0x460 [ 704.161387][T21114] ? file_remove_privs+0x6a0/0x6a0 [ 704.166516][T21114] ? down_write+0x10d/0x170 [ 704.171038][T21114] __generic_file_write_iter+0x176/0x400 [ 704.176695][T21114] generic_file_write_iter+0xa7/0x1b0 [ 704.182080][T21114] vfs_write+0xa22/0xd40 [ 704.186328][T21114] ? file_end_write+0x230/0x230 [ 704.191186][T21114] ? mutex_lock_nested+0x17/0x20 [ 704.196117][T21114] ? __fdget_pos+0x247/0x2e0 [ 704.200697][T21114] ? ksys_write+0x77/0x2c0 [ 704.205109][T21114] ksys_write+0x19b/0x2c0 [ 704.209429][T21114] ? print_irqtrace_events+0x220/0x220 [ 704.214883][T21114] ? __ia32_sys_read+0x80/0x80 [ 704.219639][T21114] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 704.225630][T21114] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 704.231603][T21114] do_syscall_64+0x2b/0x70 [ 704.236012][T21114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.241899][T21114] RIP: 0033:0x7f9be5e890e9 [ 704.246319][T21114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 704.265917][T21114] RSP: 002b:00007f9be6f41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.274322][T21114] RAX: ffffffffffffffda RBX: 00007f9be5f9bf60 RCX: 00007f9be5e890e9 17:50:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) [ 704.282281][T21114] RDX: 0000000000000016 RSI: 0000000020002580 RDI: 0000000000000003 [ 704.290238][T21114] RBP: 00007f9be6f411d0 R08: 0000000000000000 R09: 0000000000000000 [ 704.298196][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.306153][T21114] R13: 00007ffc924be17f R14: 00007f9be6f41300 R15: 0000000000022000 [ 704.314130][T21114] [ 704.761993][ T918] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 705.136016][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.147493][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.157524][ T918] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 705.170405][ T918] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 705.179626][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.912137][ T918] usbhid 6-1:8.0: can't add hid device: -71 [ 705.918248][ T918] usbhid: probe of 6-1:8.0 failed with error -71 [ 705.930680][ T918] usb 6-1: USB disconnect, device number 91 17:50:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x6, {[@local, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) 17:50:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b"]}]}, 0x110}], 0x1}, 0x0) 17:50:10 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 17:50:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (fail_nth: 3) 17:50:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:10 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 17:50:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e09151"]}]}, 0x114}], 0x1}, 0x0) 17:50:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 706.400671][T21140] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 706.421583][T21141] loop3: detected capacity change from 0 to 15 17:50:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b"]}]}, 0x110}], 0x1}, 0x0) [ 706.493650][T21147] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 706.507799][T21141] FAULT_INJECTION: forcing a failure. [ 706.507799][T21141] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 706.521175][T21141] CPU: 0 PID: 21141 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller #0 [ 706.529956][T21141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.540023][T21141] Call Trace: [ 706.543310][T21141] [ 706.546250][T21141] dump_stack_lvl+0x1e3/0x2cb [ 706.550942][T21141] ? folio_zero_segments+0x6b1/0x720 [ 706.556242][T21141] ? bfq_pos_tree_add_move+0x436/0x436 [ 706.561720][T21141] ? panic+0x76e/0x76e [ 706.565807][T21141] ? __block_write_begin_int+0x1b66/0x1da0 [ 706.571669][T21141] should_fail+0x384/0x4b0 [ 706.576099][T21141] copy_page_from_iter_atomic+0x2fd/0x1070 [ 706.581917][T21141] ? pipe_zero+0x4d0/0x4d0 [ 706.586323][T21141] ? fat_block_truncate_page+0x50/0x50 [ 706.591770][T21141] ? block_write_begin+0xab/0x1f0 [ 706.596788][T21141] ? cont_write_begin+0x189/0x1f0 [ 706.601807][T21141] ? fat_write_begin+0xa2/0x170 [ 706.606656][T21141] ? fat_block_truncate_page+0x50/0x50 [ 706.612102][T21141] ? fat_write_begin+0xba/0x170 [ 706.616949][T21141] generic_perform_write+0x38c/0x610 [ 706.622236][T21141] ? generic_file_direct_write+0x460/0x460 [ 706.628032][T21141] ? file_remove_privs+0x6a0/0x6a0 [ 706.633139][T21141] ? down_write+0x10d/0x170 [ 706.637642][T21141] __generic_file_write_iter+0x176/0x400 [ 706.643270][T21141] generic_file_write_iter+0xa7/0x1b0 [ 706.648653][T21141] vfs_write+0xa22/0xd40 [ 706.652908][T21141] ? file_end_write+0x230/0x230 [ 706.657788][T21141] ? mutex_lock_nested+0x17/0x20 [ 706.662715][T21141] ? __fdget_pos+0x247/0x2e0 [ 706.667294][T21141] ? ksys_write+0x77/0x2c0 [ 706.671707][T21141] ksys_write+0x19b/0x2c0 [ 706.676030][T21141] ? print_irqtrace_events+0x220/0x220 [ 706.681482][T21141] ? __ia32_sys_read+0x80/0x80 [ 706.686232][T21141] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 706.692210][T21141] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 706.698195][T21141] do_syscall_64+0x2b/0x70 [ 706.702621][T21141] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 706.708515][T21141] RIP: 0033:0x7f9be5e890e9 [ 706.712927][T21141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 706.732522][T21141] RSP: 002b:00007f9be6f41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 17:50:10 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 17:50:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e09151"]}]}, 0x114}], 0x1}, 0x0) [ 706.740927][T21141] RAX: ffffffffffffffda RBX: 00007f9be5f9bf60 RCX: 00007f9be5e890e9 [ 706.748886][T21141] RDX: 0000000000000016 RSI: 0000000020002580 RDI: 0000000000000003 [ 706.756855][T21141] RBP: 00007f9be6f411d0 R08: 0000000000000000 R09: 0000000000000000 [ 706.764825][T21141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.772789][T21141] R13: 00007ffc924be17f R14: 00007f9be6f41300 R15: 0000000000022000 [ 706.780777][T21141] [ 706.850272][T21156] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 706.952015][T18660] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 707.372087][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.383007][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.393132][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 707.406931][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 707.416367][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.182034][T18660] usbhid 6-1:8.0: can't add hid device: -71 [ 708.188058][T18660] usbhid: probe of 6-1:8.0 failed with error -71 [ 708.196575][T18660] usb 6-1: USB disconnect, device number 92 17:50:12 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x0, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:12 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b"]}]}, 0x110}], 0x1}, 0x0) 17:50:12 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 17:50:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (fail_nth: 4) 17:50:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e09151"]}]}, 0x114}], 0x1}, 0x0) 17:50:12 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) 17:50:12 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) [ 708.665670][T21164] loop3: detected capacity change from 0 to 15 [ 708.674759][T21165] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:12 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 17:50:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x10c}], 0x1}, 0x0) [ 708.711512][T21164] FAULT_INJECTION: forcing a failure. [ 708.711512][T21164] name failslab, interval 1, probability 0, space 0, times 0 [ 708.761268][T21164] CPU: 0 PID: 21164 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller #0 [ 708.770081][T21164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.780154][T21164] Call Trace: [ 708.783450][T21164] [ 708.786395][T21164] dump_stack_lvl+0x1e3/0x2cb [ 708.791095][T21164] ? bfq_pos_tree_add_move+0x436/0x436 [ 708.796666][T21164] ? panic+0x76e/0x76e [ 708.800766][T21164] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 708.806902][T21164] should_fail+0x384/0x4b0 [ 708.811342][T21164] ? mempool_alloc+0x17d/0x5c0 [ 708.816116][T21164] should_failslab+0x5/0x20 [ 708.820632][T21164] kmem_cache_alloc+0x69/0x2f0 [ 708.825409][T21164] ? mempool_alloc+0x17d/0x5c0 [ 708.830191][T21164] ? mempool_free+0x360/0x360 [ 708.834884][T21164] mempool_alloc+0x17d/0x5c0 [ 708.839492][T21164] ? mark_lock+0x98/0x350 [ 708.843841][T21164] ? mark_lock+0x98/0x350 [ 708.848191][T21164] ? mempool_resize+0x8e0/0x8e0 [ 708.853052][T21164] ? mark_lock+0x98/0x350 [ 708.857400][T21164] ? __lock_acquire+0x129a/0x1f80 [ 708.862449][T21164] bio_alloc_bioset+0x244/0xce0 [ 708.867322][T21164] __mpage_writepage+0x1036/0x1a20 [ 708.872443][T21164] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 708.878456][T21164] ? mpage_writepages+0x230/0x230 [ 708.883530][T21164] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 708.889520][T21164] write_cache_pages+0x7dd/0x1350 [ 708.894551][T21164] ? mpage_writepages+0x230/0x230 [ 708.899576][T21164] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 708.905216][T21164] ? fat_block_truncate_page+0x50/0x50 [ 708.910684][T21164] mpage_writepages+0x12d/0x230 [ 708.915541][T21164] ? clean_buffers+0x240/0x240 [ 708.920323][T21164] ? fat_block_truncate_page+0x50/0x50 [ 708.925776][T21164] ? do_raw_spin_unlock+0x134/0x8a0 [ 708.930968][T21164] ? rcu_read_lock_sched_held+0x89/0x130 [ 708.936597][T21164] ? fat_readpage+0x20/0x20 [ 708.941100][T21164] do_writepages+0x3c3/0x690 [ 708.945686][T21164] ? __writepage+0x120/0x120 [ 708.950271][T21164] ? filemap_fdatawrite_wbc+0x113/0x170 [ 708.955805][T21164] ? do_raw_spin_lock+0x148/0x360 [ 708.960823][T21164] ? __lock_acquire+0x1f80/0x1f80 [ 708.965839][T21164] ? do_raw_spin_unlock+0x134/0x8a0 [ 708.971027][T21164] ? wbc_attach_and_unlock_inode+0xc3/0x540 [ 708.976994][T21164] filemap_fdatawrite_wbc+0x11e/0x170 [ 708.982362][T21164] file_write_and_wait_range+0x1e7/0x2f0 [ 708.987993][T21164] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 708.994679][T21164] ? up_write+0x131/0x4d0 [ 708.999024][T21164] __generic_file_fsync+0x6e/0x190 [ 709.004128][T21164] fat_file_fsync+0x7a/0x180 [ 709.008713][T21164] generic_file_write_iter+0x15d/0x1b0 [ 709.014163][T21164] vfs_write+0xa22/0xd40 [ 709.018403][T21164] ? file_end_write+0x230/0x230 [ 709.023257][T21164] ? mutex_lock_nested+0x17/0x20 [ 709.028181][T21164] ? __fdget_pos+0x247/0x2e0 [ 709.032761][T21164] ? ksys_write+0x77/0x2c0 [ 709.037164][T21164] ksys_write+0x19b/0x2c0 [ 709.041483][T21164] ? print_irqtrace_events+0x220/0x220 [ 709.046934][T21164] ? __ia32_sys_read+0x80/0x80 [ 709.051690][T21164] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 709.057663][T21164] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 709.063632][T21164] do_syscall_64+0x2b/0x70 [ 709.068038][T21164] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.073921][T21164] RIP: 0033:0x7f9be5e890e9 [ 709.078324][T21164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 709.097918][T21164] RSP: 002b:00007f9be6f41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 17:50:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x10c}], 0x1}, 0x0) 17:50:13 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) [ 709.106326][T21164] RAX: ffffffffffffffda RBX: 00007f9be5f9bf60 RCX: 00007f9be5e890e9 [ 709.114286][T21164] RDX: 0000000000000016 RSI: 0000000020002580 RDI: 0000000000000003 [ 709.122422][T21164] RBP: 00007f9be6f411d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.130382][T21164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.138342][T21164] R13: 00007ffc924be17f R14: 00007f9be6f41300 R15: 0000000000022000 [ 709.146580][T21164] [ 709.321938][T18667] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 709.712022][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.723073][T18667] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.733040][T18667] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 709.746097][T18667] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 709.755788][T18667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.242980][T18667] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 710.251059][T18667] cm6533_jd 0003:0D8C:0022.0040: No inputs registered, leaving [ 710.263871][T18667] cm6533_jd 0003:0D8C:0022.0040: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 710.462873][ T3676] usb 6-1: USB disconnect, device number 93 17:50:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x0, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:15 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 17:50:15 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) 17:50:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (fail_nth: 5) 17:50:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x10c}], 0x1}, 0x0) 17:50:15 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:15 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x10c}], 0x1}, 0x0) 17:50:15 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:15 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) [ 711.015589][T21189] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.038976][T21194] loop3: detected capacity change from 0 to 15 17:50:15 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) 17:50:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x10c}], 0x1}, 0x0) [ 711.123221][T21194] FAULT_INJECTION: forcing a failure. [ 711.123221][T21194] name failslab, interval 1, probability 0, space 0, times 0 [ 711.180889][T21194] CPU: 1 PID: 21194 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller #0 [ 711.189698][T21194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.199769][T21194] Call Trace: [ 711.203057][T21194] [ 711.205989][T21194] dump_stack_lvl+0x1e3/0x2cb [ 711.210677][T21194] ? bfq_pos_tree_add_move+0x436/0x436 [ 711.216143][T21194] ? panic+0x76e/0x76e [ 711.220230][T21194] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 711.226222][T21194] should_fail+0x384/0x4b0 [ 711.230663][T21194] ? mempool_alloc+0x17d/0x5c0 [ 711.235434][T21194] should_failslab+0x5/0x20 [ 711.238508][T21203] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.239947][T21194] kmem_cache_alloc+0x69/0x2f0 [ 711.254094][T21194] ? mempool_alloc+0x17d/0x5c0 [ 711.258874][T21194] ? mempool_free+0x360/0x360 [ 711.263563][T21194] mempool_alloc+0x17d/0x5c0 [ 711.268165][T21194] ? mark_lock+0x98/0x350 [ 711.272511][T21194] ? mark_lock+0x98/0x350 [ 711.276854][T21194] ? mempool_resize+0x8e0/0x8e0 [ 711.281712][T21194] ? mark_lock+0x98/0x350 [ 711.286056][T21194] ? __lock_acquire+0x129a/0x1f80 [ 711.291103][T21194] bio_alloc_bioset+0x244/0xce0 [ 711.295981][T21194] __mpage_writepage+0x1036/0x1a20 [ 711.301126][T21194] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 711.307115][T21194] ? mpage_writepages+0x230/0x230 [ 711.312183][T21194] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 711.318189][T21194] write_cache_pages+0x7dd/0x1350 [ 711.323249][T21194] ? mpage_writepages+0x230/0x230 [ 711.328283][T21194] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 711.333948][T21194] ? fat_block_truncate_page+0x50/0x50 [ 711.336989][ T6] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 711.339414][T21194] mpage_writepages+0x12d/0x230 [ 711.351784][T21194] ? clean_buffers+0x240/0x240 [ 711.356570][T21194] ? fat_block_truncate_page+0x50/0x50 [ 711.362218][T21194] ? do_raw_spin_unlock+0x134/0x8a0 [ 711.367427][T21194] ? rcu_read_lock_sched_held+0x89/0x130 [ 711.373063][T21194] ? fat_readpage+0x20/0x20 [ 711.377576][T21194] do_writepages+0x3c3/0x690 [ 711.382184][T21194] ? __writepage+0x120/0x120 [ 711.386784][T21194] ? filemap_fdatawrite_wbc+0x113/0x170 [ 711.392335][T21194] ? do_raw_spin_lock+0x148/0x360 [ 711.397376][T21194] ? __lock_acquire+0x1f80/0x1f80 [ 711.402431][T21194] ? do_raw_spin_unlock+0x134/0x8a0 [ 711.407645][T21194] ? wbc_attach_and_unlock_inode+0xc3/0x540 [ 711.413564][T21194] filemap_fdatawrite_wbc+0x11e/0x170 [ 711.418950][T21194] file_write_and_wait_range+0x1e7/0x2f0 [ 711.424598][T21194] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 711.431293][T21194] ? up_write+0x131/0x4d0 [ 711.435650][T21194] __generic_file_fsync+0x6e/0x190 [ 711.440775][T21194] fat_file_fsync+0x7a/0x180 [ 711.445381][T21194] generic_file_write_iter+0x15d/0x1b0 [ 711.450853][T21194] vfs_write+0xa22/0xd40 [ 711.455114][T21194] ? file_end_write+0x230/0x230 [ 711.459989][T21194] ? mutex_lock_nested+0x17/0x20 [ 711.464929][T21194] ? __fdget_pos+0x247/0x2e0 [ 711.469520][T21194] ? ksys_write+0x77/0x2c0 [ 711.473970][T21194] ksys_write+0x19b/0x2c0 [ 711.478304][T21194] ? print_irqtrace_events+0x220/0x220 [ 711.483775][T21194] ? __ia32_sys_read+0x80/0x80 [ 711.488544][T21194] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 711.494534][T21194] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 711.500524][T21194] do_syscall_64+0x2b/0x70 [ 711.504955][T21194] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 711.510855][T21194] RIP: 0033:0x7f9be5e890e9 [ 711.515271][T21194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 711.534881][T21194] RSP: 002b:00007f9be6f41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 711.543312][T21194] RAX: ffffffffffffffda RBX: 00007f9be5f9bf60 RCX: 00007f9be5e890e9 [ 711.551294][T21194] RDX: 0000000000000016 RSI: 0000000020002580 RDI: 0000000000000003 [ 711.559278][T21194] RBP: 00007f9be6f411d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.567269][T21194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.575259][T21194] R13: 00007ffc924be17f R14: 00007f9be6f41300 R15: 0000000000022000 [ 711.583260][T21194] [ 711.792002][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.803648][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.814124][ T6] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 711.828654][ T6] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 711.837956][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.322995][ T6] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 712.330579][ T6] cm6533_jd 0003:0D8C:0022.0041: No inputs registered, leaving [ 712.343920][ T6] cm6533_jd 0003:0D8C:0022.0041: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 712.539364][ T918] usb 6-1: USB disconnect, device number 94 17:50:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x0, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:17 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x0, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:17 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) 17:50:17 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x10c}], 0x1}, 0x0) 17:50:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (fail_nth: 6) 17:50:17 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x0, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:17 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) (fail_nth: 1) 17:50:17 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) 17:50:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 713.087254][T21214] loop3: detected capacity change from 0 to 15 17:50:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 713.194533][T21214] FAULT_INJECTION: forcing a failure. [ 713.194533][T21214] name failslab, interval 1, probability 0, space 0, times 0 [ 713.208549][T21222] FAULT_INJECTION: forcing a failure. [ 713.208549][T21222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.240186][T21214] CPU: 0 PID: 21214 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller #0 [ 713.248998][T21214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.259065][T21214] Call Trace: [ 713.262345][T21214] [ 713.265281][T21214] dump_stack_lvl+0x1e3/0x2cb [ 713.269976][T21214] ? bfq_pos_tree_add_move+0x436/0x436 [ 713.275450][T21214] ? panic+0x76e/0x76e [ 713.279542][T21214] should_fail+0x384/0x4b0 [ 713.283963][T21214] ? mempool_alloc+0x17d/0x5c0 [ 713.288731][T21214] should_failslab+0x5/0x20 17:50:17 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x0, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 713.293243][T21214] kmem_cache_alloc+0x69/0x2f0 [ 713.298029][T21214] ? mempool_free+0x360/0x360 [ 713.302716][T21214] mempool_alloc+0x17d/0x5c0 [ 713.307339][T21214] ? rcu_read_lock_sched_held+0x89/0x130 [ 713.312991][T21214] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 713.318992][T21214] ? mempool_resize+0x8e0/0x8e0 [ 713.323875][T21214] bio_alloc_bioset+0x144/0xce0 [ 713.328740][T21214] ? rcu_lock_acquire+0x30/0x30 [ 713.333705][T21214] submit_bh_wbc+0x262/0x4e0 [ 713.338305][T21214] __sync_dirty_buffer+0x209/0x340 [ 713.343692][T21214] __fat_write_inode+0x7b5/0x9e0 [ 713.348658][T21214] ? fat_sync_inode+0x20/0x20 [ 713.353355][T21214] __writeback_single_inode+0x4d6/0x670 [ 713.358918][T21214] writeback_single_inode+0x1fd/0x710 [ 713.364307][T21214] ? write_inode_now+0x250/0x250 [ 713.369257][T21214] ? read_lock_is_recursive+0x10/0x10 [ 713.374639][T21214] ? sync_mapping_buffers+0x684/0xf30 [ 713.380016][T21214] ? __might_sleep+0xc0/0xc0 [ 713.384615][T21214] sync_inode_metadata+0xb9/0x110 [ 713.389637][T21214] ? writeback_single_inode+0x710/0x710 [ 713.395196][T21214] ? up_write+0x131/0x4d0 [ 713.399541][T21214] __generic_file_fsync+0x13b/0x190 [ 713.404769][T21214] fat_file_fsync+0x7a/0x180 [ 713.409375][T21214] generic_file_write_iter+0x15d/0x1b0 [ 713.414843][T21214] vfs_write+0xa22/0xd40 [ 713.419181][T21214] ? file_end_write+0x230/0x230 [ 713.424050][T21214] ? mutex_lock_nested+0x17/0x20 [ 713.428989][T21214] ? __fdget_pos+0x247/0x2e0 [ 713.433577][T21214] ? ksys_write+0x77/0x2c0 [ 713.437993][T21214] ksys_write+0x19b/0x2c0 [ 713.442324][T21214] ? print_irqtrace_events+0x220/0x220 [ 713.447796][T21214] ? __ia32_sys_read+0x80/0x80 [ 713.452568][T21214] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 713.458558][T21214] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 713.464547][T21214] do_syscall_64+0x2b/0x70 [ 713.468961][T21214] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 713.474866][T21214] RIP: 0033:0x7f9be5e890e9 [ 713.479331][T21214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 713.498948][T21214] RSP: 002b:00007f9be6f41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 713.507389][T21214] RAX: ffffffffffffffda RBX: 00007f9be5f9bf60 RCX: 00007f9be5e890e9 [ 713.515370][T21214] RDX: 0000000000000016 RSI: 0000000020002580 RDI: 0000000000000003 [ 713.523338][T21214] RBP: 00007f9be6f411d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.531307][T21214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.539286][T21214] R13: 00007ffc924be17f R14: 00007f9be6f41300 R15: 0000000000022000 [ 713.547295][T21214] [ 713.550325][T21222] CPU: 1 PID: 21222 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 713.559108][T21222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.569173][T21222] Call Trace: [ 713.572451][T21222] [ 713.575377][T21222] dump_stack_lvl+0x1e3/0x2cb [ 713.580051][T21222] ? bfq_pos_tree_add_move+0x436/0x436 [ 713.585499][T21222] ? panic+0x76e/0x76e [ 713.589564][T21222] ? __lock_acquire+0x1f80/0x1f80 [ 713.594584][T21222] should_fail+0x384/0x4b0 [ 713.598992][T21222] _copy_from_user+0x2b/0x160 [ 713.603675][T21222] sendmsg_copy_msghdr+0xb7/0x640 [ 713.608795][T21222] ? __copy_msghdr_from_user+0x600/0x600 [ 713.614528][T21222] __sys_sendmsg+0x24e/0x370 [ 713.619120][T21222] ? ____sys_sendmsg+0x8e0/0x8e0 [ 713.624059][T21222] ? __context_tracking_exit+0x4d/0x80 [ 713.629533][T21222] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 713.635511][T21222] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 713.641482][T21222] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 713.647451][T21222] do_syscall_64+0x2b/0x70 [ 713.651861][T21222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 713.657748][T21222] RIP: 0033:0x7ffb5f8890e9 [ 713.662277][T21222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 713.681890][T21222] RSP: 002b:00007ffb60a6b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.690306][T21222] RAX: ffffffffffffffda RBX: 00007ffb5f99bf60 RCX: 00007ffb5f8890e9 [ 713.698267][T21222] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 713.706228][T21222] RBP: 00007ffb60a6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.714190][T21222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.722150][T21222] R13: 00007ffcc591cf1f R14: 00007ffb60a6b300 R15: 0000000000022000 [ 713.730137][T21222] [ 713.892126][ T6] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 714.252166][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.264922][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.275081][ T6] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 714.288441][ T6] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 714.298530][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.783659][ T6] cm6533_jd 0003:0D8C:0022.0042: unknown main item tag 0x0 [ 714.791481][ T6] cm6533_jd 0003:0D8C:0022.0042: No inputs registered, leaving [ 714.802502][ T6] cm6533_jd 0003:0D8C:0022.0042: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 714.989169][ T6] usb 6-1: USB disconnect, device number 95 17:50:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x7, {[@local, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:19 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) (fail_nth: 2) 17:50:19 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) 17:50:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (fail_nth: 7) 17:50:19 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x2a, 0x1}, 0x10}], 0x1}, 0x0) 17:50:19 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x2a, 0x1}, 0x10}], 0x1}, 0x0) 17:50:19 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) [ 715.539404][T21236] FAULT_INJECTION: forcing a failure. [ 715.539404][T21236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.553351][T21238] loop3: detected capacity change from 0 to 15 17:50:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 715.604358][T21238] FAULT_INJECTION: forcing a failure. [ 715.604358][T21238] name failslab, interval 1, probability 0, space 0, times 0 [ 715.615511][T21236] CPU: 1 PID: 21236 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 715.625750][T21236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.635818][T21236] Call Trace: [ 715.639107][T21236] [ 715.642039][T21236] dump_stack_lvl+0x1e3/0x2cb [ 715.646730][T21236] ? bfq_pos_tree_add_move+0x436/0x436 [ 715.652200][T21236] ? panic+0x76e/0x76e [ 715.656292][T21236] ? __might_fault+0xb6/0x110 [ 715.660972][T21236] ? __lock_acquire+0x1f80/0x1f80 [ 715.666002][T21236] ? rcu_read_lock_sched_held+0x89/0x130 [ 715.671643][T21236] should_fail+0x384/0x4b0 [ 715.676063][T21236] _copy_from_user+0x2b/0x160 [ 715.680738][T21236] iovec_from_user+0x146/0x390 [ 715.685495][T21236] __import_iovec+0x72/0x4e0 [ 715.690080][T21236] ? ksys_write+0x239/0x2c0 [ 715.694573][T21236] import_iovec+0xe6/0x120 [ 715.698983][T21236] sendmsg_copy_msghdr+0x4cf/0x640 [ 715.704087][T21236] ? __copy_msghdr_from_user+0x600/0x600 [ 715.709723][T21236] __sys_sendmsg+0x24e/0x370 [ 715.714390][T21236] ? ____sys_sendmsg+0x8e0/0x8e0 [ 715.719325][T21236] ? __context_tracking_exit+0x4d/0x80 [ 715.724782][T21236] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 715.730760][T21236] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 715.736728][T21236] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 715.742698][T21236] do_syscall_64+0x2b/0x70 [ 715.747103][T21236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 715.752982][T21236] RIP: 0033:0x7ffb5f8890e9 [ 715.757386][T21236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 715.776981][T21236] RSP: 002b:00007ffb60a6b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.785396][T21236] RAX: ffffffffffffffda RBX: 00007ffb5f99bf60 RCX: 00007ffb5f8890e9 [ 715.793368][T21236] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 715.801337][T21236] RBP: 00007ffb60a6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 715.809304][T21236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.817268][T21236] R13: 00007ffcc591cf1f R14: 00007ffb60a6b300 R15: 0000000000022000 [ 715.825245][T21236] [ 715.835616][T21238] CPU: 1 PID: 21238 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller #0 [ 715.844410][T21238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.854461][T21238] Call Trace: [ 715.857731][T21238] [ 715.860648][T21238] dump_stack_lvl+0x1e3/0x2cb [ 715.865324][T21238] ? __lock_acquire+0x129a/0x1f80 [ 715.870339][T21238] ? bfq_pos_tree_add_move+0x436/0x436 [ 715.875791][T21238] ? panic+0x76e/0x76e [ 715.879862][T21238] should_fail+0x384/0x4b0 [ 715.884274][T21238] ? mempool_alloc+0x17d/0x5c0 [ 715.889028][T21238] should_failslab+0x5/0x20 [ 715.893519][T21238] kmem_cache_alloc+0x69/0x2f0 [ 715.898276][T21238] ? mempool_free+0x360/0x360 [ 715.902945][T21238] mempool_alloc+0x17d/0x5c0 [ 715.907529][T21238] ? sync_mapping_buffers+0x5a0/0xf30 [ 715.912890][T21238] ? rcu_read_lock_sched_held+0x89/0x130 [ 715.918522][T21238] ? mempool_resize+0x8e0/0x8e0 [ 715.923369][T21238] ? read_lock_is_recursive+0x10/0x10 [ 715.928728][T21238] ? sync_mapping_buffers+0x5a0/0xf30 [ 715.934090][T21238] bio_alloc_bioset+0x144/0xce0 [ 715.938941][T21238] submit_bh_wbc+0x262/0x4e0 [ 715.943528][T21238] sync_mapping_buffers+0x5ad/0xf30 [ 715.948723][T21238] ? up_write+0x131/0x4d0 [ 715.953042][T21238] ? emergency_thaw_bdev+0xb0/0xb0 [ 715.958141][T21238] ? __up_read+0x690/0x690 [ 715.962553][T21238] ? file_check_and_advance_wb_err+0x10d/0x170 [ 715.968702][T21238] ? __generic_file_fsync+0x16d/0x190 [ 715.974064][T21238] fat_file_fsync+0x119/0x180 [ 715.978733][T21238] generic_file_write_iter+0x15d/0x1b0 [ 715.984188][T21238] vfs_write+0xa22/0xd40 [ 715.988425][T21238] ? file_end_write+0x230/0x230 [ 715.993277][T21238] ? mutex_lock_nested+0x17/0x20 [ 715.998200][T21238] ? __fdget_pos+0x247/0x2e0 [ 716.002775][T21238] ? ksys_write+0x77/0x2c0 [ 716.007183][T21238] ksys_write+0x19b/0x2c0 [ 716.011498][T21238] ? print_irqtrace_events+0x220/0x220 [ 716.016950][T21238] ? __ia32_sys_read+0x80/0x80 [ 716.021704][T21238] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 716.027682][T21238] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 716.033653][T21238] do_syscall_64+0x2b/0x70 [ 716.038068][T21238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.043961][T21238] RIP: 0033:0x7f9be5e890e9 [ 716.048454][T21238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 716.068051][T21238] RSP: 002b:00007f9be6f41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 716.076455][T21238] RAX: ffffffffffffffda RBX: 00007f9be5f9bf60 RCX: 00007f9be5e890e9 [ 716.084416][T21238] RDX: 0000000000000016 RSI: 0000000020002580 RDI: 0000000000000003 [ 716.092374][T21238] RBP: 00007f9be6f411d0 R08: 0000000000000000 R09: 0000000000000000 17:50:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (fail_nth: 8) 17:50:20 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10, 0x2a, 0x1}, 0x10}], 0x1}, 0x0) [ 716.100331][T21238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.108291][T21238] R13: 00007ffc924be17f R14: 00007f9be6f41300 R15: 0000000000022000 [ 716.116286][T21238] 17:50:20 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) [ 716.212997][ T6] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 716.250766][T21253] loop3: detected capacity change from 0 to 15 [ 716.285439][T21253] FAULT_INJECTION: forcing a failure. [ 716.285439][T21253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.299088][T21253] CPU: 1 PID: 21253 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller #0 [ 716.307875][T21253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.317945][T21253] Call Trace: [ 716.321260][T21253] [ 716.324201][T21253] dump_stack_lvl+0x1e3/0x2cb [ 716.328904][T21253] ? bfq_pos_tree_add_move+0x436/0x436 [ 716.334376][T21253] ? panic+0x76e/0x76e [ 716.338470][T21253] ? snprintf+0xd6/0x120 [ 716.343141][T21253] should_fail+0x384/0x4b0 [ 716.347578][T21253] _copy_to_user+0x2b/0x130 [ 716.352093][T21253] simple_read_from_buffer+0xd9/0x160 [ 716.357486][T21253] proc_fail_nth_read+0x1af/0x220 [ 716.362546][T21253] ? proc_fault_inject_write+0x3a0/0x3a0 [ 716.368192][T21253] ? security_file_permission+0x45f/0x5c0 [ 716.373967][T21253] ? proc_fault_inject_write+0x3a0/0x3a0 [ 716.379589][T21253] vfs_read+0x2ea/0xd10 [ 716.383738][T21253] ? __fdget_pos+0x247/0x2e0 [ 716.388318][T21253] ? kernel_read+0x1f0/0x1f0 [ 716.392911][T21253] ? mutex_lock_nested+0x17/0x20 [ 716.397838][T21253] ? __fdget_pos+0x247/0x2e0 [ 716.402417][T21253] ? ksys_read+0x77/0x2c0 [ 716.406741][T21253] ksys_read+0x19b/0x2c0 [ 716.410976][T21253] ? print_irqtrace_events+0x220/0x220 [ 716.416431][T21253] ? vfs_write+0xd40/0xd40 [ 716.420846][T21253] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 716.426817][T21253] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 716.432799][T21253] do_syscall_64+0x2b/0x70 [ 716.437207][T21253] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.443090][T21253] RIP: 0033:0x7f9be5e3bc9c [ 716.447498][T21253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 716.467095][T21253] RSP: 002b:00007f9be6f41160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 716.475503][T21253] RAX: ffffffffffffffda RBX: 00007f9be5f9bf60 RCX: 00007f9be5e3bc9c [ 716.483468][T21253] RDX: 000000000000000f RSI: 00007f9be6f411e0 RDI: 0000000000000004 [ 716.491427][T21253] RBP: 00007f9be6f411d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.499392][T21253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.507439][T21253] R13: 00007ffc924be17f R14: 00007f9be6f41300 R15: 0000000000022000 [ 716.515415][T21253] [ 716.682064][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.693152][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.703232][ T6] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 716.719413][ T6] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 716.728504][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.472085][ T6] usbhid 6-1:8.0: can't add hid device: -71 [ 717.478346][ T6] usbhid: probe of 6-1:8.0 failed with error -71 [ 717.486574][ T6] usb 6-1: USB disconnect, device number 96 17:50:22 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) 17:50:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) (fail_nth: 3) 17:50:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:22 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 17:50:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x7, {[@local, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:50:22 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) [ 717.950185][T21258] FAULT_INJECTION: forcing a failure. [ 717.950185][T21258] name failslab, interval 1, probability 0, space 0, times 0 [ 717.967177][T21263] loop3: detected capacity change from 0 to 15 [ 717.990081][T21258] CPU: 0 PID: 21258 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 717.998881][T21258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.008948][T21258] Call Trace: [ 718.012233][T21258] [ 718.015169][T21258] dump_stack_lvl+0x1e3/0x2cb [ 718.019876][T21258] ? bfq_pos_tree_add_move+0x436/0x436 [ 718.025353][T21258] ? panic+0x76e/0x76e [ 718.029447][T21258] ? __might_sleep+0xc0/0xc0 [ 718.034063][T21258] should_fail+0x384/0x4b0 [ 718.038501][T21258] ? __alloc_skb+0xd2/0x590 [ 718.043055][T21258] should_failslab+0x5/0x20 [ 718.047573][T21258] kmem_cache_alloc_node+0x6c/0x340 [ 718.052798][T21258] __alloc_skb+0xd2/0x590 [ 718.057144][T21258] netlink_sendmsg+0x774/0xcd0 [ 718.062010][T21258] ? netlink_getsockopt+0x9c0/0x9c0 [ 718.067212][T21258] ? __import_iovec+0x340/0x4e0 [ 718.072081][T21258] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 718.077448][T21258] ? security_socket_sendmsg+0x9d/0xb0 [ 718.082941][T21258] ? netlink_getsockopt+0x9c0/0x9c0 [ 718.088155][T21258] ____sys_sendmsg+0x597/0x8e0 [ 718.092939][T21258] ? __sys_sendmsg_sock+0x30/0x30 17:50:22 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) [ 718.097986][T21258] __sys_sendmsg+0x27e/0x370 [ 718.102583][T21258] ? ____sys_sendmsg+0x8e0/0x8e0 [ 718.107552][T21258] ? __context_tracking_exit+0x4d/0x80 [ 718.113038][T21258] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 718.119130][T21258] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 718.125126][T21258] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 718.131120][T21258] do_syscall_64+0x2b/0x70 [ 718.135551][T21258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 718.141460][T21258] RIP: 0033:0x7ffb5f8890e9 17:50:22 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) 17:50:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 718.145887][T21258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 718.165507][T21258] RSP: 002b:00007ffb60a6b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.173947][T21258] RAX: ffffffffffffffda RBX: 00007ffb5f99bf60 RCX: 00007ffb5f8890e9 [ 718.181938][T21258] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 718.189932][T21258] RBP: 00007ffb60a6b1d0 R08: 0000000000000000 R09: 0000000000000000 17:50:22 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) 17:50:22 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 1) 17:50:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 718.197921][T21258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.205901][T21258] R13: 00007ffcc591cf1f R14: 00007ffb60a6b300 R15: 0000000000022000 [ 718.213900][T21258] [ 718.262764][T21278] FAULT_INJECTION: forcing a failure. [ 718.262764][T21278] name fail_usercopy, interval 1, probability 0, space 0, times 0 17:50:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) (fail_nth: 4) 17:50:22 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x2c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic]}]}, 0x2c}], 0x1}, 0x0) 17:50:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x600) [ 718.323643][T21278] CPU: 0 PID: 21278 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 718.332447][T21278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.342522][T21278] Call Trace: [ 718.345814][T21278] [ 718.348752][T21278] dump_stack_lvl+0x1e3/0x2cb [ 718.350326][T21284] FAULT_INJECTION: forcing a failure. [ 718.350326][T21284] name failslab, interval 1, probability 0, space 0, times 0 [ 718.353445][T21278] ? bfq_pos_tree_add_move+0x436/0x436 [ 718.353476][T21278] ? panic+0x76e/0x76e [ 718.353502][T21278] ? __lock_acquire+0x1f80/0x1f80 [ 718.353536][T21278] should_fail+0x384/0x4b0 [ 718.385106][T21278] _copy_from_user+0x2b/0x160 [ 718.389795][T21278] sendmsg_copy_msghdr+0xb7/0x640 [ 718.394827][T21278] ? __copy_msghdr_from_user+0x600/0x600 [ 718.400474][T21278] __sys_sendmsg+0x24e/0x370 [ 718.405066][T21278] ? ____sys_sendmsg+0x8e0/0x8e0 [ 718.410014][T21278] ? __context_tracking_exit+0x4d/0x80 [ 718.415481][T21278] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 718.421564][T21278] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 718.427548][T21278] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 718.433546][T21278] do_syscall_64+0x2b/0x70 [ 718.437968][T21278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 718.443864][T21278] RIP: 0033:0x7f7c87a890e9 [ 718.448271][T21278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 718.467874][T21278] RSP: 002b:00007f7c88cda168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.476297][T21278] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a890e9 [ 718.484282][T21278] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 718.492257][T21278] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.500266][T21278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.508232][T21278] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 718.516215][T21278] [ 718.519255][T21284] CPU: 1 PID: 21284 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 718.528029][T21284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.530110][ T3676] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 718.538087][T21284] Call Trace: [ 718.538100][T21284] [ 718.538108][T21284] dump_stack_lvl+0x1e3/0x2cb [ 718.538138][T21284] ? bfq_pos_tree_add_move+0x436/0x436 [ 718.538158][T21284] ? panic+0x76e/0x76e [ 718.565971][T21284] ? __might_sleep+0xc0/0xc0 [ 718.570570][T21284] should_fail+0x384/0x4b0 [ 718.574979][T21284] ? netlink_sendmsg+0x774/0xcd0 [ 718.579907][T21284] should_failslab+0x5/0x20 [ 718.584397][T21284] __kmalloc_node_track_caller+0x8c/0x3f0 [ 718.590103][T21284] ? trace_kmem_cache_alloc_node+0x2d/0xe0 [ 718.595908][T21284] ? kmem_cache_alloc_node+0x22a/0x340 [ 718.601390][T21284] ? __alloc_skb+0xd2/0x590 [ 718.605907][T21284] ? netlink_sendmsg+0x774/0xcd0 [ 718.610852][T21284] __alloc_skb+0x11a/0x590 [ 718.615285][T21284] netlink_sendmsg+0x774/0xcd0 [ 718.620071][T21284] ? netlink_getsockopt+0x9c0/0x9c0 [ 718.625276][T21284] ? __import_iovec+0x340/0x4e0 [ 718.630145][T21284] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 718.635437][T21284] ? security_socket_sendmsg+0x9d/0xb0 [ 718.640912][T21284] ? netlink_getsockopt+0x9c0/0x9c0 [ 718.646116][T21284] ____sys_sendmsg+0x597/0x8e0 [ 718.650894][T21284] ? __sys_sendmsg_sock+0x30/0x30 [ 718.655934][T21284] __sys_sendmsg+0x27e/0x370 [ 718.660533][T21284] ? ____sys_sendmsg+0x8e0/0x8e0 [ 718.665475][T21284] ? __context_tracking_exit+0x4d/0x80 [ 718.670935][T21284] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 718.676918][T21284] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 718.682893][T21284] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 718.688884][T21284] do_syscall_64+0x2b/0x70 [ 718.693297][T21284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 718.699181][T21284] RIP: 0033:0x7ffb5f8890e9 [ 718.703588][T21284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 718.723184][T21284] RSP: 002b:00007ffb60a6b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.731586][T21284] RAX: ffffffffffffffda RBX: 00007ffb5f99bf60 RCX: 00007ffb5f8890e9 [ 718.739543][T21284] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 718.747502][T21284] RBP: 00007ffb60a6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.755459][T21284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.763417][T21284] R13: 00007ffcc591cf1f R14: 00007ffb60a6b300 R15: 0000000000022000 [ 718.771406][T21284] [ 718.815895][T21286] loop3: detected capacity change from 0 to 15 [ 719.182385][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.197054][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.207385][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 719.220970][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 719.230360][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.982101][ T3676] usbhid 6-1:8.0: can't add hid device: -71 [ 719.988108][ T3676] usbhid: probe of 6-1:8.0 failed with error -71 [ 720.001560][ T3676] usb 6-1: USB disconnect, device number 97 17:50:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x7, {[@local, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:24 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa0, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x90, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a8256"]}]}, 0xa0}], 0x1}, 0x0) 17:50:24 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 2) 17:50:24 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) (fail_nth: 5) 17:50:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0xa00) 17:50:24 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa0, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x90, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a8256"]}]}, 0xa0}], 0x1}, 0x0) [ 720.449854][T21292] loop3: detected capacity change from 0 to 15 [ 720.456316][T21294] FAULT_INJECTION: forcing a failure. [ 720.456316][T21294] name fail_usercopy, interval 1, probability 0, space 0, times 0 17:50:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:24 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xa0, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x90, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a8256"]}]}, 0xa0}], 0x1}, 0x0) [ 720.530217][T21294] CPU: 1 PID: 21294 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 720.539042][T21294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.549200][T21294] Call Trace: [ 720.552496][T21294] [ 720.555435][T21294] dump_stack_lvl+0x1e3/0x2cb [ 720.560135][T21294] ? bfq_pos_tree_add_move+0x436/0x436 [ 720.565612][T21294] ? panic+0x76e/0x76e [ 720.569704][T21294] ? __might_fault+0xb6/0x110 [ 720.574395][T21294] ? __lock_acquire+0x1f80/0x1f80 [ 720.579458][T21294] ? rcu_read_lock_sched_held+0x89/0x130 [ 720.585114][T21294] should_fail+0x384/0x4b0 [ 720.589567][T21294] _copy_from_user+0x2b/0x160 [ 720.594268][T21294] iovec_from_user+0x146/0x390 [ 720.599052][T21294] __import_iovec+0x72/0x4e0 [ 720.603662][T21294] ? ksys_write+0x239/0x2c0 [ 720.608195][T21294] import_iovec+0xe6/0x120 [ 720.612635][T21294] sendmsg_copy_msghdr+0x4cf/0x640 [ 720.617775][T21294] ? __copy_msghdr_from_user+0x600/0x600 [ 720.623440][T21294] __sys_sendmsg+0x24e/0x370 17:50:24 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xca, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98f"]}]}, 0xdc}], 0x1}, 0x0) [ 720.628052][T21294] ? ____sys_sendmsg+0x8e0/0x8e0 [ 720.633019][T21294] ? __context_tracking_exit+0x4d/0x80 [ 720.638509][T21294] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 720.644520][T21294] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 720.650524][T21294] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 720.656524][T21294] do_syscall_64+0x2b/0x70 [ 720.660963][T21294] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 720.667005][T21294] RIP: 0033:0x7f7c87a890e9 17:50:24 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xca, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98f"]}]}, 0xdc}], 0x1}, 0x0) [ 720.671439][T21294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 720.691063][T21294] RSP: 002b:00007f7c88cda168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.699504][T21294] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a890e9 [ 720.707498][T21294] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 720.715487][T21294] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 17:50:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0xc00) [ 720.723481][T21294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.731471][T21294] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 720.739479][T21294] [ 720.765694][ T3676] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 720.829543][T21313] loop3: detected capacity change from 0 to 15 [ 721.133159][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.144144][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.154644][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.167747][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 721.177144][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.922142][ T3676] usbhid 6-1:8.0: can't add hid device: -71 [ 721.928164][ T3676] usbhid: probe of 6-1:8.0 failed with error -71 [ 721.936909][ T3676] usb 6-1: USB disconnect, device number 98 17:50:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x8, {[@local, @main=@item_012={0x1, 0x0, 0x9, '\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:26 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xdc, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xca, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98f"]}]}, 0xdc}], 0x1}, 0x0) 17:50:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:26 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 3) 17:50:26 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0xe00) [ 722.388018][T21320] FAULT_INJECTION: forcing a failure. [ 722.388018][T21320] name failslab, interval 1, probability 0, space 0, times 0 [ 722.397343][T21322] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 722.426143][T21323] loop3: detected capacity change from 0 to 15 [ 722.430934][T21320] CPU: 0 PID: 21320 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 722.441087][T21320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.451156][T21320] Call Trace: [ 722.454445][T21320] [ 722.457380][T21320] dump_stack_lvl+0x1e3/0x2cb [ 722.462073][T21320] ? bfq_pos_tree_add_move+0x436/0x436 [ 722.467558][T21320] ? panic+0x76e/0x76e [ 722.471651][T21320] ? __might_sleep+0xc0/0xc0 [ 722.476267][T21320] should_fail+0x384/0x4b0 17:50:26 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:26 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 722.477453][T21327] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 722.480695][T21320] ? __alloc_skb+0xd2/0x590 [ 722.480724][T21320] should_failslab+0x5/0x20 [ 722.480746][T21320] kmem_cache_alloc_node+0x6c/0x340 [ 722.504735][T21320] __alloc_skb+0xd2/0x590 [ 722.509088][T21320] netlink_sendmsg+0x774/0xcd0 [ 722.513879][T21320] ? netlink_getsockopt+0x9c0/0x9c0 [ 722.519084][T21320] ? __import_iovec+0x340/0x4e0 [ 722.523939][T21320] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 722.529219][T21320] ? security_socket_sendmsg+0x9d/0xb0 [ 722.534670][T21320] ? netlink_getsockopt+0x9c0/0x9c0 [ 722.539861][T21320] ____sys_sendmsg+0x597/0x8e0 [ 722.544628][T21320] ? __sys_sendmsg_sock+0x30/0x30 [ 722.549655][T21320] __sys_sendmsg+0x27e/0x370 [ 722.554237][T21320] ? ____sys_sendmsg+0x8e0/0x8e0 [ 722.559174][T21320] ? __context_tracking_exit+0x4d/0x80 [ 722.564656][T21320] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 722.570640][T21320] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 722.576635][T21320] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 722.582610][T21320] do_syscall_64+0x2b/0x70 [ 722.587019][T21320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 722.592911][T21320] RIP: 0033:0x7f7c87a890e9 [ 722.597317][T21320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 722.616928][T21320] RSP: 002b:00007f7c88cda168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.625367][T21320] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a890e9 17:50:26 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xe7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d1"]}]}, 0xf8}], 0x1}, 0x0) [ 722.633342][T21320] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 722.641317][T21320] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.649281][T21320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.657249][T21320] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 722.665232][T21320] 17:50:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:26 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xe7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d1"]}]}, 0xf8}], 0x1}, 0x0) [ 722.723469][T21330] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 722.821970][ T3673] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 723.192169][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.203159][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.213665][ T3673] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 723.226767][ T3673] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 723.236060][ T3673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.991996][ T3673] usbhid 6-1:8.0: can't add hid device: -71 [ 723.997981][ T3673] usbhid: probe of 6-1:8.0 failed with error -71 [ 724.008222][ T3673] usb 6-1: USB disconnect, device number 99 17:50:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x8, {[@local, @main=@item_012={0x1, 0x0, 0x9, '\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:28 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x3, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:28 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 4) 17:50:28 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0xf8, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xe7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d1"]}]}, 0xf8}], 0x1}, 0x0) 17:50:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x1001) 17:50:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:28 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d"]}]}, 0x108}], 0x1}, 0x0) [ 724.469977][T21349] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 724.486521][T21348] loop3: detected capacity change from 0 to 15 [ 724.509788][T21346] FAULT_INJECTION: forcing a failure. 17:50:28 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 724.509788][T21346] name failslab, interval 1, probability 0, space 0, times 0 17:50:28 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d"]}]}, 0x108}], 0x1}, 0x0) [ 724.598893][T21358] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 724.605888][T21346] CPU: 0 PID: 21346 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 724.617072][T21346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 724.627130][T21346] Call Trace: [ 724.630406][T21346] [ 724.633327][T21346] dump_stack_lvl+0x1e3/0x2cb [ 724.638019][T21346] ? bfq_pos_tree_add_move+0x436/0x436 [ 724.643469][T21346] ? panic+0x76e/0x76e [ 724.647533][T21346] ? __might_sleep+0xc0/0xc0 [ 724.652118][T21346] should_fail+0x384/0x4b0 [ 724.656529][T21346] ? netlink_sendmsg+0x774/0xcd0 [ 724.661457][T21346] should_failslab+0x5/0x20 [ 724.665955][T21346] __kmalloc_node_track_caller+0x8c/0x3f0 [ 724.671670][T21346] ? trace_kmem_cache_alloc_node+0x2d/0xe0 [ 724.677465][T21346] ? kmem_cache_alloc_node+0x22a/0x340 [ 724.682935][T21346] ? __alloc_skb+0xd2/0x590 [ 724.687433][T21346] ? netlink_sendmsg+0x774/0xcd0 [ 724.692359][T21346] __alloc_skb+0x11a/0x590 [ 724.696768][T21346] netlink_sendmsg+0x774/0xcd0 [ 724.701531][T21346] ? netlink_getsockopt+0x9c0/0x9c0 [ 724.706717][T21346] ? __import_iovec+0x340/0x4e0 [ 724.711560][T21346] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 724.716841][T21346] ? security_socket_sendmsg+0x9d/0xb0 [ 724.722286][T21346] ? netlink_getsockopt+0x9c0/0x9c0 [ 724.727479][T21346] ____sys_sendmsg+0x597/0x8e0 [ 724.732242][T21346] ? __sys_sendmsg_sock+0x30/0x30 [ 724.737282][T21346] __sys_sendmsg+0x27e/0x370 [ 724.741890][T21346] ? ____sys_sendmsg+0x8e0/0x8e0 [ 724.746849][T21346] ? __context_tracking_exit+0x4d/0x80 [ 724.752324][T21346] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 724.758303][T21346] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 724.764276][T21346] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 724.770251][T21346] do_syscall_64+0x2b/0x70 [ 724.774659][T21346] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 724.780547][T21346] RIP: 0033:0x7f7c87a890e9 [ 724.784950][T21346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 724.804547][T21346] RSP: 002b:00007f7c88cda168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.812954][T21346] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a890e9 [ 724.820916][T21346] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 724.828875][T21346] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 724.836833][T21346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:50:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0xfdef) [ 724.844793][T21346] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 724.852770][T21346] 17:50:29 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d"]}]}, 0x108}], 0x1}, 0x0) 17:50:29 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x5, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 724.996089][T21363] loop3: detected capacity change from 0 to 15 [ 725.002019][ T3673] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 725.075922][T21366] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 725.362130][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.377241][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.387487][ T3673] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 725.400739][ T3673] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 725.410053][ T3673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.172164][ T3673] usbhid 6-1:8.0: can't add hid device: -71 [ 726.178197][ T3673] usbhid: probe of 6-1:8.0 failed with error -71 [ 726.186812][ T3673] usb 6-1: USB disconnect, device number 100 17:50:30 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x8, {[@local, @main=@item_012={0x1, 0x0, 0x9, '\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:30 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 5) 17:50:30 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xfc, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd"]}]}, 0x10c}], 0x1}, 0x0) 17:50:30 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x8800000) 17:50:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:30 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xfc, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd"]}]}, 0x10c}], 0x1}, 0x0) [ 726.649821][T21375] FAULT_INJECTION: forcing a failure. [ 726.649821][T21375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.651154][T21376] loop3: detected capacity change from 0 to 15 [ 726.673443][T21372] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 726.692514][T21375] CPU: 1 PID: 21375 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 726.701307][T21375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 726.711369][T21375] Call Trace: [ 726.714646][T21375] [ 726.717571][T21375] dump_stack_lvl+0x1e3/0x2cb [ 726.722335][T21375] ? bfq_pos_tree_add_move+0x436/0x436 [ 726.727784][T21375] ? panic+0x76e/0x76e [ 726.731854][T21375] ? __lock_acquire+0x1f80/0x1f80 [ 726.736868][T21375] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 726.742839][T21375] should_fail+0x384/0x4b0 [ 726.747252][T21375] _copy_from_iter+0x25c/0xec0 [ 726.752027][T21375] ? copy_mc_pipe_to_iter+0x460/0x460 [ 726.757400][T21375] ? trace_kmalloc_node+0x2d/0xe0 [ 726.762414][T21375] ? __kmalloc_node_track_caller+0x259/0x3f0 [ 726.768386][T21375] ? __virt_addr_valid+0x21b/0x2d0 [ 726.773532][T21375] ? check_heap_object+0x13c/0x310 [ 726.778680][T21375] ? __phys_addr_symbol+0x2b/0x70 [ 726.783695][T21375] ? 0xffffffff81000000 [ 726.787849][T21375] ? __check_object_size+0x15a/0x210 [ 726.793148][T21375] netlink_sendmsg+0x874/0xcd0 [ 726.797927][T21375] ? netlink_getsockopt+0x9c0/0x9c0 [ 726.803132][T21375] ? __import_iovec+0x340/0x4e0 [ 726.807991][T21375] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 726.813280][T21375] ? security_socket_sendmsg+0x9d/0xb0 [ 726.818735][T21375] ? netlink_getsockopt+0x9c0/0x9c0 [ 726.823926][T21375] ____sys_sendmsg+0x597/0x8e0 [ 726.828692][T21375] ? __sys_sendmsg_sock+0x30/0x30 [ 726.833720][T21375] __sys_sendmsg+0x27e/0x370 [ 726.838303][T21375] ? ____sys_sendmsg+0x8e0/0x8e0 [ 726.843237][T21375] ? __context_tracking_exit+0x4d/0x80 [ 726.848696][T21375] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 726.854677][T21375] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 726.860657][T21375] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 726.866628][T21375] do_syscall_64+0x2b/0x70 [ 726.871040][T21375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.876926][T21375] RIP: 0033:0x7f7c87a890e9 [ 726.881339][T21375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 726.900931][T21375] RSP: 002b:00007f7c88cda168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.909333][T21375] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a890e9 [ 726.917296][T21375] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 726.925256][T21375] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.933219][T21375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.941179][T21375] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 726.949156][T21375] 17:50:31 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x7, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:31 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x10c, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xfc, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd"]}]}, 0x10c}], 0x1}, 0x0) 17:50:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:31 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 6) 17:50:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x7ffff000) [ 727.060942][T21386] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.156507][T21391] FAULT_INJECTION: forcing a failure. [ 727.156507][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 727.232036][T21391] CPU: 1 PID: 21391 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 727.240856][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.250923][T21391] Call Trace: [ 727.254210][T21391] [ 727.257151][T21391] dump_stack_lvl+0x1e3/0x2cb [ 727.261854][T21391] ? bfq_pos_tree_add_move+0x436/0x436 [ 727.267332][T21391] ? panic+0x76e/0x76e [ 727.271430][T21391] ? __might_sleep+0xc0/0xc0 [ 727.274534][ T3676] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 727.276038][T21391] should_fail+0x384/0x4b0 [ 727.276077][T21391] ? genl_family_rcv_msg_attrs_parse+0xa1/0x290 [ 727.294437][T21391] should_failslab+0x5/0x20 [ 727.299049][T21391] __kmalloc+0x8b/0x370 [ 727.303219][T21391] ? cap_capable+0x1b5/0x250 [ 727.307820][T21391] ? safesetid_security_capable+0xab/0x1b0 [ 727.313717][T21391] genl_family_rcv_msg_attrs_parse+0xa1/0x290 [ 727.319814][T21391] genl_rcv_msg+0xbf9/0x1490 [ 727.324532][T21391] ? genl_bind+0x380/0x380 [ 727.328972][T21391] ? arch_stack_walk+0xf8/0x140 [ 727.333919][T21391] ? mark_lock+0x98/0x350 [ 727.338275][T21391] ? mark_lock+0x98/0x350 [ 727.342621][T21391] ? __lock_acquire+0x129a/0x1f80 [ 727.347673][T21391] ? ncsi_set_interface_nl+0x8d0/0x8d0 [ 727.353240][T21391] netlink_rcv_skb+0x1f0/0x460 [ 727.358028][T21391] ? genl_bind+0x380/0x380 [ 727.362465][T21391] ? netlink_ack+0xb40/0xb40 [ 727.367090][T21391] ? __down_read_common+0x156/0x2a0 [ 727.372316][T21391] genl_rcv+0x24/0x40 [ 727.376318][T21391] netlink_unicast+0x7e7/0x9c0 [ 727.381108][T21391] ? netlink_detachskb+0xa0/0xa0 [ 727.386062][T21391] ? check_heap_object+0x13c/0x310 [ 727.391197][T21391] ? __phys_addr_symbol+0x2b/0x70 [ 727.396241][T21391] ? 0xffffffff81000000 [ 727.400413][T21391] ? __check_object_size+0x15a/0x210 [ 727.405727][T21391] ? bpf_lsm_netlink_send+0x5/0x10 [ 727.410869][T21391] netlink_sendmsg+0x9b3/0xcd0 [ 727.415666][T21391] ? netlink_getsockopt+0x9c0/0x9c0 [ 727.420963][T21391] ? __import_iovec+0x340/0x4e0 [ 727.425850][T21391] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 727.431159][T21391] ? security_socket_sendmsg+0x9d/0xb0 [ 727.436632][T21391] ? netlink_getsockopt+0x9c0/0x9c0 [ 727.441849][T21391] ____sys_sendmsg+0x597/0x8e0 [ 727.446637][T21391] ? __sys_sendmsg_sock+0x30/0x30 [ 727.451692][T21391] __sys_sendmsg+0x27e/0x370 [ 727.456301][T21391] ? ____sys_sendmsg+0x8e0/0x8e0 [ 727.461262][T21391] ? __context_tracking_exit+0x4d/0x80 [ 727.466749][T21391] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 727.472759][T21391] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 727.478758][T21391] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 727.484760][T21391] do_syscall_64+0x2b/0x70 [ 727.489192][T21391] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.495102][T21391] RIP: 0033:0x7f7c87a890e9 [ 727.499534][T21391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 727.519149][T21391] RSP: 002b:00007f7c88cda168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.527587][T21391] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a890e9 [ 727.535577][T21391] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 727.543662][T21391] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 727.551650][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.559640][T21391] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 727.567751][T21391] [ 727.573471][T21395] loop3: detected capacity change from 0 to 15 [ 727.652247][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.675835][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.694315][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 727.715945][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 727.727978][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.492576][ T3676] usbhid 6-1:8.0: can't add hid device: -71 [ 728.498598][ T3676] usbhid: probe of 6-1:8.0 failed with error -71 [ 728.518138][ T3676] usb 6-1: USB disconnect, device number 101 17:50:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:33 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b"]}]}, 0x110}], 0x1}, 0x0) 17:50:33 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:33 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 7) 17:50:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0xfffffdef) [ 728.978414][T21406] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 728.982261][T21405] loop3: detected capacity change from 0 to 15 [ 729.018103][T21406] FAULT_INJECTION: forcing a failure. [ 729.018103][T21406] name failslab, interval 1, probability 0, space 0, times 0 17:50:33 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b"]}]}, 0x110}], 0x1}, 0x0) [ 729.031130][T21410] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:33 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x9, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 729.114131][T21406] CPU: 1 PID: 21406 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 729.122933][T21406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.133003][T21406] Call Trace: [ 729.136291][T21406] [ 729.139231][T21406] dump_stack_lvl+0x1e3/0x2cb [ 729.143933][T21406] ? bfq_pos_tree_add_move+0x436/0x436 [ 729.149411][T21406] ? panic+0x76e/0x76e [ 729.153506][T21406] ? __might_sleep+0xc0/0xc0 [ 729.158119][T21406] should_fail+0x384/0x4b0 [ 729.162561][T21406] ? __alloc_skb+0xd2/0x590 [ 729.167088][T21406] should_failslab+0x5/0x20 [ 729.171607][T21406] kmem_cache_alloc_node+0x6c/0x340 [ 729.176825][T21406] __alloc_skb+0xd2/0x590 [ 729.181172][T21406] netlink_ack+0x37a/0xb40 [ 729.185590][T21406] ? __lock_acquire+0x129a/0x1f80 [ 729.190634][T21406] ? ncsi_set_interface_nl+0x8d0/0x8d0 [ 729.196108][T21406] ? netlink_dump+0xbe0/0xbe0 [ 729.200795][T21406] netlink_rcv_skb+0x289/0x460 [ 729.205550][T21406] ? genl_bind+0x380/0x380 [ 729.209959][T21406] ? netlink_ack+0xb40/0xb40 [ 729.214552][T21406] ? __down_read_common+0x156/0x2a0 [ 729.219748][T21406] genl_rcv+0x24/0x40 [ 729.223719][T21406] netlink_unicast+0x7e7/0x9c0 [ 729.228482][T21406] ? netlink_detachskb+0xa0/0xa0 [ 729.233408][T21406] ? check_heap_object+0x13c/0x310 [ 729.238513][T21406] ? __phys_addr_symbol+0x2b/0x70 [ 729.243539][T21406] ? 0xffffffff81000000 [ 729.247683][T21406] ? __check_object_size+0x15a/0x210 [ 729.252955][T21406] ? bpf_lsm_netlink_send+0x5/0x10 [ 729.258061][T21406] netlink_sendmsg+0x9b3/0xcd0 [ 729.262833][T21406] ? netlink_getsockopt+0x9c0/0x9c0 [ 729.268021][T21406] ? __import_iovec+0x340/0x4e0 [ 729.272863][T21406] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 729.278140][T21406] ? security_socket_sendmsg+0x9d/0xb0 [ 729.283586][T21406] ? netlink_getsockopt+0x9c0/0x9c0 [ 729.288776][T21406] ____sys_sendmsg+0x597/0x8e0 [ 729.293539][T21406] ? __sys_sendmsg_sock+0x30/0x30 [ 729.298572][T21406] __sys_sendmsg+0x27e/0x370 [ 729.303152][T21406] ? ____sys_sendmsg+0x8e0/0x8e0 [ 729.308087][T21406] ? __context_tracking_exit+0x4d/0x80 [ 729.313547][T21406] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 729.319526][T21406] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 729.325495][T21406] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 729.331467][T21406] do_syscall_64+0x2b/0x70 [ 729.335873][T21406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 729.341754][T21406] RIP: 0033:0x7f7c87a890e9 [ 729.346161][T21406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.365755][T21406] RSP: 002b:00007f7c88cda168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.374160][T21406] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a890e9 [ 729.382124][T21406] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 729.390080][T21406] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.398039][T21406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.405993][T21406] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 729.413968][T21406] 17:50:33 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x110, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b"]}]}, 0x110}], 0x1}, 0x0) [ 729.561967][T21419] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 729.602073][T18660] usb 6-1: new high-speed USB device number 102 using dummy_hcd 17:50:33 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) 17:50:33 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xa, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:33 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) [ 729.790516][T21425] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 730.012139][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.041877][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.051707][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.093496][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 730.121866][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.902022][T18660] usbhid 6-1:8.0: can't add hid device: -71 [ 730.908048][T18660] usbhid: probe of 6-1:8.0 failed with error -71 [ 730.916721][T18660] usb 6-1: USB disconnect, device number 102 17:50:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:35 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xb, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:35 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) 17:50:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x7ffffffff000) 17:50:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:35 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 8) 17:50:35 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) [ 731.388642][T21434] loop3: detected capacity change from 0 to 15 [ 731.412030][T21435] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:35 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) 17:50:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0xfffffffffffffdef) [ 731.467676][T21440] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 731.499770][T21440] FAULT_INJECTION: forcing a failure. [ 731.499770][T21440] name failslab, interval 1, probability 0, space 0, times 0 [ 731.522188][T21440] CPU: 0 PID: 21440 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 731.531006][T21440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.541077][T21440] Call Trace: [ 731.544358][T21440] [ 731.547293][T21440] dump_stack_lvl+0x1e3/0x2cb [ 731.551969][T21440] ? bfq_pos_tree_add_move+0x436/0x436 [ 731.557421][T21440] ? panic+0x76e/0x76e [ 731.561484][T21440] ? __might_sleep+0xc0/0xc0 [ 731.566074][T21440] should_fail+0x384/0x4b0 [ 731.570485][T21440] ? netlink_ack+0x37a/0xb40 [ 731.575075][T21440] should_failslab+0x5/0x20 [ 731.579573][T21440] __kmalloc_node_track_caller+0x8c/0x3f0 [ 731.585299][T21440] ? trace_kmem_cache_alloc_node+0x2d/0xe0 [ 731.591112][T21440] ? kmem_cache_alloc_node+0x22a/0x340 [ 731.596574][T21440] ? __alloc_skb+0xd2/0x590 [ 731.601096][T21440] ? netlink_ack+0x37a/0xb40 [ 731.605689][T21440] __alloc_skb+0x11a/0x590 [ 731.610128][T21440] netlink_ack+0x37a/0xb40 [ 731.614551][T21440] ? __lock_acquire+0x129a/0x1f80 [ 731.619593][T21440] ? ncsi_set_interface_nl+0x8d0/0x8d0 [ 731.625063][T21440] ? netlink_dump+0xbe0/0xbe0 [ 731.629745][T21440] netlink_rcv_skb+0x289/0x460 [ 731.634502][T21440] ? genl_bind+0x380/0x380 [ 731.638927][T21440] ? netlink_ack+0xb40/0xb40 [ 731.643520][T21440] ? __down_read_common+0x156/0x2a0 [ 731.648720][T21440] genl_rcv+0x24/0x40 [ 731.652691][T21440] netlink_unicast+0x7e7/0x9c0 [ 731.657456][T21440] ? netlink_detachskb+0xa0/0xa0 [ 731.662382][T21440] ? check_heap_object+0x13c/0x310 [ 731.667484][T21440] ? __phys_addr_symbol+0x2b/0x70 [ 731.672510][T21440] ? 0xffffffff81000000 [ 731.676651][T21440] ? __check_object_size+0x15a/0x210 [ 731.681928][T21440] ? bpf_lsm_netlink_send+0x5/0x10 [ 731.687035][T21440] netlink_sendmsg+0x9b3/0xcd0 [ 731.691804][T21440] ? netlink_getsockopt+0x9c0/0x9c0 [ 731.696995][T21440] ? __import_iovec+0x340/0x4e0 [ 731.701849][T21440] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 731.707128][T21440] ? security_socket_sendmsg+0x9d/0xb0 [ 731.712577][T21440] ? netlink_getsockopt+0x9c0/0x9c0 [ 731.717765][T21440] ____sys_sendmsg+0x597/0x8e0 [ 731.722526][T21440] ? __sys_sendmsg_sock+0x30/0x30 [ 731.727551][T21440] __sys_sendmsg+0x27e/0x370 [ 731.732135][T21440] ? ____sys_sendmsg+0x8e0/0x8e0 [ 731.737071][T21440] ? __context_tracking_exit+0x4d/0x80 [ 731.742532][T21440] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 731.748521][T21440] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 731.754498][T21440] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 731.760469][T21440] do_syscall_64+0x2b/0x70 [ 731.764878][T21440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 731.770777][T21440] RIP: 0033:0x7f7c87a890e9 [ 731.775180][T21440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 731.794786][T21440] RSP: 002b:00007f7c88cda168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.803210][T21440] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a890e9 [ 731.811176][T21440] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 17:50:36 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xc, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 731.819138][T21440] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.827096][T21440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.835053][T21440] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 731.843029][T21440] 17:50:36 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) [ 731.914045][T21445] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 731.932433][T21448] loop3: detected capacity change from 0 to 15 17:50:36 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xd, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 732.041903][ T3673] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 732.109259][T21452] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 732.413484][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.424448][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.434495][ T3673] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 732.447560][ T3673] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 732.456820][ T3673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.202910][ T3673] usbhid 6-1:8.0: can't add hid device: -71 [ 733.209130][ T3673] usbhid: probe of 6-1:8.0 failed with error -71 [ 733.218265][ T3673] usb 6-1: USB disconnect, device number 103 17:50:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8001}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x40}]}}}]}, 0x68}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmmsg$inet(r5, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) r9 = socket(0x10, 0x803, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9], 0x16) 17:50:37 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 9) 17:50:37 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) 17:50:37 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xe, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 733.678852][T21460] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.690041][T21461] loop3: detected capacity change from 0 to 15 17:50:37 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) 17:50:37 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x10, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:38 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x108, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x108}], 0x1}, 0x0) [ 733.836427][T21469] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:38 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x11, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8001}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x40}]}}}]}, 0x68}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9], 0x16) 17:50:38 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 1) [ 733.999067][T21473] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 734.008797][ T3673] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 734.032967][T21476] loop3: detected capacity change from 0 to 15 [ 734.043352][T21477] FAULT_INJECTION: forcing a failure. [ 734.043352][T21477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.079064][T21477] CPU: 1 PID: 21477 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 734.087874][T21477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.097946][T21477] Call Trace: [ 734.101239][T21477] [ 734.104186][T21477] dump_stack_lvl+0x1e3/0x2cb [ 734.108885][T21477] ? bfq_pos_tree_add_move+0x436/0x436 [ 734.114363][T21477] ? panic+0x76e/0x76e [ 734.118457][T21477] ? __lock_acquire+0x1f80/0x1f80 [ 734.123508][T21477] should_fail+0x384/0x4b0 [ 734.127945][T21477] _copy_from_user+0x2b/0x160 [ 734.132648][T21477] sendmsg_copy_msghdr+0xb7/0x640 [ 734.137694][T21477] ? __copy_msghdr_from_user+0x600/0x600 [ 734.143357][T21477] __sys_sendmsg+0x24e/0x370 [ 734.147954][T21477] ? ____sys_sendmsg+0x8e0/0x8e0 [ 734.152891][T21477] ? __context_tracking_exit+0x4d/0x80 [ 734.158356][T21477] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 734.164340][T21477] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 734.170315][T21477] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 734.176290][T21477] do_syscall_64+0x2b/0x70 [ 734.180701][T21477] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 734.186600][T21477] RIP: 0033:0x7f5a582890e9 [ 734.191013][T21477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 734.210611][T21477] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.219036][T21477] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 734.227001][T21477] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 734.234968][T21477] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.242936][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.250898][T21477] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 734.258873][T21477] [ 734.307529][T21482] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 734.318286][T21482] FAULT_INJECTION: forcing a failure. [ 734.318286][T21482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.334256][T21482] CPU: 1 PID: 21482 Comm: syz-executor.2 Not tainted 5.18.0-rc3-syzkaller #0 [ 734.343054][T21482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.353129][T21482] Call Trace: [ 734.356424][T21482] [ 734.359371][T21482] dump_stack_lvl+0x1e3/0x2cb [ 734.364076][T21482] ? bfq_pos_tree_add_move+0x436/0x436 [ 734.369563][T21482] ? panic+0x76e/0x76e [ 734.373671][T21482] ? snprintf+0xd6/0x120 [ 734.377934][T21482] should_fail+0x384/0x4b0 [ 734.382384][T21482] _copy_to_user+0x2b/0x130 [ 734.386928][T21482] simple_read_from_buffer+0xd9/0x160 [ 734.392316][T21482] proc_fail_nth_read+0x1af/0x220 [ 734.397443][T21482] ? proc_fault_inject_write+0x3a0/0x3a0 [ 734.403089][T21482] ? security_file_permission+0x45f/0x5c0 [ 734.408824][T21482] ? proc_fault_inject_write+0x3a0/0x3a0 [ 734.414469][T21482] vfs_read+0x2ea/0xd10 [ 734.418639][T21482] ? __fdget_pos+0x247/0x2e0 [ 734.423236][T21482] ? kernel_read+0x1f0/0x1f0 [ 734.427852][T21482] ? mutex_lock_nested+0x17/0x20 [ 734.432798][T21482] ? __fdget_pos+0x247/0x2e0 [ 734.437399][T21482] ? ksys_read+0x77/0x2c0 [ 734.441741][T21482] ksys_read+0x19b/0x2c0 [ 734.445992][T21482] ? print_irqtrace_events+0x220/0x220 [ 734.451465][T21482] ? vfs_write+0xd40/0xd40 [ 734.455892][T21482] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 734.461886][T21482] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 734.467878][T21482] do_syscall_64+0x2b/0x70 [ 734.472308][T21482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 734.478216][T21482] RIP: 0033:0x7f7c87a3bc9c [ 734.482641][T21482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 734.502263][T21482] RSP: 002b:00007f7c88cda160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.510694][T21482] RAX: ffffffffffffffda RBX: 00007f7c87b9bf60 RCX: 00007f7c87a3bc9c [ 734.518673][T21482] RDX: 000000000000000f RSI: 00007f7c88cda1e0 RDI: 0000000000000003 [ 734.526649][T21482] RBP: 00007f7c88cda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.534637][T21482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.542626][T21482] R13: 00007ffd030ed3ef R14: 00007f7c88cda300 R15: 0000000000022000 [ 734.550641][T21482] [ 734.732413][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.743863][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.754047][ T3673] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.767170][ T3673] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 734.776903][ T3673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.522057][ T3673] usbhid 6-1:8.0: can't add hid device: -71 [ 735.528060][ T3673] usbhid: probe of 6-1:8.0 failed with error -71 [ 735.541075][ T3673] usb 6-1: USB disconnect, device number 104 17:50:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8001}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x40}]}}}]}, 0x68}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmmsg$inet(r5, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) r9 = socket(0x10, 0x803, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9], 0x16) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8001}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x40}]}}}]}, 0x68}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) socket(0x10, 0x803, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9], 0x16) (async) 17:50:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:40 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 2) 17:50:40 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:40 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x12, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 736.012283][T21490] loop3: detected capacity change from 0 to 15 [ 736.021370][T21488] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 736.065807][T21492] FAULT_INJECTION: forcing a failure. [ 736.065807][T21492] name fail_usercopy, interval 1, probability 0, space 0, times 0 17:50:40 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 736.122267][T21489] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:40 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x18, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 736.191441][T21492] CPU: 1 PID: 21492 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 736.200256][T21492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.210332][T21492] Call Trace: [ 736.213622][T21492] [ 736.216561][T21492] dump_stack_lvl+0x1e3/0x2cb [ 736.221262][T21492] ? bfq_pos_tree_add_move+0x436/0x436 [ 736.226744][T21492] ? panic+0x76e/0x76e [ 736.230832][T21492] ? __might_fault+0xb6/0x110 [ 736.230922][T21510] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 736.235513][T21492] ? __lock_acquire+0x1f80/0x1f80 [ 736.235538][T21492] ? rcu_read_lock_sched_held+0x89/0x130 [ 736.235567][T21492] should_fail+0x384/0x4b0 [ 736.235592][T21492] _copy_from_user+0x2b/0x160 [ 736.235616][T21492] iovec_from_user+0x146/0x390 [ 736.269430][T21492] __import_iovec+0x72/0x4e0 [ 736.274044][T21492] ? ksys_write+0x239/0x2c0 [ 736.278566][T21492] import_iovec+0xe6/0x120 [ 736.283001][T21492] sendmsg_copy_msghdr+0x4cf/0x640 17:50:40 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 736.288126][T21492] ? __copy_msghdr_from_user+0x600/0x600 [ 736.293785][T21492] __sys_sendmsg+0x24e/0x370 [ 736.298390][T21492] ? ____sys_sendmsg+0x8e0/0x8e0 [ 736.303351][T21492] ? __context_tracking_exit+0x4d/0x80 [ 736.308836][T21492] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 736.314859][T21492] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 736.320870][T21492] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 736.326871][T21492] do_syscall_64+0x2b/0x70 [ 736.331302][T21492] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 736.337210][T21492] RIP: 0033:0x7f5a582890e9 [ 736.341636][T21492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 736.361256][T21492] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.369691][T21492] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 736.377689][T21492] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 17:50:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x3, "7a552dc7f033a7a915c6c557c782e643"}, 0x12, 0x3) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) truncate(&(0x7f0000000080)='./file0\x00', 0xd7c4) [ 736.385676][T21492] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 736.392254][ T6] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 736.393656][T21492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.393675][T21492] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 736.393707][T21492] [ 736.427939][T21513] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:40 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 3) [ 736.452888][T21514] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:50:40 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x21, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:40 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x3, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 736.549251][T21516] loop3: detected capacity change from 0 to 15 [ 736.600012][T21520] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.643590][T21521] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 736.715840][ T3752] kworker/u4:7: attempt to access beyond end of device [ 736.715840][ T3752] loop3: rw=1, want=16, limit=15 [ 736.740277][ T3752] Buffer I/O error on dev loop3, logical block 15, lost async page write [ 736.742251][T21522] FAULT_INJECTION: forcing a failure. [ 736.742251][T21522] name failslab, interval 1, probability 0, space 0, times 0 [ 736.749694][ T3752] kworker/u4:7: attempt to access beyond end of device [ 736.749694][ T3752] loop3: rw=1, want=116, limit=15 [ 736.779217][T21522] CPU: 0 PID: 21522 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 736.788022][T21522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.798086][T21522] Call Trace: [ 736.801366][T21522] [ 736.804293][T21522] dump_stack_lvl+0x1e3/0x2cb [ 736.808969][T21522] ? bfq_pos_tree_add_move+0x436/0x436 [ 736.814427][T21522] ? panic+0x76e/0x76e [ 736.818555][T21522] ? __might_sleep+0xc0/0xc0 [ 736.823145][T21522] should_fail+0x384/0x4b0 [ 736.827556][T21522] ? __alloc_skb+0xd2/0x590 [ 736.832050][T21522] should_failslab+0x5/0x20 [ 736.836543][T21522] kmem_cache_alloc_node+0x6c/0x340 [ 736.841771][T21522] __alloc_skb+0xd2/0x590 [ 736.846098][T21522] netlink_sendmsg+0x774/0xcd0 [ 736.850860][T21522] ? netlink_getsockopt+0x9c0/0x9c0 [ 736.856043][T21522] ? __import_iovec+0x340/0x4e0 [ 736.860885][T21522] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 736.866162][T21522] ? security_socket_sendmsg+0x9d/0xb0 [ 736.871608][T21522] ? netlink_getsockopt+0x9c0/0x9c0 [ 736.876796][T21522] ____sys_sendmsg+0x597/0x8e0 [ 736.881563][T21522] ? __sys_sendmsg_sock+0x30/0x30 [ 736.886589][T21522] __sys_sendmsg+0x27e/0x370 [ 736.891171][T21522] ? ____sys_sendmsg+0x8e0/0x8e0 [ 736.896103][T21522] ? __context_tracking_exit+0x4d/0x80 [ 736.901560][T21522] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 736.907553][T21522] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 736.913549][T21522] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 736.919537][T21522] do_syscall_64+0x2b/0x70 [ 736.923954][T21522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 736.929843][T21522] RIP: 0033:0x7f5a582890e9 [ 736.934249][T21522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 736.953844][T21522] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.962250][T21522] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 736.970246][T21522] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 736.978206][T21522] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 736.986163][T21522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.994118][T21522] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 737.002088][T21522] [ 737.132572][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.143553][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.153817][ T6] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 737.166863][ T6] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 737.176310][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.655137][ T6] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0043/input/input60 [ 737.670882][ T6] cm6533_jd 0003:0D8C:0022.0043: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 737.857791][T18660] usb 6-1: USB disconnect, device number 105 17:50:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:42 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x25, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:42 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x3, "7a552dc7f033a7a915c6c557c782e643"}, 0x12, 0x3) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) truncate(&(0x7f0000000080)='./file0\x00', 0xd7c4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x3, "7a552dc7f033a7a915c6c557c782e643"}, 0x12, 0x3) (async) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (async) truncate(&(0x7f0000000080)='./file0\x00', 0xd7c4) (async) 17:50:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:42 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 4) [ 738.390582][T21528] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 738.404444][T21530] loop3: detected capacity change from 0 to 15 17:50:42 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x48, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:42 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x5, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 738.445275][T21532] FAULT_INJECTION: forcing a failure. [ 738.445275][T21532] name failslab, interval 1, probability 0, space 0, times 0 [ 738.495771][T21532] CPU: 0 PID: 21532 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 738.504582][T21532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.514651][T21532] Call Trace: [ 738.517940][T21532] [ 738.520884][T21532] dump_stack_lvl+0x1e3/0x2cb [ 738.525586][T21532] ? bfq_pos_tree_add_move+0x436/0x436 [ 738.531060][T21532] ? panic+0x76e/0x76e [ 738.535151][T21532] ? __might_sleep+0xc0/0xc0 [ 738.539767][T21532] should_fail+0x384/0x4b0 [ 738.544202][T21532] ? netlink_sendmsg+0x774/0xcd0 [ 738.549152][T21532] should_failslab+0x5/0x20 [ 738.553672][T21532] __kmalloc_node_track_caller+0x8c/0x3f0 [ 738.559405][T21532] ? trace_kmem_cache_alloc_node+0x2d/0xe0 [ 738.565226][T21532] ? kmem_cache_alloc_node+0x22a/0x340 [ 738.570744][T21532] ? __alloc_skb+0xd2/0x590 [ 738.575275][T21532] ? netlink_sendmsg+0x774/0xcd0 [ 738.580230][T21532] __alloc_skb+0x11a/0x590 [ 738.584683][T21532] netlink_sendmsg+0x774/0xcd0 [ 738.589475][T21532] ? netlink_getsockopt+0x9c0/0x9c0 [ 738.594685][T21532] ? __import_iovec+0x340/0x4e0 [ 738.599573][T21532] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 738.604869][T21532] ? security_socket_sendmsg+0x9d/0xb0 [ 738.610326][T21532] ? netlink_getsockopt+0x9c0/0x9c0 [ 738.615520][T21532] ____sys_sendmsg+0x597/0x8e0 [ 738.620375][T21532] ? __sys_sendmsg_sock+0x30/0x30 [ 738.625517][T21532] __sys_sendmsg+0x27e/0x370 [ 738.630112][T21532] ? ____sys_sendmsg+0x8e0/0x8e0 [ 738.635057][T21532] ? __context_tracking_exit+0x4d/0x80 [ 738.640525][T21532] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 738.646511][T21532] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 738.652484][T21532] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 738.658456][T21532] do_syscall_64+0x2b/0x70 [ 738.662867][T21532] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 738.668752][T21532] RIP: 0033:0x7f5a582890e9 [ 738.673160][T21532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:50:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x3, "7a552dc7f033a7a915c6c557c782e643"}, 0x12, 0x3) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) truncate(&(0x7f0000000080)='./file0\x00', 0xd7c4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x3, "7a552dc7f033a7a915c6c557c782e643"}, 0x12, 0x3) (async) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (async) truncate(&(0x7f0000000080)='./file0\x00', 0xd7c4) (async) [ 738.692754][T21532] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.701166][T21532] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 738.709125][T21532] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 738.717086][T21532] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.725043][T21532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.733001][T21532] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 738.740975][T21532] 17:50:42 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4c, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 738.769693][ T5194] kworker/u4:8: attempt to access beyond end of device [ 738.769693][ T5194] loop3: rw=1, want=16, limit=15 17:50:43 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:43 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 5) [ 738.811936][T18660] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 738.817593][ T5194] Buffer I/O error on dev loop3, logical block 15, lost async page write [ 738.842243][ T5194] kworker/u4:8: attempt to access beyond end of device [ 738.842243][ T5194] loop3: rw=1, want=112, limit=15 [ 738.899553][T21550] FAULT_INJECTION: forcing a failure. [ 738.899553][T21550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.931009][T21550] CPU: 1 PID: 21550 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 738.939812][T21550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.949885][T21550] Call Trace: [ 738.953172][T21550] [ 738.956108][T21550] dump_stack_lvl+0x1e3/0x2cb [ 738.960799][T21550] ? bfq_pos_tree_add_move+0x436/0x436 [ 738.966269][T21550] ? panic+0x76e/0x76e [ 738.970359][T21550] ? __lock_acquire+0x1f80/0x1f80 [ 738.975407][T21550] should_fail+0x384/0x4b0 [ 738.979837][T21550] _copy_from_iter+0x25c/0xec0 [ 738.984622][T21550] ? copy_mc_pipe_to_iter+0x460/0x460 [ 738.989999][T21550] ? trace_kmalloc_node+0x2d/0xe0 [ 738.995033][T21550] ? __kmalloc_node_track_caller+0x259/0x3f0 [ 739.001019][T21550] ? __virt_addr_valid+0x21b/0x2d0 [ 739.006147][T21550] ? check_heap_object+0x13c/0x310 [ 739.011272][T21550] ? __phys_addr_symbol+0x2b/0x70 [ 739.016307][T21550] ? 0xffffffff81000000 [ 739.020461][T21550] ? __check_object_size+0x15a/0x210 [ 739.025764][T21550] netlink_sendmsg+0x874/0xcd0 [ 739.030550][T21550] ? netlink_getsockopt+0x9c0/0x9c0 [ 739.035755][T21550] ? __import_iovec+0x340/0x4e0 [ 739.040622][T21550] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 739.045925][T21550] ? security_socket_sendmsg+0x9d/0xb0 [ 739.051403][T21550] ? netlink_getsockopt+0x9c0/0x9c0 [ 739.056615][T21550] ____sys_sendmsg+0x597/0x8e0 [ 739.061396][T21550] ? __sys_sendmsg_sock+0x30/0x30 [ 739.066445][T21550] __sys_sendmsg+0x27e/0x370 [ 739.071052][T21550] ? ____sys_sendmsg+0x8e0/0x8e0 [ 739.076010][T21550] ? __context_tracking_exit+0x4d/0x80 [ 739.081488][T21550] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 739.087490][T21550] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 739.093482][T21550] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 739.099474][T21550] do_syscall_64+0x2b/0x70 [ 739.103902][T21550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 739.109804][T21550] RIP: 0033:0x7f5a582890e9 [ 739.114224][T21550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 739.133842][T21550] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.142278][T21550] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 739.150351][T21550] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 739.158333][T21550] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 739.166311][T21550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.174288][T21550] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 739.182284][T21550] [ 739.250125][T21553] loop3: detected capacity change from 0 to 15 [ 739.309963][ T5194] kworker/u4:8: attempt to access beyond end of device [ 739.309963][ T5194] loop3: rw=1, want=16, limit=15 [ 739.333816][ T5194] Buffer I/O error on dev loop3, logical block 15, lost async page write [ 739.343067][ T5194] kworker/u4:8: attempt to access beyond end of device [ 739.343067][ T5194] loop3: rw=1, want=116, limit=15 [ 739.472128][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.483130][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.492931][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 739.505743][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 739.514833][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.006071][T18660] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0044/input/input61 [ 740.036139][T18660] cm6533_jd 0003:0D8C:0022.0044: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 740.205916][ T6] usb 6-1: USB disconnect, device number 106 17:50:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:44 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x60, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:44 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x7, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:44 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 6) 17:50:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getpeername$unix(r1, &(0x7f0000000240), &(0x7f0000000340)=0x6e) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=@bridge_newvlan={0x78, 0x70, 0x1, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x873, 0x480) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8001}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x40}]}}}]}, 0x68}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="d9a4eb0a760f818e0a88bcbafa3631af73c38bda018eb030f78184570acee865ed7582cd67e5843912ec7ca145f3dd4a03becacc8a293db7f152715a62427f8b9b3801c7d6311446c9b4c919458d462d991ba14c29297fa288f6baad5b02f39ae350cd540af77e70953ff476641635f39fb35b895a518f812deb765a2b184e50", @ANYRES16=r2, @ANYRES16=r4], 0x9) [ 740.737501][T21565] loop3: detected capacity change from 0 to 15 [ 740.743427][T21566] __nla_validate_parse: 5 callbacks suppressed [ 740.743444][T21566] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:50:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getpeername$unix(r1, &(0x7f0000000240), &(0x7f0000000340)=0x6e) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=@bridge_newvlan={0x78, 0x70, 0x1, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) r7 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x873, 0x480) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8001}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x40}]}}}]}, 0x68}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="d9a4eb0a760f818e0a88bcbafa3631af73c38bda018eb030f78184570acee865ed7582cd67e5843912ec7ca145f3dd4a03becacc8a293db7f152715a62427f8b9b3801c7d6311446c9b4c919458d462d991ba14c29297fa288f6baad5b02f39ae350cd540af77e70953ff476641635f39fb35b895a518f812deb765a2b184e50", @ANYRES16=r2, @ANYRES16=r4], 0x9) [ 740.824062][T21568] FAULT_INJECTION: forcing a failure. [ 740.824062][T21568] name failslab, interval 1, probability 0, space 0, times 0 [ 740.846273][T21568] CPU: 0 PID: 21568 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 740.855077][T21568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.865173][T21568] Call Trace: [ 740.868455][T21568] [ 740.871393][T21568] dump_stack_lvl+0x1e3/0x2cb [ 740.876089][T21568] ? bfq_pos_tree_add_move+0x436/0x436 [ 740.881561][T21568] ? panic+0x76e/0x76e [ 740.885647][T21568] ? __might_sleep+0xc0/0xc0 [ 740.890257][T21568] should_fail+0x384/0x4b0 [ 740.894690][T21568] ? genl_family_rcv_msg_attrs_parse+0xa1/0x290 [ 740.900938][T21568] should_failslab+0x5/0x20 [ 740.905450][T21568] __kmalloc+0x8b/0x370 [ 740.909616][T21568] ? cap_capable+0x1b5/0x250 [ 740.914211][T21568] ? safesetid_security_capable+0xab/0x1b0 [ 740.920012][T21568] genl_family_rcv_msg_attrs_parse+0xa1/0x290 [ 740.926116][T21568] genl_rcv_msg+0xbf9/0x1490 [ 740.930703][T21568] ? genl_bind+0x380/0x380 [ 740.935115][T21568] ? arch_stack_walk+0xf8/0x140 [ 740.939957][T21568] ? mark_lock+0x98/0x350 [ 740.944284][T21568] ? mark_lock+0x98/0x350 [ 740.948606][T21568] ? __lock_acquire+0x129a/0x1f80 [ 740.953624][T21568] ? hulusb_set_txpower+0x160/0x160 [ 740.958950][T21568] netlink_rcv_skb+0x1f0/0x460 [ 740.963703][T21568] ? genl_bind+0x380/0x380 [ 740.968109][T21568] ? netlink_ack+0xb40/0xb40 [ 740.972694][T21568] ? __down_read_common+0x156/0x2a0 [ 740.977887][T21568] genl_rcv+0x24/0x40 [ 740.981854][T21568] netlink_unicast+0x7e7/0x9c0 [ 740.986612][T21568] ? netlink_detachskb+0xa0/0xa0 [ 740.991533][T21568] ? check_heap_object+0x13c/0x310 [ 740.996635][T21568] ? __phys_addr_symbol+0x2b/0x70 [ 741.001738][T21568] ? 0xffffffff81000000 [ 741.005877][T21568] ? __check_object_size+0x15a/0x210 [ 741.011151][T21568] ? bpf_lsm_netlink_send+0x5/0x10 [ 741.016255][T21568] netlink_sendmsg+0x9b3/0xcd0 [ 741.021020][T21568] ? netlink_getsockopt+0x9c0/0x9c0 [ 741.026206][T21568] ? __import_iovec+0x340/0x4e0 [ 741.031050][T21568] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 741.036418][T21568] ? security_socket_sendmsg+0x9d/0xb0 [ 741.041867][T21568] ? netlink_getsockopt+0x9c0/0x9c0 [ 741.047084][T21568] ____sys_sendmsg+0x597/0x8e0 [ 741.051845][T21568] ? __sys_sendmsg_sock+0x30/0x30 [ 741.056881][T21568] __sys_sendmsg+0x27e/0x370 [ 741.061459][T21568] ? ____sys_sendmsg+0x8e0/0x8e0 [ 741.066392][T21568] ? __context_tracking_exit+0x4d/0x80 [ 741.071853][T21568] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 741.077829][T21568] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 741.083805][T21568] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 741.089803][T21568] do_syscall_64+0x2b/0x70 [ 741.094312][T21568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 741.100204][T21568] RIP: 0033:0x7f5a582890e9 [ 741.104617][T21568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.124224][T21568] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.132645][T21568] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 741.140604][T21568] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 741.148559][T21568] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 741.156520][T21568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.164475][T21568] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 741.172450][T21568] 17:50:45 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:45 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x68, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:45 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 7) [ 741.179486][T21567] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 741.205663][T21573] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:50:45 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x9, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 741.303453][T21577] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.314144][T21577] FAULT_INJECTION: forcing a failure. [ 741.314144][T21577] name failslab, interval 1, probability 0, space 0, times 0 [ 741.328164][T21579] loop3: detected capacity change from 0 to 15 [ 741.341926][T18660] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 741.353000][T21577] CPU: 1 PID: 21577 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 741.361785][T21577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.371847][T21577] Call Trace: [ 741.375131][T21577] [ 741.378066][T21577] dump_stack_lvl+0x1e3/0x2cb [ 741.383123][T21577] ? bfq_pos_tree_add_move+0x436/0x436 [ 741.388596][T21577] ? panic+0x76e/0x76e [ 741.392668][T21577] ? __might_sleep+0xc0/0xc0 [ 741.397257][T21577] should_fail+0x384/0x4b0 [ 741.401669][T21577] ? wpan_phy_new+0x26/0x250 [ 741.406412][T21577] should_failslab+0x5/0x20 [ 741.410906][T21577] __kmalloc+0x8b/0x370 [ 741.415062][T21577] wpan_phy_new+0x26/0x250 [ 741.419472][T21577] ieee802154_alloc_hw+0x121/0x600 [ 741.424634][T21577] hwsim_add_one+0x40/0x10f0 [ 741.429215][T21577] ? genl_family_rcv_msg_attrs_parse+0x213/0x290 [ 741.435540][T21577] genl_rcv_msg+0xfbc/0x1490 [ 741.440125][T21577] ? genl_bind+0x380/0x380 [ 741.444531][T21577] ? arch_stack_walk+0xf8/0x140 [ 741.449383][T21577] ? mark_lock+0x98/0x350 [ 741.453705][T21577] ? __lock_acquire+0x129a/0x1f80 [ 741.458721][T21577] ? hulusb_set_txpower+0x160/0x160 [ 741.463920][T21577] netlink_rcv_skb+0x1f0/0x460 [ 741.468675][T21577] ? genl_bind+0x380/0x380 [ 741.473172][T21577] ? netlink_ack+0xb40/0xb40 [ 741.477762][T21577] ? __down_read_common+0x156/0x2a0 [ 741.482971][T21577] genl_rcv+0x24/0x40 [ 741.486942][T21577] netlink_unicast+0x7e7/0x9c0 [ 741.491701][T21577] ? netlink_detachskb+0xa0/0xa0 [ 741.496628][T21577] ? check_heap_object+0x13c/0x310 [ 741.501735][T21577] ? __phys_addr_symbol+0x2b/0x70 [ 741.506748][T21577] ? 0xffffffff81000000 [ 741.510885][T21577] ? __check_object_size+0x15a/0x210 [ 741.516164][T21577] ? bpf_lsm_netlink_send+0x5/0x10 [ 741.521270][T21577] netlink_sendmsg+0x9b3/0xcd0 [ 741.526035][T21577] ? netlink_getsockopt+0x9c0/0x9c0 [ 741.531224][T21577] ? __import_iovec+0x340/0x4e0 [ 741.536069][T21577] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 741.541348][T21577] ? security_socket_sendmsg+0x9d/0xb0 [ 741.546793][T21577] ? netlink_getsockopt+0x9c0/0x9c0 [ 741.551978][T21577] ____sys_sendmsg+0x597/0x8e0 [ 741.556741][T21577] ? __sys_sendmsg_sock+0x30/0x30 [ 741.561767][T21577] __sys_sendmsg+0x27e/0x370 [ 741.566348][T21577] ? ____sys_sendmsg+0x8e0/0x8e0 [ 741.571295][T21577] ? __context_tracking_exit+0x4d/0x80 [ 741.576768][T21577] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 741.582831][T21577] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 741.588800][T21577] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 741.594767][T21577] do_syscall_64+0x2b/0x70 [ 741.599171][T21577] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 741.605082][T21577] RIP: 0033:0x7f5a582890e9 [ 741.609506][T21577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.629097][T21577] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.637499][T21577] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 741.645473][T21577] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 741.653516][T21577] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 741.661472][T21577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.669442][T21577] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 741.677436][T21577] [ 741.687264][T21577] failure to allocate master IEEE802.15.4 device 17:50:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getpeername$unix(r1, &(0x7f0000000240), &(0x7f0000000340)=0x6e) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=@bridge_newvlan={0x78, 0x70, 0x1, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) r7 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x873, 0x480) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8001}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x40}]}}}]}, 0x68}}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="d9a4eb0a760f818e0a88bcbafa3631af73c38bda018eb030f78184570acee865ed7582cd67e5843912ec7ca145f3dd4a03becacc8a293db7f152715a62427f8b9b3801c7d6311446c9b4c919458d462d991ba14c29297fa288f6baad5b02f39ae350cd540af77e70953ff476641635f39fb35b895a518f812deb765a2b184e50", @ANYRES16=r2, @ANYRES16=r4], 0x9) [ 741.697084][T21578] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 741.742023][T21581] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 741.795018][T21586] loop3: detected capacity change from 0 to 15 [ 742.032158][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.043420][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.053575][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 742.066513][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 742.075690][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.575054][T18660] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0045/input/input62 [ 742.598183][T18660] cm6533_jd 0003:0D8C:0022.0045: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 742.775283][ T3676] usb 6-1: USB disconnect, device number 107 17:50:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:47 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 8) 17:50:47 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6c, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:47 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xa, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x93, 0x7, &(0x7f0000001540)=[{&(0x7f0000000100)="f6ce6e822d3f813487c2a9cf6065a58ac8317dc0c93f0f4a6b9506807f7ec0e13e19acda461c7a764076e6ed29af31d28c9a6ffd96668582969969794fd5ff573e048fd95806f35421bfbeda32fc3841891d0a07d6146c314a352b323c9ba8adc05dd8b6d8af7b85587e02350d321494b28387f5de15e2bf", 0x78, 0x800}, {&(0x7f0000000340)="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", 0x1000, 0x9}, {&(0x7f0000000180)="556e044b65c8b794ca3ae35969022741da054a21fa75372e1c0107296621150d24bae3efe38ccf3083aa17b95c5e446644b8cc364623b1295e24c8d155eee6071a2ef221cadce01ee8c79ae15d627cdeee3790865fc8534cfae5a2d6bc377246f3a0b0b9d9db2dc598c7b2700ff76bd131fc121280fba2ee84c5", 0x7a}, {&(0x7f0000000240)="7c6b9f96be473e81aed0e0aa2635d9a8c4d18b3f545b5c387fec0d8732495ea4fa301fcca51e8a90872efcf790ed92402849de781b7132935a6f51f458fd2ffbde5103c90d30591b19ae89f9305a531b0f3b6e37338429ff2dc25b9b2db67d02d8c0", 0x62, 0x1}, {&(0x7f0000001340)="ad5f3935d168c0d3696ebf3becda6312901b3a041d66e803728a9d271785729cf5632defb1b4fa483a8eb4e65cfde022be1df8430ba50bfc0411fec325be510cdf63c823f6b0e51015dae6e940f6dbf747acd52ab843a9bc3592297a96138a00440598490d97eb0b6b7333d10ef908eb804ef0421a1a219d8f1f9c41fb126d13ebc427d8d0aee6258289789c0b6f80dfebb1383a9c20ab094902f545691132", 0x9f, 0x6}, {&(0x7f0000001400)="fb2b549a1ea15b2024e2b801956f253bc3786faafb262ab2972440df9b72aa46c5779cfaca16d078911f0bad77825b50890bfff9ffea29381f1d715c9fb417cdcbab1c0983fe76cb25ab2db2f58a8fc892f211732fe6be1d758e1f69d3e14f634b13b3cd78ba1ca51b5a0fcf74c75f7190e0ee7607cf63c1669dc68c91f39a47680ea1ce85765d319f39fbf0e72c3a59ee20fcaf30ab18ecd71f94a9ff6f47aa05a7a867b646c41d965f9460701a84e46ae2455224f37ca2190cc2b40317b0ed02145f54b4374b4f96fddc8d80eeb711e350d32308fe0cf15372eea78fca47653b1b12c64db943023bd33400d24b92b49dca", 0xf2, 0x2}, {&(0x7f0000001500)="dd3d30177df26957f22dfa2b546931e28724fdafbbe7a513c50735b80668f502824534e084a7b6c2", 0x28, 0x100000001}], 0x1, &(0x7f0000001600)=ANY=[@ANYBLOB='autocell,dyn,flock=write,flock=write,flock=strict,source=vfDt\x00,flock=local,obj_role=),\x00']) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mkdir(&(0x7f0000001680)='./file1\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:50:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) [ 743.329688][T21598] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.331511][T21596] loop3: detected capacity change from 0 to 15 [ 743.376215][T21600] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 743.397010][T21597] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. 17:50:47 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x74, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:47 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xb, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 743.421964][T21597] FAULT_INJECTION: forcing a failure. [ 743.421964][T21597] name failslab, interval 1, probability 0, space 0, times 0 [ 743.464760][T21597] CPU: 1 PID: 21597 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 743.473589][T21597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.483664][T21597] Call Trace: [ 743.486949][T21597] [ 743.489896][T21597] dump_stack_lvl+0x1e3/0x2cb [ 743.494596][T21597] ? bfq_pos_tree_add_move+0x436/0x436 [ 743.500072][T21597] ? panic+0x76e/0x76e [ 743.504245][T21597] ? __might_sleep+0xc0/0xc0 [ 743.508837][T21597] ? vsnprintf+0x1c35/0x1ce0 [ 743.513442][T21597] should_fail+0x384/0x4b0 [ 743.517874][T21597] ? kobject_set_name_vargs+0x5d/0x110 [ 743.523347][T21597] should_failslab+0x5/0x20 [ 743.527868][T21597] __kmalloc_track_caller+0x89/0x350 [ 743.533165][T21597] ? __debug_object_init+0x847/0x1860 [ 743.538555][T21597] kvasprintf+0xd6/0x180 [ 743.542872][T21597] ? bust_spinlocks+0xd0/0xd0 [ 743.547562][T21597] ? memset+0x1f/0x40 [ 743.551568][T21597] ? kvasprintf_const+0x4d/0x170 [ 743.556524][T21597] kobject_set_name_vargs+0x5d/0x110 [ 743.561821][T21597] dev_set_name+0xd1/0x120 [ 743.566325][T21597] ? get_device+0x30/0x30 [ 743.570667][T21597] ? __init_waitqueue_head+0x65/0xc0 [ 743.575965][T21597] ? device_initialize+0x21b/0x3f0 [ 743.581090][T21597] wpan_phy_new+0x124/0x250 [ 743.585605][T21597] ieee802154_alloc_hw+0x121/0x600 [ 743.590729][T21597] hwsim_add_one+0x40/0x10f0 [ 743.595335][T21597] ? genl_family_rcv_msg_attrs_parse+0x213/0x290 [ 743.601689][T21597] genl_rcv_msg+0xfbc/0x1490 [ 743.606303][T21597] ? genl_bind+0x380/0x380 [ 743.610726][T21597] ? arch_stack_walk+0xf8/0x140 [ 743.615610][T21597] ? mark_lock+0x98/0x350 [ 743.620106][T21597] ? __lock_acquire+0x129a/0x1f80 [ 743.625167][T21597] ? hulusb_set_txpower+0x160/0x160 [ 743.626770][ T3676] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 743.630398][T21597] netlink_rcv_skb+0x1f0/0x460 [ 743.642766][T21597] ? genl_bind+0x380/0x380 [ 743.647203][T21597] ? netlink_ack+0xb40/0xb40 [ 743.651817][T21597] ? __down_read_common+0x156/0x2a0 [ 743.657035][T21597] genl_rcv+0x24/0x40 [ 743.661028][T21597] netlink_unicast+0x7e7/0x9c0 [ 743.665812][T21597] ? netlink_detachskb+0xa0/0xa0 [ 743.670762][T21597] ? check_heap_object+0x13c/0x310 [ 743.675892][T21597] ? __phys_addr_symbol+0x2b/0x70 [ 743.680928][T21597] ? 0xffffffff81000000 [ 743.685087][T21597] ? __check_object_size+0x15a/0x210 [ 743.690470][T21597] ? bpf_lsm_netlink_send+0x5/0x10 [ 743.695604][T21597] netlink_sendmsg+0x9b3/0xcd0 [ 743.700396][T21597] ? netlink_getsockopt+0x9c0/0x9c0 [ 743.705601][T21597] ? __import_iovec+0x340/0x4e0 [ 743.710468][T21597] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 743.715771][T21597] ? security_socket_sendmsg+0x9d/0xb0 [ 743.721238][T21597] ? netlink_getsockopt+0x9c0/0x9c0 [ 743.726449][T21597] ____sys_sendmsg+0x597/0x8e0 [ 743.731234][T21597] ? __sys_sendmsg_sock+0x30/0x30 [ 743.736287][T21597] __sys_sendmsg+0x27e/0x370 [ 743.740889][T21597] ? ____sys_sendmsg+0x8e0/0x8e0 [ 743.745857][T21597] ? __context_tracking_exit+0x4d/0x80 [ 743.751356][T21597] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 743.757371][T21597] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 743.763374][T21597] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 743.769368][T21597] do_syscall_64+0x2b/0x70 [ 743.773803][T21597] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 743.779709][T21597] RIP: 0033:0x7f5a582890e9 [ 743.784150][T21597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 743.803762][T21597] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.812199][T21597] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 743.820179][T21597] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 17:50:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x93, 0x7, &(0x7f0000001540)=[{&(0x7f0000000100)="f6ce6e822d3f813487c2a9cf6065a58ac8317dc0c93f0f4a6b9506807f7ec0e13e19acda461c7a764076e6ed29af31d28c9a6ffd96668582969969794fd5ff573e048fd95806f35421bfbeda32fc3841891d0a07d6146c314a352b323c9ba8adc05dd8b6d8af7b85587e02350d321494b28387f5de15e2bf", 0x78, 0x800}, {&(0x7f0000000340)="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", 0x1000, 0x9}, {&(0x7f0000000180)="556e044b65c8b794ca3ae35969022741da054a21fa75372e1c0107296621150d24bae3efe38ccf3083aa17b95c5e446644b8cc364623b1295e24c8d155eee6071a2ef221cadce01ee8c79ae15d627cdeee3790865fc8534cfae5a2d6bc377246f3a0b0b9d9db2dc598c7b2700ff76bd131fc121280fba2ee84c5", 0x7a}, {&(0x7f0000000240)="7c6b9f96be473e81aed0e0aa2635d9a8c4d18b3f545b5c387fec0d8732495ea4fa301fcca51e8a90872efcf790ed92402849de781b7132935a6f51f458fd2ffbde5103c90d30591b19ae89f9305a531b0f3b6e37338429ff2dc25b9b2db67d02d8c0", 0x62, 0x1}, {&(0x7f0000001340)="ad5f3935d168c0d3696ebf3becda6312901b3a041d66e803728a9d271785729cf5632defb1b4fa483a8eb4e65cfde022be1df8430ba50bfc0411fec325be510cdf63c823f6b0e51015dae6e940f6dbf747acd52ab843a9bc3592297a96138a00440598490d97eb0b6b7333d10ef908eb804ef0421a1a219d8f1f9c41fb126d13ebc427d8d0aee6258289789c0b6f80dfebb1383a9c20ab094902f545691132", 0x9f, 0x6}, {&(0x7f0000001400)="fb2b549a1ea15b2024e2b801956f253bc3786faafb262ab2972440df9b72aa46c5779cfaca16d078911f0bad77825b50890bfff9ffea29381f1d715c9fb417cdcbab1c0983fe76cb25ab2db2f58a8fc892f211732fe6be1d758e1f69d3e14f634b13b3cd78ba1ca51b5a0fcf74c75f7190e0ee7607cf63c1669dc68c91f39a47680ea1ce85765d319f39fbf0e72c3a59ee20fcaf30ab18ecd71f94a9ff6f47aa05a7a867b646c41d965f9460701a84e46ae2455224f37ca2190cc2b40317b0ed02145f54b4374b4f96fddc8d80eeb711e350d32308fe0cf15372eea78fca47653b1b12c64db943023bd33400d24b92b49dca", 0xf2, 0x2}, {&(0x7f0000001500)="dd3d30177df26957f22dfa2b546931e28724fdafbbe7a513c50735b80668f502824534e084a7b6c2", 0x28, 0x100000001}], 0x1, &(0x7f0000001600)=ANY=[@ANYBLOB='autocell,dyn,flock=write,flock=write,flock=strict,source=vfDt\x00,flock=local,obj_role=),\x00']) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) mkdir(&(0x7f0000001680)='./file1\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:50:48 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x7a, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 743.828153][T21597] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.836131][T21597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.844109][T21597] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 743.852109][T21597] 17:50:48 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 9) 17:50:48 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x300, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 743.895303][T21608] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.965316][T21614] loop3: detected capacity change from 0 to 264192 [ 743.987000][T21616] FAULT_INJECTION: forcing a failure. [ 743.987000][T21616] name failslab, interval 1, probability 0, space 0, times 0 [ 744.001417][T21614] kAFS: unparsable volume name [ 744.012133][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.032448][T21616] CPU: 1 PID: 21616 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 744.041248][T21616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.045728][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.051325][T21616] Call Trace: [ 744.051337][T21616] [ 744.051345][T21616] dump_stack_lvl+0x1e3/0x2cb [ 744.051377][T21616] ? bfq_pos_tree_add_move+0x436/0x436 [ 744.077391][T21616] ? panic+0x76e/0x76e [ 744.078714][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 744.081479][T21616] ? memset+0x1f/0x40 [ 744.081514][T21616] should_fail+0x384/0x4b0 [ 744.102647][T21616] ? hwsim_add_one+0x339/0x10f0 [ 744.107515][T21616] should_failslab+0x5/0x20 [ 744.112045][T21616] kmem_cache_alloc_trace+0x68/0x310 [ 744.117358][T21616] hwsim_add_one+0x339/0x10f0 [ 744.122057][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 744.122057][T21616] ? genl_family_rcv_msg_attrs_parse+0x213/0x290 [ 744.122094][T21616] genl_rcv_msg+0xfbc/0x1490 [ 744.141996][T21616] ? genl_bind+0x380/0x380 [ 744.146413][T21616] ? arch_stack_walk+0xf8/0x140 [ 744.151271][T21616] ? mark_lock+0x98/0x350 [ 744.155591][T21616] ? __lock_acquire+0x129a/0x1f80 [ 744.160610][T21616] ? hulusb_set_txpower+0x160/0x160 [ 744.165812][T21616] netlink_rcv_skb+0x1f0/0x460 [ 744.170570][T21616] ? genl_bind+0x380/0x380 [ 744.174980][T21616] ? netlink_ack+0xb40/0xb40 [ 744.179571][T21616] ? __down_read_common+0x156/0x2a0 [ 744.184763][T21616] genl_rcv+0x24/0x40 [ 744.188739][T21616] netlink_unicast+0x7e7/0x9c0 [ 744.193500][T21616] ? netlink_detachskb+0xa0/0xa0 [ 744.198427][T21616] ? check_heap_object+0x13c/0x310 [ 744.203530][T21616] ? __phys_addr_symbol+0x2b/0x70 [ 744.208543][T21616] ? 0xffffffff81000000 [ 744.212683][T21616] ? __check_object_size+0x15a/0x210 [ 744.217959][T21616] ? bpf_lsm_netlink_send+0x5/0x10 [ 744.223068][T21616] netlink_sendmsg+0x9b3/0xcd0 [ 744.227852][T21616] ? netlink_getsockopt+0x9c0/0x9c0 [ 744.233037][T21616] ? __import_iovec+0x340/0x4e0 [ 744.237881][T21616] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 744.243154][T21616] ? security_socket_sendmsg+0x9d/0xb0 [ 744.248599][T21616] ? netlink_getsockopt+0x9c0/0x9c0 [ 744.253787][T21616] ____sys_sendmsg+0x597/0x8e0 [ 744.258549][T21616] ? __sys_sendmsg_sock+0x30/0x30 [ 744.263573][T21616] __sys_sendmsg+0x27e/0x370 [ 744.268151][T21616] ? ____sys_sendmsg+0x8e0/0x8e0 [ 744.273087][T21616] ? __context_tracking_exit+0x4d/0x80 [ 744.278548][T21616] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 744.284524][T21616] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 744.290494][T21616] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 744.296466][T21616] do_syscall_64+0x2b/0x70 [ 744.300872][T21616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 744.306756][T21616] RIP: 0033:0x7f5a582890e9 [ 744.311161][T21616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 744.330760][T21616] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.339183][T21616] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 744.347172][T21616] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 744.355155][T21616] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.363132][T21616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.371108][T21616] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 744.379095][T21616] [ 744.383462][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.884023][ T3676] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0046/input/input63 [ 744.923525][ T3676] cm6533_jd 0003:0D8C:0022.0046: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 745.102433][ T3746] usb 6-1: USB disconnect, device number 108 17:50:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:49 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xc, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:49 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x500, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:49 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 10) 17:50:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x93, 0x7, &(0x7f0000001540)=[{&(0x7f0000000100)="f6ce6e822d3f813487c2a9cf6065a58ac8317dc0c93f0f4a6b9506807f7ec0e13e19acda461c7a764076e6ed29af31d28c9a6ffd96668582969969794fd5ff573e048fd95806f35421bfbeda32fc3841891d0a07d6146c314a352b323c9ba8adc05dd8b6d8af7b85587e02350d321494b28387f5de15e2bf", 0x78, 0x800}, {&(0x7f0000000340)="11a92de03c195326d7eeed719c6e2d27ebeca6a5509c109bd54dd3fd6b3576bbfc9ec8acefd909fd1b31acd39d026ec7d689cdb46ef4a1bc76fad1be448a55f5e312e55554513f8f4ae9f5f2fd7bfcf0efbdae7235f51e3aa3b80018606cc8b59979be65bc0ece512ae51cb3939ccf7439f42c4ff7f282c63093f8b235403cd901c9779c347c2a62371c947318d65c6e88b7325e79fe3d0eb4812bce45cbe23df118e190778f14c2ed9910c00507c54649a5114fa09b1b7079c30db7d7a95a2648afa444c64349208b4f2662ad8e11c9d5c31db27bd7df199765be7a228931554b54852674d7a207583584ce0ec6257f6143b1cf2f7ebdfe5b47d075427d28fec709d1d51e644b9d5764f0de173114158284307605c3ca408c54cabd2dacd917e695dc2c7eccab49af9925833aeb8e557b7a03f2562d4c29593bfeb74e4688f93d5c9c41f1c7970a6b5695c36bcc3515de7a3f720e65a74bc8e901ab73729d005a371b48d3e5f4b8405be82239d77a05338655e1fb2152aa4a69e46bd81d2ef42f94fd5d43c79b5b66a03f78714a67c033014a6f925e38e9290b0fbd2e7a02753e7a37d142defcf9cb254f2d64c9a87604807c9ae8feead5a154159508918f7c53d7b5f648245ba84e987a7fa9d22a22e9f01da79675df90981ffcb9642685e03857f05d33af5fa2c266c5241fac5262d20b1ec435bf43380dd8b5028eef053e2c3b8ace4aa6bf34e548717fa6150ac26dc5a0375ba0fae507d0b4c6dd6e7018a45cdc36695ae489fe6686c7f66e36f621ed6cf098b017e175e1d6c12be8abeb2d3252b26edb86cb2c8e4930cbe2f80b80333bb123b05091e3f4c67990e9f646be0c5a7b8b628b7f39b65a9d1aa19a89ec01dd6be4e381c90514595358b09377a4fc3244bb041f6edcf63c826e47e4057dfc496c51e4831255385f8302c63f4bd219579ec1d2ed82d31efd0d392b6bf233eded6dc761189fb1cc3eaf9a2c7e41f0c2e539a8b75014babe08a831d806c8718026ade9caea8c3c474bb0bfe6ac2ceb618c5224c0d716ac2d921490c1950d986bb66a5b70be1323ee340af002e9437bb39c95534a8131d21e98ba0953354ee43e8a2a69651639f7f2004829003b53721209667ba4c085342e336155ef3846dbc20e570e49737beebde0a95027c4824ba613e0c83bb86f16f9afe48851680d2fdf0282312bdae112fd038baef4e0bf14520959166f4ea7f6d3d2ddaba4ff79cbee82603f56a317d30473884af4b8801ec92d5b38902d30632b97943fe6050ef2a7ef8871072e78a9daad8ac8f64022621a3d3a33e9eeee68ebfbca5037db1ec5118b6504691db66cd4ca717fd72bc52a4e35c052bb1958fb99ef77871531b2c845a4e05afb619a7d9f29e0c660cc355c6edd69748425502d7cbfbdfa27a6df2e36d11fb05ca90122bceac18f9337d388cf3df948576a8939731c98d39978eec4f74d85943d1f2385e7b4a14c99cf89269a35d24ec50e65d17271aa1b532225438fb99fdb5b3559a430e79788dacf709dcc1f42076deb36e2b3e20056a38a968d696b499f0c74c547ccfc3dd48d909548b9ad4c28f05fbf2a847ca9a0b8b64e85b48a64fa10545678aa99af4c1bbca3d5a725ecba23dfa17e5acb69f781ebda6d8abac60c5071a21139edc37cebd23241445a5d64f8d35b06f20b796dc101c1569dcc61eb847bd2e22f658cb4477e9a2a208d17c890e8566cc771e513196018c607ba19a3d3851f6d54ed47271a8dd5aefb8a5fe57a693d91b9219827ab664a31a5db2f4ef8967b888cffc1833a7279f985d592f19edf7c201fc924ecfa866ac0763c045a60f61b567723b7c552da69b1a930f63ce451dae28e90e5795261400a4c481e9d39514bac1d223190c7800e86cfe2dd5fb371e186374577591de868dc54367ab3c5810f2517bed20240e605492affbe93213d46e4e08706910adc75d3d3e416b23f2a57b12acda5aadc0b28608e1b0509bb968984ab0cef9e84619866e4ff33352e9fce5f5e041c91bb033681806b8201c4bf889bc01e7514e5f8011243c78b893ed9e659097eb96d4e8116145ff7e2d03a2c72a6b50d1030b3c04988ad80cc6e6ba8bb5be04fbcd9cc997fe2f363f3aad103e94b04e82d2e2c297f7c9e84fb6714f212183f44ea8f68cec8656ee00f193de7ff66845650f95f59388a84ebd9fb0e554b50ea9149fb18bfb0b9f5368fc074b9f1b545efaaccf604a3ae558a8bf19e7fcf790c6e57464687beafe7b6bda2c3897ec76cda1d5837a7ae4457ee923a09b4939e71f8d40b90f17137194e7ed11d4fba8341b0926c7b2eaafd97af93fbb245c32e9881d39f6194020f08a633dbc1a4fbc923d4e8f9cd014eb81a2ef6603e143bb96c4395c96ef5ff64862706a121658182425e5abf1b5291a0ecca0b8e768a075498fef302a47a41bbbf90ef7ce8fe036ad5b31e71249d06cb9ec3f2f32590a41d3f64592ced5796f0ae993bef4e0d26162649473dc4a6070a9cb970431b73152338c86518005f6ac4d6fbe8f33b70f90523b8b2ac912a246631d0cc93940fca2ecb100a9777f98458179cb36ae365c113c2d0a4625b3185b8740fda6245942646a38c16c459cbb39e38b570055adc10899ba49603ac91b9648b1705b6393e110bc72e5e57cab0a03319e9e0311985d4b36795e5cf91fab1e7741ea9dfc839a532a6f875e546e4df542d8eec774d8d2751bf7efa2601a29e4f5826436c2d0c5119ec5465b07adc881e9af78daad2209b72ffe49cb2b1d6d1549a00dacb22308a994114609aa6209cbba0aa5d2dccbd6ee7dc9e90fddf194e149fd6432fa640af2e377b5dfb7c4cfd95e6a3ccad89ae1550292f03de8e85be7befe1cf698f1c6d841a43da0240fb2888761ebb3403a30fd641addc4a110271ad8b628427cd21c90283dd26002da73e835e14a006c007b57f3bdc41be58c08231d8e30a1f129fc0a2627ea971fcdb13791c67b9ab662fe02b2fd1bb43edd9485123341d85f86df44fcd8533ffd175f627459a30429d38a596611727beb1033b251ef3e5ee8665d6bf45b090fd8e41b4a71d03de1e98baefeb2150c56be9ea9335dfb9808af61c0633c017c441adc052850615c906f5acd4bef409ac9d572820e00d2d31975e66be0c6bd4ef2ca4230eeba319d2f81bddb4cc49d381dcc8511e336b33a610738feb0668af3df191e22956bad2b204d4a20ad30320752bfdcb0517c3dd040bc1c4688193bff872d48ee944a2f583f0ce109fafe37502f654d19c145281ad31be0bf8a7d534b081c552bd313e7bde6d25d18b9fb6a14e4b9d3473dc475007c6976424f5e495082e16eeb130cb13d3592c38b6e7ebaabb6e1704e5af338cabd51f7c5218f394e9bca3589d1f4d0b2858f5f17218087f31c429f5dc27f7112ec552686770a66caf9eb8355b52c2d25dc9534878998fe913ec2e14fa28b7f86624b2bf00937837151f379d89ccea4fbeda6607a5a1d8561a71d26624dd9d0bcb024507b79bec5361774df85b3ac9ed5e4b1c331925a250a38027550a83094df89b31c10f5ac5beb8c8c0a8a64bc257abf39d9be1ab8463d53f932f31817dfe3edf1025bbf62768d0ef0785ea9f0f5187d62b5c3667653072aa49a5e284447dc1a52159aae0c4440fa917f08c3cbfb0af7aee2cf2d4456532909b13665c0781aa85add5ffc21b149dcb989bc95a8014fd9074acb54d24e77496b3d46aa1129a7d627599bcd02ac6acfc693f8c5bceeec0ae792e5294c6d0defbbf15062981d133f67abff4f5f52e805f6c67793a3b9818eecc07e8a34de82b075f3a673436cdf16f6814eadb17395a10c7418e168f71a4cd5392eb3064337b03f880efac0108d4b6485b5673270b55ebe6c88e6a77cd4d693bea9e19b21311127a891e7a2eafdbe5b0f3f35fd6334e32c1dbfd2886e86b915521ac30ab8a2aa2b254dd850542e2a20fa4cfa1c248a483ffe5b538974605348ce4e3b000d40628182865f7cd40e8e63ce969a13c545c16cd5791869d1775dd83d525f3b44520d8fa3524f86f65c12209da335b848356c372c569212fb9857e27b7a803e2913f9a979db38d38841fbf54dd2d480d1d5a48249d180c97958b4b731549a0462dbc01cd0654dfdd7b207fb971d627c97752a34d7c4644a4603e58c7055eaa9744791e93e044c08b425eaf53f0fdcc38551641f6106b324809261ea71efbd685d3a77214adf1c1a23b46c349a6abdec44def1e5b969f3cb82a61caa8bb735ef358d07fe1c2ef867ba6929fd1a35b458562b1c947d6dbe04c8b782f2d288c8249ea1f7d47bb04b520ed0c1e5156b42568c0aa62403b20c8d5c31d49a9b546a7f8dcba76e924c2524362494a3c4380d003614c542174622fe42c8c051a560f0cf2dfd4846cd8da9bd396b3a79f922feab26d0de180a081e7501b585fbeea86b7be5ac3eaf3a447e71f6e9996a4e3adcf6bb380461f813dc2dec05b4a1c8b4593787fc7a3ee07215d8a583baca51df50de455d6d3f25a4213908cf50facac461c8dfb07eeb7b4d94ec64fe5eb2ec7c87abe341011b95d3ac5d488d3d35b083e21b4acebca1560b17dcdc56b9cb864ef269c32cf11b2a008bfb062e9bff29c3a72afa349af3362c0210eeb20db899cb0688d73b83ce75afd2b1e93945fa7ba46a82db1691104ae0a11ae3efbe0431804a3bca3fae7bed5d29426c5bb60b13c861858e4c4a3e230e822d0a97a66a400286db34ec8a03e788f3a2090cb8535da5c33e31574c6dd3fee91dfc0113cf80db5e63f40129660690061833e2808c84bc3db75dc10bf355d26862932be68038d8c480063ddc2cfa9dcde2e24a2257b8893aea471db996e85780a03c6a69834862d81e7d59595fa7f8dbf750036be82ca11aa52042ed1081752b27851afffeadf07caa0e3bf7ab320d609084cce0ca3d6caab0bfecea7af6cea734af34828b188514b3e0ef510672e6d48135811dfb10104355458339c170680e63bd0e2a331c9c403e90147962b7aa665814c44e8e1e84748ad07914c1c2b1a886d7d43e84fa4877ffe43f260216fe1521bd45ca3ff3fee897763160e94b09674cf6d8804065c1b4b6648022039816da04c31742321175e1bc683cda9632efe0ae0b3309d28911fe29595dfbb9db8203b1c57ef3f65848ffed05fbd5952641f214f905d795f7d702b9b1f3e50fb5625fb4a477b671e49348425bad9c7e792fc1f40786fdf69fc58970ff0c5fc0dd1b55d368fcbc0ef43922060bc59016dd51a605528a7d551b2b4c3175fe5af7289fea2cdd1b06dea7096c62463ceb31efa07f577a1e372f051a6365e8c44ee29ec2fc833a53e64b4f61bc9ca06b1e317898bf7a14f05b6fca70ee98b2b2c25f75919107331e08e4f77e551fff0effe4b05c86db4663872b0a962067cbd184aa957f0ef1141519ef08ec63b2ce90d08c0d3edae1787701408ef658abb4675c9af9d6f46d6b92c7ba141cfcaefaff73682f9a27b8c6c0dfdbfd180eb8f7ec0b40360591d9e7512d7576f394c93ffa6e36aa7cace7a1838335769284ca2ca467c2e24f845e70af00eb6e695c90f60c22081e378f6a5c5ad206747b6e7d2ed5a183f76cd1cb00cfda4b9c52f3cac83b7a23cfc62941d48ccc4cea52ad1617353b96b6e379e9f7d317021148d29a0271f1b0c981028d58c3ab4fb76b8962902259e5cfbd8361a19c75efa83ff4aa83a25b374a1f6328fda3e72ebe177039f609cac62a54801f7d80e87810d5160edb9fc353d490c92612230ca6d57428535be6ba31f210e", 0x1000, 0x9}, {&(0x7f0000000180)="556e044b65c8b794ca3ae35969022741da054a21fa75372e1c0107296621150d24bae3efe38ccf3083aa17b95c5e446644b8cc364623b1295e24c8d155eee6071a2ef221cadce01ee8c79ae15d627cdeee3790865fc8534cfae5a2d6bc377246f3a0b0b9d9db2dc598c7b2700ff76bd131fc121280fba2ee84c5", 0x7a}, {&(0x7f0000000240)="7c6b9f96be473e81aed0e0aa2635d9a8c4d18b3f545b5c387fec0d8732495ea4fa301fcca51e8a90872efcf790ed92402849de781b7132935a6f51f458fd2ffbde5103c90d30591b19ae89f9305a531b0f3b6e37338429ff2dc25b9b2db67d02d8c0", 0x62, 0x1}, {&(0x7f0000001340)="ad5f3935d168c0d3696ebf3becda6312901b3a041d66e803728a9d271785729cf5632defb1b4fa483a8eb4e65cfde022be1df8430ba50bfc0411fec325be510cdf63c823f6b0e51015dae6e940f6dbf747acd52ab843a9bc3592297a96138a00440598490d97eb0b6b7333d10ef908eb804ef0421a1a219d8f1f9c41fb126d13ebc427d8d0aee6258289789c0b6f80dfebb1383a9c20ab094902f545691132", 0x9f, 0x6}, {&(0x7f0000001400)="fb2b549a1ea15b2024e2b801956f253bc3786faafb262ab2972440df9b72aa46c5779cfaca16d078911f0bad77825b50890bfff9ffea29381f1d715c9fb417cdcbab1c0983fe76cb25ab2db2f58a8fc892f211732fe6be1d758e1f69d3e14f634b13b3cd78ba1ca51b5a0fcf74c75f7190e0ee7607cf63c1669dc68c91f39a47680ea1ce85765d319f39fbf0e72c3a59ee20fcaf30ab18ecd71f94a9ff6f47aa05a7a867b646c41d965f9460701a84e46ae2455224f37ca2190cc2b40317b0ed02145f54b4374b4f96fddc8d80eeb711e350d32308fe0cf15372eea78fca47653b1b12c64db943023bd33400d24b92b49dca", 0xf2, 0x2}, {&(0x7f0000001500)="dd3d30177df26957f22dfa2b546931e28724fdafbbe7a513c50735b80668f502824534e084a7b6c2", 0x28, 0x100000001}], 0x1, &(0x7f0000001600)=ANY=[@ANYBLOB='autocell,dyn,flock=write,flock=write,flock=strict,source=vfDt\x00,flock=local,obj_role=),\x00']) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async, rerun: 64) mkdir(&(0x7f0000001680)='./file1\x00', 0x0) (rerun: 64) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 745.646254][T21629] FAULT_INJECTION: forcing a failure. [ 745.646254][T21629] name failslab, interval 1, probability 0, space 0, times 0 [ 745.668244][T21626] loop3: detected capacity change from 0 to 264192 [ 745.678571][T21629] CPU: 1 PID: 21629 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 745.687370][T21629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.697439][T21629] Call Trace: [ 745.700728][T21629] [ 745.703672][T21629] dump_stack_lvl+0x1e3/0x2cb [ 745.708372][T21629] ? bfq_pos_tree_add_move+0x436/0x436 [ 745.713852][T21629] ? panic+0x76e/0x76e [ 745.717935][T21629] ? __might_sleep+0xc0/0xc0 [ 745.722533][T21629] should_fail+0x384/0x4b0 [ 745.726963][T21629] ? alloc_workqueue+0x18d/0x1460 [ 745.732080][T21629] should_failslab+0x5/0x20 [ 745.736620][T21629] __kmalloc+0x8b/0x370 [ 745.740794][T21629] ? genl_rcv_msg+0xfbc/0x1490 [ 745.745582][T21629] ? netlink_rcv_skb+0x1f0/0x460 [ 745.750545][T21629] ? genl_rcv+0x24/0x40 [ 745.754719][T21629] ? netlink_unicast+0x7e7/0x9c0 [ 745.759677][T21629] alloc_workqueue+0x18d/0x1460 [ 745.764574][T21629] ? apply_workqueue_attrs+0x700/0x700 [ 745.770070][T21629] ieee802154_register_hw+0xae/0x690 [ 745.775379][T21629] ? hwsim_add_one+0x339/0x10f0 [ 745.780254][T21629] hwsim_add_one+0x42c/0x10f0 [ 745.784960][T21629] genl_rcv_msg+0xfbc/0x1490 [ 745.789585][T21629] ? genl_bind+0x380/0x380 [ 745.794013][T21629] ? arch_stack_walk+0xf8/0x140 [ 745.798906][T21629] ? mark_lock+0x98/0x350 [ 745.803259][T21629] ? __lock_acquire+0x129a/0x1f80 [ 745.808313][T21629] ? hulusb_set_txpower+0x160/0x160 [ 745.813549][T21629] netlink_rcv_skb+0x1f0/0x460 [ 745.818332][T21629] ? genl_bind+0x380/0x380 [ 745.822767][T21629] ? netlink_ack+0xb40/0xb40 [ 745.827389][T21629] ? __down_read_common+0x156/0x2a0 [ 745.832608][T21629] genl_rcv+0x24/0x40 [ 745.836601][T21629] netlink_unicast+0x7e7/0x9c0 [ 745.841394][T21629] ? netlink_detachskb+0xa0/0xa0 [ 745.846342][T21629] ? check_heap_object+0x13c/0x310 [ 745.851471][T21629] ? __phys_addr_symbol+0x2b/0x70 [ 745.856511][T21629] ? 0xffffffff81000000 [ 745.860673][T21629] ? __check_object_size+0x15a/0x210 [ 745.865983][T21629] ? bpf_lsm_netlink_send+0x5/0x10 [ 745.871115][T21629] netlink_sendmsg+0x9b3/0xcd0 [ 745.875908][T21629] ? netlink_getsockopt+0x9c0/0x9c0 [ 745.881113][T21629] ? __import_iovec+0x340/0x4e0 [ 745.885981][T21629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 745.891281][T21629] ? security_socket_sendmsg+0x9d/0xb0 [ 745.896748][T21629] ? netlink_getsockopt+0x9c0/0x9c0 [ 745.901965][T21629] ____sys_sendmsg+0x597/0x8e0 [ 745.906752][T21629] ? __sys_sendmsg_sock+0x30/0x30 [ 745.911805][T21629] __sys_sendmsg+0x27e/0x370 [ 745.916401][T21629] ? ____sys_sendmsg+0x8e0/0x8e0 [ 745.921363][T21629] ? __context_tracking_exit+0x4d/0x80 [ 745.926848][T21629] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 745.932854][T21629] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 745.938849][T21629] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 745.944845][T21629] do_syscall_64+0x2b/0x70 [ 745.949272][T21629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 745.955173][T21629] RIP: 0033:0x7f5a582890e9 [ 745.959598][T21629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 745.979217][T21629] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.987647][T21629] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 745.995635][T21629] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 746.003618][T21629] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 746.011606][T21629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.019591][T21629] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 746.027591][T21629] 17:50:50 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 11) 17:50:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) open_by_handle_at(r1, &(0x7f0000000080)=@nfs={0x90, 0x24, {0x6, 0x7, 0xe08, 0x80, "0bbb99695643023b76c8265380d82fd8db47724c4b27014707a467b22be4bce4edbd43bfce96418345b7d350048d10cddfb4aa27fcb8217e98f1749ffd7bcbbdbdec8b61097d31a2b15a1dde880964fbed13118fe6eb9b705361402d10897377940f1b36fd24c8fb78c4b3a4993bf9f3221a6f89135bcfc19c258c845674c268"}}, 0x240201) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:50:50 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x600, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 746.057133][T21631] __nla_validate_parse: 4 callbacks suppressed [ 746.057150][T21631] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.076186][T21630] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:50:50 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xd, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 746.128896][T21637] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 746.157031][T21637] FAULT_INJECTION: forcing a failure. [ 746.157031][T21637] name failslab, interval 1, probability 0, space 0, times 0 [ 746.182540][T21637] CPU: 1 PID: 21637 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 746.191344][T21637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.201399][T21637] Call Trace: [ 746.204674][T21637] [ 746.207598][T21637] dump_stack_lvl+0x1e3/0x2cb [ 746.212279][T21637] ? bfq_pos_tree_add_move+0x436/0x436 [ 746.217734][T21637] ? panic+0x76e/0x76e [ 746.221798][T21637] ? __might_sleep+0xc0/0xc0 [ 746.226393][T21637] should_fail+0x384/0x4b0 [ 746.230803][T21637] ? alloc_workqueue+0x207/0x1460 [ 746.235818][T21637] should_failslab+0x5/0x20 [ 746.240311][T21637] kmem_cache_alloc_trace+0x68/0x310 [ 746.245589][T21637] ? netlink_unicast+0x7e7/0x9c0 [ 746.250522][T21637] alloc_workqueue+0x207/0x1460 [ 746.255378][T21637] ? apply_workqueue_attrs+0x700/0x700 [ 746.260836][T21637] ieee802154_register_hw+0xae/0x690 [ 746.266111][T21637] ? hwsim_add_one+0x339/0x10f0 [ 746.270954][T21637] hwsim_add_one+0x42c/0x10f0 [ 746.275629][T21637] genl_rcv_msg+0xfbc/0x1490 [ 746.280216][T21637] ? genl_bind+0x380/0x380 [ 746.284618][T21637] ? arch_stack_walk+0xf8/0x140 [ 746.289471][T21637] ? mark_lock+0x98/0x350 [ 746.293792][T21637] ? __lock_acquire+0x129a/0x1f80 [ 746.298815][T21637] ? hulusb_set_txpower+0x160/0x160 [ 746.304016][T21637] netlink_rcv_skb+0x1f0/0x460 [ 746.308778][T21637] ? genl_bind+0x380/0x380 [ 746.313181][T21637] ? netlink_ack+0xb40/0xb40 [ 746.317767][T21637] ? __down_read_common+0x156/0x2a0 [ 746.322962][T21637] genl_rcv+0x24/0x40 [ 746.326933][T21637] netlink_unicast+0x7e7/0x9c0 [ 746.331692][T21637] ? netlink_detachskb+0xa0/0xa0 [ 746.336615][T21637] ? check_heap_object+0x13c/0x310 [ 746.341718][T21637] ? __phys_addr_symbol+0x2b/0x70 [ 746.346749][T21637] ? 0xffffffff81000000 [ 746.350891][T21637] ? __check_object_size+0x15a/0x210 [ 746.356163][T21637] ? bpf_lsm_netlink_send+0x5/0x10 [ 746.361268][T21637] netlink_sendmsg+0x9b3/0xcd0 [ 746.366119][T21637] ? netlink_getsockopt+0x9c0/0x9c0 [ 746.371304][T21637] ? __import_iovec+0x340/0x4e0 [ 746.376150][T21637] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 746.381425][T21637] ? security_socket_sendmsg+0x9d/0xb0 [ 746.386872][T21637] ? netlink_getsockopt+0x9c0/0x9c0 [ 746.392061][T21637] ____sys_sendmsg+0x597/0x8e0 [ 746.396826][T21637] ? __sys_sendmsg_sock+0x30/0x30 [ 746.401854][T21637] __sys_sendmsg+0x27e/0x370 [ 746.406434][T21637] ? ____sys_sendmsg+0x8e0/0x8e0 [ 746.411456][T21637] ? __context_tracking_exit+0x4d/0x80 [ 746.416914][T21637] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 746.422893][T21637] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 746.428863][T21637] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 746.434846][T21637] do_syscall_64+0x2b/0x70 [ 746.439252][T21637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 746.445134][T21637] RIP: 0033:0x7f5a582890e9 [ 746.449538][T21637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 746.469138][T21637] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.477550][T21637] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 746.485512][T21637] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 746.493474][T21637] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 746.501434][T21637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.509390][T21637] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 746.517363][T21637] [ 746.558597][T21640] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.569466][ T4265] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 746.596863][T21641] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:50:50 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x700, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:50 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 12) [ 746.612200][ T3746] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 746.651135][T21643] loop3: detected capacity change from 0 to 15 [ 746.709165][T21645] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.782742][T21648] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 746.795701][T21648] FAULT_INJECTION: forcing a failure. [ 746.795701][T21648] name failslab, interval 1, probability 0, space 0, times 0 [ 746.808984][T21648] CPU: 0 PID: 21648 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 746.817771][T21648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.827849][T21648] Call Trace: [ 746.831143][T21648] [ 746.834091][T21648] dump_stack_lvl+0x1e3/0x2cb [ 746.838780][T21648] ? bfq_pos_tree_add_move+0x436/0x436 [ 746.844229][T21648] ? panic+0x76e/0x76e [ 746.848287][T21648] ? __might_sleep+0xc0/0xc0 [ 746.852944][T21648] ? vsnprintf+0x1c35/0x1ce0 [ 746.857515][T21648] ? __stack_depot_save+0x33/0x490 [ 746.862622][T21648] should_fail+0x384/0x4b0 [ 746.867046][T21648] ? kasprintf+0xd1/0x120 [ 746.871361][T21648] should_failslab+0x5/0x20 [ 746.875847][T21648] __kmalloc_track_caller+0x89/0x350 [ 746.881129][T21648] kvasprintf+0xd6/0x180 [ 746.885355][T21648] ? bust_spinlocks+0xd0/0xd0 [ 746.890014][T21648] ? lockdep_unlock+0x163/0x300 [ 746.894848][T21648] ? lockdep_lock+0x2a0/0x2a0 [ 746.899502][T21648] ? __is_module_percpu_address+0x29e/0x3d0 [ 746.905451][T21648] kasprintf+0xd1/0x120 [ 746.909599][T21648] ? kvasprintf_const+0x170/0x170 [ 746.914622][T21648] ? __raw_spin_lock_init+0x41/0x100 [ 746.919917][T21648] alloc_workqueue+0x5ed/0x1460 [ 746.924786][T21648] ? apply_workqueue_attrs+0x700/0x700 [ 746.930260][T21648] ieee802154_register_hw+0xae/0x690 [ 746.935531][T21648] ? hwsim_add_one+0x339/0x10f0 [ 746.940370][T21648] hwsim_add_one+0x42c/0x10f0 [ 746.945034][T21648] genl_rcv_msg+0xfbc/0x1490 [ 746.949609][T21648] ? genl_bind+0x380/0x380 [ 746.954003][T21648] ? arch_stack_walk+0xf8/0x140 [ 746.958843][T21648] ? mark_lock+0x98/0x350 [ 746.963169][T21648] ? __lock_acquire+0x129a/0x1f80 [ 746.968198][T21648] ? hulusb_set_txpower+0x160/0x160 [ 746.973397][T21648] netlink_rcv_skb+0x1f0/0x460 [ 746.978145][T21648] ? genl_bind+0x380/0x380 [ 746.982542][T21648] ? netlink_ack+0xb40/0xb40 [ 746.987119][T21648] ? __down_read_common+0x156/0x2a0 [ 746.992300][T21648] genl_rcv+0x24/0x40 [ 746.996259][T21648] netlink_unicast+0x7e7/0x9c0 [ 747.001006][T21648] ? netlink_detachskb+0xa0/0xa0 [ 747.005919][T21648] ? check_heap_object+0x13c/0x310 [ 747.011011][T21648] ? __phys_addr_symbol+0x2b/0x70 [ 747.016024][T21648] ? 0xffffffff81000000 [ 747.020184][T21648] ? __check_object_size+0x15a/0x210 [ 747.025453][T21648] ? bpf_lsm_netlink_send+0x5/0x10 [ 747.030554][T21648] netlink_sendmsg+0x9b3/0xcd0 [ 747.035311][T21648] ? netlink_getsockopt+0x9c0/0x9c0 [ 747.040495][T21648] ? __import_iovec+0x340/0x4e0 [ 747.045336][T21648] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 747.050602][T21648] ? security_socket_sendmsg+0x9d/0xb0 [ 747.056038][T21648] ? netlink_getsockopt+0x9c0/0x9c0 [ 747.061221][T21648] ____sys_sendmsg+0x597/0x8e0 [ 747.065989][T21648] ? __sys_sendmsg_sock+0x30/0x30 [ 747.071031][T21648] __sys_sendmsg+0x27e/0x370 [ 747.075612][T21648] ? ____sys_sendmsg+0x8e0/0x8e0 [ 747.080544][T21648] ? __context_tracking_exit+0x4d/0x80 [ 747.086005][T21648] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 747.091973][T21648] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 747.097934][T21648] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 747.103891][T21648] do_syscall_64+0x2b/0x70 [ 747.108288][T21648] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 747.114220][T21648] RIP: 0033:0x7f5a582890e9 [ 747.118638][T21648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 747.138228][T21648] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.146629][T21648] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 747.154582][T21648] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 747.162540][T21648] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.170511][T21648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.178463][T21648] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 747.186426][T21648] [ 747.191322][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.197917][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.224535][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.251932][ T3746] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.269878][ T3746] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 747.283077][ T3746] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 747.292228][ T3746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.774851][ T3746] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0047/input/input64 [ 747.791575][ T3746] cm6533_jd 0003:0D8C:0022.0047: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 747.977884][ T3676] usb 6-1: USB disconnect, device number 109 17:50:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:52 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xe, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) (async, rerun: 64) open_by_handle_at(r1, &(0x7f0000000080)=@nfs={0x90, 0x24, {0x6, 0x7, 0xe08, 0x80, "0bbb99695643023b76c8265380d82fd8db47724c4b27014707a467b22be4bce4edbd43bfce96418345b7d350048d10cddfb4aa27fcb8217e98f1749ffd7bcbbdbdec8b61097d31a2b15a1dde880964fbed13118fe6eb9b705361402d10897377940f1b36fd24c8fb78c4b3a4993bf9f3221a6f89135bcfc19c258c845674c268"}}, 0x240201) (async, rerun: 64) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:50:52 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x900, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:52 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 13) [ 748.520549][T21657] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 748.535141][T21658] loop3: detected capacity change from 0 to 15 [ 748.552492][T21656] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 748.565129][T21656] FAULT_INJECTION: forcing a failure. [ 748.565129][T21656] name failslab, interval 1, probability 0, space 0, times 0 [ 748.592748][T21656] CPU: 1 PID: 21656 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 748.601568][T21656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.611642][T21656] Call Trace: [ 748.614940][T21656] 17:50:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) open_by_handle_at(r1, &(0x7f0000000080)=@nfs={0x90, 0x24, {0x6, 0x7, 0xe08, 0x80, "0bbb99695643023b76c8265380d82fd8db47724c4b27014707a467b22be4bce4edbd43bfce96418345b7d350048d10cddfb4aa27fcb8217e98f1749ffd7bcbbdbdec8b61097d31a2b15a1dde880964fbed13118fe6eb9b705361402d10897377940f1b36fd24c8fb78c4b3a4993bf9f3221a6f89135bcfc19c258c845674c268"}}, 0x240201) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) (async) open_by_handle_at(r1, &(0x7f0000000080)=@nfs={0x90, 0x24, {0x6, 0x7, 0xe08, 0x80, "0bbb99695643023b76c8265380d82fd8db47724c4b27014707a467b22be4bce4edbd43bfce96418345b7d350048d10cddfb4aa27fcb8217e98f1749ffd7bcbbdbdec8b61097d31a2b15a1dde880964fbed13118fe6eb9b705361402d10897377940f1b36fd24c8fb78c4b3a4993bf9f3221a6f89135bcfc19c258c845674c268"}}, 0x240201) (async) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (async) [ 748.617889][T21656] dump_stack_lvl+0x1e3/0x2cb [ 748.622599][T21656] ? bfq_pos_tree_add_move+0x436/0x436 [ 748.628191][T21656] ? panic+0x76e/0x76e [ 748.632293][T21656] ? __might_sleep+0xc0/0xc0 [ 748.636927][T21656] should_fail+0x384/0x4b0 [ 748.641366][T21656] ? apply_wqattrs_prepare+0xb1/0xc20 [ 748.646747][T21656] should_failslab+0x5/0x20 [ 748.651263][T21656] __kmalloc+0x8b/0x370 [ 748.655446][T21656] apply_wqattrs_prepare+0xb1/0xc20 [ 748.660649][T21656] ? mutex_lock_io_nested+0x60/0x60 [ 748.665861][T21656] apply_workqueue_attrs+0xf2/0x700 [ 748.671069][T21656] alloc_workqueue+0xef3/0x1460 [ 748.675931][T21656] ? apply_workqueue_attrs+0x700/0x700 [ 748.681403][T21656] ieee802154_register_hw+0xae/0x690 [ 748.686685][T21656] ? hwsim_add_one+0x339/0x10f0 [ 748.691537][T21656] hwsim_add_one+0x42c/0x10f0 [ 748.696215][T21656] genl_rcv_msg+0xfbc/0x1490 [ 748.700813][T21656] ? genl_bind+0x380/0x380 [ 748.705221][T21656] ? arch_stack_walk+0xf8/0x140 [ 748.710088][T21656] ? mark_lock+0x98/0x350 [ 748.714411][T21656] ? __lock_acquire+0x129a/0x1f80 [ 748.719431][T21656] ? hulusb_set_txpower+0x160/0x160 [ 748.724636][T21656] netlink_rcv_skb+0x1f0/0x460 [ 748.729395][T21656] ? genl_bind+0x380/0x380 [ 748.733806][T21656] ? netlink_ack+0xb40/0xb40 [ 748.738418][T21656] ? __down_read_common+0x156/0x2a0 [ 748.743632][T21656] genl_rcv+0x24/0x40 [ 748.747620][T21656] netlink_unicast+0x7e7/0x9c0 [ 748.752413][T21656] ? netlink_detachskb+0xa0/0xa0 [ 748.757341][T21656] ? check_heap_object+0x13c/0x310 [ 748.762450][T21656] ? __phys_addr_symbol+0x2b/0x70 [ 748.767465][T21656] ? 0xffffffff81000000 [ 748.771607][T21656] ? __check_object_size+0x15a/0x210 [ 748.776882][T21656] ? bpf_lsm_netlink_send+0x5/0x10 [ 748.781992][T21656] netlink_sendmsg+0x9b3/0xcd0 [ 748.786762][T21656] ? netlink_getsockopt+0x9c0/0x9c0 [ 748.791947][T21656] ? __import_iovec+0x340/0x4e0 [ 748.796813][T21656] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 748.802098][T21656] ? security_socket_sendmsg+0x9d/0xb0 [ 748.807572][T21656] ? netlink_getsockopt+0x9c0/0x9c0 [ 748.812790][T21656] ____sys_sendmsg+0x597/0x8e0 [ 748.817564][T21656] ? __sys_sendmsg_sock+0x30/0x30 [ 748.822596][T21656] __sys_sendmsg+0x27e/0x370 [ 748.827181][T21656] ? ____sys_sendmsg+0x8e0/0x8e0 [ 748.832120][T21656] ? __context_tracking_exit+0x4d/0x80 [ 748.837585][T21656] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 748.843568][T21656] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 748.849540][T21656] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 748.855510][T21656] do_syscall_64+0x2b/0x70 [ 748.859915][T21656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 748.865797][T21656] RIP: 0033:0x7f5a582890e9 [ 748.870202][T21656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 748.889795][T21656] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.898199][T21656] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 748.906158][T21656] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 748.914115][T21656] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 748.922119][T21656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.930079][T21656] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 748.938056][T21656] 17:50:53 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x10, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 749.062452][T21667] loop3: detected capacity change from 0 to 15 [ 749.077069][T21655] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:53 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x11, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:53 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xa00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 749.122078][T18660] usb 6-1: new high-speed USB device number 110 using dummy_hcd 17:50:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x121042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:50:53 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x12, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 749.281097][T21680] loop3: detected capacity change from 0 to 15 [ 749.532082][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.543163][T18660] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.553594][T18660] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.566718][T18660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 749.576196][T18660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.065207][T18660] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0048/input/input65 [ 750.088738][T18660] cm6533_jd 0003:0D8C:0022.0048: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 750.265354][T18660] usb 6-1: USB disconnect, device number 110 17:50:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:54 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 14) 17:50:54 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xb00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:54 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x18, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x121042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000080)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x121042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (async) 17:50:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:55 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x21, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:55 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xbe2, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 750.817016][T21693] loop3: detected capacity change from 0 to 15 [ 750.838230][T21692] FAULT_INJECTION: forcing a failure. [ 750.838230][T21692] name failslab, interval 1, probability 0, space 0, times 0 17:50:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000080)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x121042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 750.944363][T21692] CPU: 1 PID: 21692 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 750.953175][T21692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.963243][T21692] Call Trace: [ 750.966533][T21692] [ 750.969472][T21692] dump_stack_lvl+0x1e3/0x2cb [ 750.974170][T21692] ? bfq_pos_tree_add_move+0x436/0x436 [ 750.979645][T21692] ? panic+0x76e/0x76e [ 750.983742][T21692] should_fail+0x384/0x4b0 [ 750.988171][T21692] ? apply_wqattrs_prepare+0xe8/0xc20 [ 750.993552][T21692] should_failslab+0x5/0x20 [ 750.998054][T21692] kmem_cache_alloc_trace+0x68/0x310 [ 751.003338][T21692] apply_wqattrs_prepare+0xe8/0xc20 [ 751.008536][T21692] ? mutex_lock_io_nested+0x60/0x60 [ 751.013744][T21692] apply_workqueue_attrs+0xf2/0x700 [ 751.018940][T21692] alloc_workqueue+0xef3/0x1460 [ 751.023818][T21692] ? apply_workqueue_attrs+0x700/0x700 [ 751.029295][T21692] ieee802154_register_hw+0xae/0x690 [ 751.034581][T21692] ? hwsim_add_one+0x339/0x10f0 [ 751.039429][T21692] hwsim_add_one+0x42c/0x10f0 [ 751.044107][T21692] genl_rcv_msg+0xfbc/0x1490 [ 751.048698][T21692] ? genl_bind+0x380/0x380 [ 751.053103][T21692] ? arch_stack_walk+0xf8/0x140 [ 751.057961][T21692] ? mark_lock+0x98/0x350 [ 751.062285][T21692] ? __lock_acquire+0x129a/0x1f80 [ 751.067302][T21692] ? hulusb_set_txpower+0x160/0x160 [ 751.072502][T21692] netlink_rcv_skb+0x1f0/0x460 [ 751.077260][T21692] ? genl_bind+0x380/0x380 [ 751.081666][T21692] ? netlink_ack+0xb40/0xb40 [ 751.086256][T21692] ? __down_read_common+0x156/0x2a0 [ 751.091454][T21692] genl_rcv+0x24/0x40 [ 751.095424][T21692] netlink_unicast+0x7e7/0x9c0 [ 751.100186][T21692] ? netlink_detachskb+0xa0/0xa0 [ 751.105115][T21692] ? check_heap_object+0x13c/0x310 [ 751.110231][T21692] ? __phys_addr_symbol+0x2b/0x70 [ 751.115248][T21692] ? 0xffffffff81000000 [ 751.119390][T21692] ? __check_object_size+0x15a/0x210 [ 751.124671][T21692] ? bpf_lsm_netlink_send+0x5/0x10 [ 751.129782][T21692] netlink_sendmsg+0x9b3/0xcd0 [ 751.134546][T21692] ? netlink_getsockopt+0x9c0/0x9c0 [ 751.139731][T21692] ? __import_iovec+0x340/0x4e0 [ 751.144577][T21692] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 751.149852][T21692] ? security_socket_sendmsg+0x9d/0xb0 [ 751.155300][T21692] ? netlink_getsockopt+0x9c0/0x9c0 [ 751.160491][T21692] ____sys_sendmsg+0x597/0x8e0 [ 751.165252][T21692] ? __sys_sendmsg_sock+0x30/0x30 [ 751.170279][T21692] __sys_sendmsg+0x27e/0x370 [ 751.174864][T21692] ? ____sys_sendmsg+0x8e0/0x8e0 [ 751.179800][T21692] ? __context_tracking_exit+0x4d/0x80 [ 751.185264][T21692] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 751.191244][T21692] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 751.197213][T21692] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 751.203186][T21692] do_syscall_64+0x2b/0x70 [ 751.207599][T21692] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.213485][T21692] RIP: 0033:0x7f5a582890e9 [ 751.217891][T21692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 751.237482][T21692] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.245887][T21692] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 751.253850][T21692] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 751.261812][T21692] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.269861][T21692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.277820][T21692] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 751.285792][T21692] 17:50:55 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xc00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:55 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 15) 17:50:55 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x25, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 751.299208][T21699] __nla_validate_parse: 7 callbacks suppressed [ 751.299224][T21699] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 751.323166][T21701] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 751.391136][T21703] loop3: detected capacity change from 0 to 15 [ 751.458570][T21709] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 751.478293][T21710] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 751.482013][ T3673] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 751.502214][T21711] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 751.511786][T21711] FAULT_INJECTION: forcing a failure. [ 751.511786][T21711] name failslab, interval 1, probability 0, space 0, times 0 [ 751.538642][T21711] CPU: 1 PID: 21711 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 751.547449][T21711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.557520][T21711] Call Trace: [ 751.560810][T21711] [ 751.563748][T21711] dump_stack_lvl+0x1e3/0x2cb [ 751.568443][T21711] ? bfq_pos_tree_add_move+0x436/0x436 [ 751.573918][T21711] ? panic+0x76e/0x76e [ 751.578015][T21711] should_fail+0x384/0x4b0 [ 751.582446][T21711] ? apply_wqattrs_prepare+0x17d/0xc20 [ 751.587921][T21711] should_failslab+0x5/0x20 [ 751.592438][T21711] kmem_cache_alloc_trace+0x68/0x310 [ 751.597731][T21711] ? apply_wqattrs_prepare+0xe8/0xc20 [ 751.603120][T21711] apply_wqattrs_prepare+0x17d/0xc20 [ 751.608412][T21711] ? mutex_lock_io_nested+0x60/0x60 [ 751.613650][T21711] apply_workqueue_attrs+0xf2/0x700 [ 751.618870][T21711] alloc_workqueue+0xef3/0x1460 [ 751.623770][T21711] ? apply_workqueue_attrs+0x700/0x700 [ 751.629258][T21711] ieee802154_register_hw+0xae/0x690 [ 751.634556][T21711] ? hwsim_add_one+0x339/0x10f0 [ 751.639423][T21711] hwsim_add_one+0x42c/0x10f0 [ 751.644131][T21711] genl_rcv_msg+0xfbc/0x1490 [ 751.648747][T21711] ? genl_bind+0x380/0x380 [ 751.653171][T21711] ? arch_stack_walk+0xf8/0x140 [ 751.658066][T21711] ? mark_lock+0x98/0x350 [ 751.662414][T21711] ? __lock_acquire+0x129a/0x1f80 [ 751.667452][T21711] ? hulusb_set_txpower+0x160/0x160 [ 751.672674][T21711] netlink_rcv_skb+0x1f0/0x460 [ 751.677451][T21711] ? genl_bind+0x380/0x380 [ 751.681887][T21711] ? netlink_ack+0xb40/0xb40 [ 751.686505][T21711] ? __down_read_common+0x156/0x2a0 [ 751.691727][T21711] genl_rcv+0x24/0x40 [ 751.695725][T21711] netlink_unicast+0x7e7/0x9c0 [ 751.700490][T21711] ? netlink_detachskb+0xa0/0xa0 [ 751.705414][T21711] ? check_heap_object+0x13c/0x310 [ 751.710518][T21711] ? __phys_addr_symbol+0x2b/0x70 [ 751.715548][T21711] ? 0xffffffff81000000 [ 751.719695][T21711] ? __check_object_size+0x15a/0x210 [ 751.724996][T21711] ? bpf_lsm_netlink_send+0x5/0x10 [ 751.730107][T21711] netlink_sendmsg+0x9b3/0xcd0 [ 751.734886][T21711] ? netlink_getsockopt+0x9c0/0x9c0 [ 751.740135][T21711] ? __import_iovec+0x340/0x4e0 [ 751.745024][T21711] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 751.750327][T21711] ? security_socket_sendmsg+0x9d/0xb0 [ 751.755775][T21711] ? netlink_getsockopt+0x9c0/0x9c0 [ 751.760968][T21711] ____sys_sendmsg+0x597/0x8e0 [ 751.765727][T21711] ? __sys_sendmsg_sock+0x30/0x30 [ 751.770755][T21711] __sys_sendmsg+0x27e/0x370 [ 751.775346][T21711] ? ____sys_sendmsg+0x8e0/0x8e0 [ 751.780280][T21711] ? __context_tracking_exit+0x4d/0x80 [ 751.785753][T21711] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 751.791733][T21711] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 751.797711][T21711] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 751.803683][T21711] do_syscall_64+0x2b/0x70 [ 751.808088][T21711] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.813981][T21711] RIP: 0033:0x7f5a582890e9 [ 751.818384][T21711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 751.837999][T21711] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.846404][T21711] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 751.854367][T21711] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 751.862325][T21711] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.870280][T21711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.878236][T21711] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 751.886205][T21711] [ 752.251986][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.263323][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.273166][ T3673] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.286019][ T3673] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 752.296118][ T3673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.775239][ T3673] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0049/input/input66 [ 752.793055][ T3673] cm6533_jd 0003:0D8C:0022.0049: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 752.983445][ T3673] usb 6-1: USB disconnect, device number 111 17:50:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:50:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x40, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xffb}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) r0 = syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000100)="0479b45002fa4ad1d349f184b69578d35a9d97673b9fd09e6db6b7e84b5fe0d3cace68d9998267974c4e6967db1f2c7664931a57342ae50061ff48cc133395f6b31325a64958d4f1d2337d7a36b9f05368e6a793432474d9fd5df7e77b4836b88b91d156cc0f332251d30ca8bb8f56324575fb0aa7e4574d910df4a37ca717a9ad665a0a05c88cb89b0d2fdc248c2a0bbdc4b085e1388ebf12fef10eb30dabfdcd352384a2413913b853e3cf2a5f00be60dae46617909748f4434c1575", 0xbd, 0x40}, {&(0x7f0000000340)="e1c8aceefb3ba00469cda385211ca5a6375150827769ab665f48497a08f2b5f6b58f6d9727536e9ab2eb79679c351b8674389fc8a2522b1f03ebedcbbe4049e7d2e5c5ac697482233e0cfe2b6782bbf2ea7efa232551dd2dd998aa55c80001ca82a47de51985894bd7fd2f351ea0af4669eacd41774c29d0a39608f6e7aad2298d34264b041134ca74e7859f031c2106f2f3fec5e58e733ef246c23fb319c3666bc604e4b8f6603ebf4a712e53b725d7a53e0cfd984659f4e2909e39eadcad358ca03b3b4e51b37112e99bee6539ab0e93d95a9750", 0xd5, 0x1}, {&(0x7f0000000440)="a4af3950835d044b7dfe895218313f4daf2853020daca63500cc6473b615fa7011c11a1277a0040edc035e82139ab4cb976f8e68cb11dbbbcf096bc5b460398f3fabaea1fb1bf9b944b49df669ad1b9b1b2b872cf1fd7c8fde79aa23a410ae8a42bbed78fa8b664019a8166baeabf929e74b4168154d9db8240f3dc6d2d45ad629a3138eb8da3b13dcaa8f016b8fad8cd7038afc8acf25ca4e0e7f57f01d89d7410fe21ef1d96403cb", 0xa9, 0x5}, {&(0x7f00000001c0)="54a9ed06bc5511b6b6fab6b1d1974932ecfe5353", 0x14, 0x8000000000000001}, {&(0x7f0000000240)="4409b7c5a160d71a5462370a33ba9ba142c01e921540962d50a73f3c8b5b670022782059f531534211d81a8c023a841b64e606099cae140b8203e384ab8d15cbee0fca3016904c437c74f73601a974e6059a4ee9cbde817f201140cff8090c7420020d4840e60dccc1", 0x69, 0x80000001}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="5e257b5c2c66736e616d653d7d40212c657569643cf74648bac50a2bbe8a4656f661b4d82895c9b980b2193cbdf1a27c190adc97f173772b68922a792ca61e3b022d7199df13e937ee8e3bd763206e38d40fa3485d53800f46099a4ce7ec9a94961da161", @ANYRESDEC=0x0, @ANYBLOB=',subj_type=vfat\x00,\x00']) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) utimensat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)={{}, {r1, r2/1000+60000}}, 0x0) syz_mount_image$jfs(&(0x7f0000000580), &(0x7f0000000740)='./file0\x00', 0x7, 0x3, &(0x7f0000000980)=[{&(0x7f0000000780)="91d0c50f294fdddb266b9f0c41d8064cb8e5d9cd8ba89fcb351274f6e149901c890ae1568c70caa90fa9e83bfc1ab9a0d525c4e5c0171f95a656c54f4dcd904f65680293ab812bc3ba014d970a2ae46d8319ed13c632c66a9d88270ab261c78155bf6d008810a68c40b3ecded5580b4188dc8244615a122441bcd715611000473600ea7e15e1d07e399aa60e9fb05ee2e8d1250a486213941349282498c9961f2565a2692fb78aa6", 0xa8, 0x400}, {&(0x7f0000000840)="bfa37d4ff4531cf6aa7e2ea81b369cc5202ab867d9ad61ef25f4f86b92d5bc89eaae269a802b54514c3b2cf4fb735e340aa86a797201670ec72045ad", 0x3c, 0x3}, {&(0x7f0000000880)="2e391ff35d63b4fcd104fdcc98150aa3958fd715ff374c1e95d88ee6d2177cd964d23ce3987c7c55c33b8eb71d4f2f0bba89fcf3eb516438bd2900fa6192c1a6f7ed47e4fd72e0f36eb7b65ae2954357fa00ae4ce64e9502dba8349171de895b88ddd56dd4921cda9a45ae00d26a1ff6af7546d2eda16babb64076926f658a9e17185ce909b5ab23e07fccf146232b6c0f40db914452fda60d6a1d7567380d32bffbee9c40306994a4bc8005bd12fc696c7a558d2844a1f19b61c77caf78440e6083a8bb35c1ceb1cb7ca5", 0xcb, 0x838a}], 0x8000, &(0x7f0000000a00)={[{@grpquota}, {@quota}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}], [{@audit}]}) 17:50:57 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xd00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:57 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x48, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:50:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 17:50:57 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 16) [ 753.524665][T21718] loop3: detected capacity change from 0 to 15 [ 753.525260][T21717] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 753.550630][T21719] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. 17:50:57 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4c, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 753.587898][T21719] FAULT_INJECTION: forcing a failure. [ 753.587898][T21719] name failslab, interval 1, probability 0, space 0, times 0 [ 753.619273][T21719] CPU: 1 PID: 21719 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 753.628087][T21719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.638162][T21719] Call Trace: [ 753.641459][T21719] [ 753.644400][T21719] dump_stack_lvl+0x1e3/0x2cb [ 753.649101][T21719] ? bfq_pos_tree_add_move+0x436/0x436 [ 753.654581][T21719] ? panic+0x76e/0x76e [ 753.658668][T21719] ? __might_sleep+0xc0/0xc0 [ 753.663302][T21719] should_fail+0x384/0x4b0 [ 753.667741][T21719] ? alloc_unbound_pwq+0x5df/0xf90 [ 753.672871][T21719] should_failslab+0x5/0x20 [ 753.677395][T21719] kmem_cache_alloc_node+0x6c/0x340 [ 753.682615][T21719] alloc_unbound_pwq+0x5df/0xf90 [ 753.687565][T21719] apply_wqattrs_prepare+0x3d4/0xc20 [ 753.692867][T21719] apply_workqueue_attrs+0xf2/0x700 [ 753.698063][T21719] alloc_workqueue+0xef3/0x1460 [ 753.702926][T21719] ? apply_workqueue_attrs+0x700/0x700 [ 753.708395][T21719] ieee802154_register_hw+0xae/0x690 [ 753.713671][T21719] ? hwsim_add_one+0x339/0x10f0 [ 753.718516][T21719] hwsim_add_one+0x42c/0x10f0 [ 753.723190][T21719] genl_rcv_msg+0xfbc/0x1490 [ 753.727795][T21719] ? genl_bind+0x380/0x380 [ 753.732567][T21719] ? arch_stack_walk+0xf8/0x140 [ 753.737447][T21719] ? mark_lock+0x98/0x350 [ 753.741788][T21719] ? __lock_acquire+0x129a/0x1f80 [ 753.746823][T21719] ? hulusb_set_txpower+0x160/0x160 [ 753.752030][T21719] netlink_rcv_skb+0x1f0/0x460 [ 753.756792][T21719] ? genl_bind+0x380/0x380 [ 753.761201][T21719] ? netlink_ack+0xb40/0xb40 [ 753.765791][T21719] ? __down_read_common+0x156/0x2a0 [ 753.770988][T21719] genl_rcv+0x24/0x40 [ 753.774957][T21719] netlink_unicast+0x7e7/0x9c0 [ 753.779719][T21719] ? netlink_detachskb+0xa0/0xa0 [ 753.784734][T21719] ? check_heap_object+0x13c/0x310 [ 753.789864][T21719] ? __phys_addr_symbol+0x2b/0x70 [ 753.794910][T21719] ? 0xffffffff81000000 [ 753.799070][T21719] ? __check_object_size+0x15a/0x210 [ 753.804361][T21719] ? bpf_lsm_netlink_send+0x5/0x10 [ 753.809480][T21719] netlink_sendmsg+0x9b3/0xcd0 [ 753.814262][T21719] ? netlink_getsockopt+0x9c0/0x9c0 [ 753.819472][T21719] ? __import_iovec+0x340/0x4e0 [ 753.824327][T21719] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 753.829616][T21719] ? security_socket_sendmsg+0x9d/0xb0 [ 753.835068][T21719] ? netlink_getsockopt+0x9c0/0x9c0 [ 753.840262][T21719] ____sys_sendmsg+0x597/0x8e0 [ 753.845028][T21719] ? __sys_sendmsg_sock+0x30/0x30 [ 753.850055][T21719] __sys_sendmsg+0x27e/0x370 [ 753.854644][T21719] ? ____sys_sendmsg+0x8e0/0x8e0 [ 753.859581][T21719] ? __context_tracking_exit+0x4d/0x80 [ 753.865042][T21719] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 753.871023][T21719] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 753.876998][T21719] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 753.882967][T21719] do_syscall_64+0x2b/0x70 [ 753.887373][T21719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.893256][T21719] RIP: 0033:0x7f5a582890e9 [ 753.898011][T21719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 753.917624][T21719] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.926030][T21719] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 753.933994][T21719] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 753.941953][T21719] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.949912][T21719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.957869][T21719] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 753.965846][T21719] 17:50:58 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 17) 17:50:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x40, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xffb}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) (async) r0 = syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000100)="0479b45002fa4ad1d349f184b69578d35a9d97673b9fd09e6db6b7e84b5fe0d3cace68d9998267974c4e6967db1f2c7664931a57342ae50061ff48cc133395f6b31325a64958d4f1d2337d7a36b9f05368e6a793432474d9fd5df7e77b4836b88b91d156cc0f332251d30ca8bb8f56324575fb0aa7e4574d910df4a37ca717a9ad665a0a05c88cb89b0d2fdc248c2a0bbdc4b085e1388ebf12fef10eb30dabfdcd352384a2413913b853e3cf2a5f00be60dae46617909748f4434c1575", 0xbd, 0x40}, {&(0x7f0000000340)="e1c8aceefb3ba00469cda385211ca5a6375150827769ab665f48497a08f2b5f6b58f6d9727536e9ab2eb79679c351b8674389fc8a2522b1f03ebedcbbe4049e7d2e5c5ac697482233e0cfe2b6782bbf2ea7efa232551dd2dd998aa55c80001ca82a47de51985894bd7fd2f351ea0af4669eacd41774c29d0a39608f6e7aad2298d34264b041134ca74e7859f031c2106f2f3fec5e58e733ef246c23fb319c3666bc604e4b8f6603ebf4a712e53b725d7a53e0cfd984659f4e2909e39eadcad358ca03b3b4e51b37112e99bee6539ab0e93d95a9750", 0xd5, 0x1}, {&(0x7f0000000440)="a4af3950835d044b7dfe895218313f4daf2853020daca63500cc6473b615fa7011c11a1277a0040edc035e82139ab4cb976f8e68cb11dbbbcf096bc5b460398f3fabaea1fb1bf9b944b49df669ad1b9b1b2b872cf1fd7c8fde79aa23a410ae8a42bbed78fa8b664019a8166baeabf929e74b4168154d9db8240f3dc6d2d45ad629a3138eb8da3b13dcaa8f016b8fad8cd7038afc8acf25ca4e0e7f57f01d89d7410fe21ef1d96403cb", 0xa9, 0x5}, {&(0x7f00000001c0)="54a9ed06bc5511b6b6fab6b1d1974932ecfe5353", 0x14, 0x8000000000000001}, {&(0x7f0000000240)="4409b7c5a160d71a5462370a33ba9ba142c01e921540962d50a73f3c8b5b670022782059f531534211d81a8c023a841b64e606099cae140b8203e384ab8d15cbee0fca3016904c437c74f73601a974e6059a4ee9cbde817f201140cff8090c7420020d4840e60dccc1", 0x69, 0x80000001}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="5e257b5c2c66736e616d653d7d40212c657569643cf74648bac50a2bbe8a4656f661b4d82895c9b980b2193cbdf1a27c190adc97f173772b68922a792ca61e3b022d7199df13e937ee8e3bd763206e38d40fa3485d53800f46099a4ce7ec9a94961da161", @ANYRESDEC=0x0, @ANYBLOB=',subj_type=vfat\x00,\x00']) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) utimensat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)={{}, {r1, r2/1000+60000}}, 0x0) (async) syz_mount_image$jfs(&(0x7f0000000580), &(0x7f0000000740)='./file0\x00', 0x7, 0x3, &(0x7f0000000980)=[{&(0x7f0000000780)="91d0c50f294fdddb266b9f0c41d8064cb8e5d9cd8ba89fcb351274f6e149901c890ae1568c70caa90fa9e83bfc1ab9a0d525c4e5c0171f95a656c54f4dcd904f65680293ab812bc3ba014d970a2ae46d8319ed13c632c66a9d88270ab261c78155bf6d008810a68c40b3ecded5580b4188dc8244615a122441bcd715611000473600ea7e15e1d07e399aa60e9fb05ee2e8d1250a486213941349282498c9961f2565a2692fb78aa6", 0xa8, 0x400}, {&(0x7f0000000840)="bfa37d4ff4531cf6aa7e2ea81b369cc5202ab867d9ad61ef25f4f86b92d5bc89eaae269a802b54514c3b2cf4fb735e340aa86a797201670ec72045ad", 0x3c, 0x3}, {&(0x7f0000000880)="2e391ff35d63b4fcd104fdcc98150aa3958fd715ff374c1e95d88ee6d2177cd964d23ce3987c7c55c33b8eb71d4f2f0bba89fcf3eb516438bd2900fa6192c1a6f7ed47e4fd72e0f36eb7b65ae2954357fa00ae4ce64e9502dba8349171de895b88ddd56dd4921cda9a45ae00d26a1ff6af7546d2eda16babb64076926f658a9e17185ce909b5ab23e07fccf146232b6c0f40db914452fda60d6a1d7567380d32bffbee9c40306994a4bc8005bd12fc696c7a558d2844a1f19b61c77caf78440e6083a8bb35c1ceb1cb7ca5", 0xcb, 0x838a}], 0x8000, &(0x7f0000000a00)={[{@grpquota}, {@quota}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}], [{@audit}]}) 17:50:58 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xe00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:50:58 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x60, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 754.025750][T21720] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.044843][T21726] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 754.131653][T21732] loop3: detected capacity change from 0 to 15 [ 754.135462][T21729] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 754.138016][ T3673] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 754.186486][T21729] FAULT_INJECTION: forcing a failure. [ 754.186486][T21729] name failslab, interval 1, probability 0, space 0, times 0 [ 754.236617][T21729] CPU: 0 PID: 21729 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 754.245427][T21729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.255492][T21729] Call Trace: [ 754.258781][T21729] [ 754.261716][T21729] dump_stack_lvl+0x1e3/0x2cb [ 754.266412][T21729] ? bfq_pos_tree_add_move+0x436/0x436 [ 754.271884][T21729] ? panic+0x76e/0x76e [ 754.275969][T21729] ? __might_sleep+0xc0/0xc0 [ 754.280584][T21729] should_fail+0x384/0x4b0 [ 754.285016][T21729] ? init_rescuer+0x93/0x290 [ 754.289618][T21729] should_failslab+0x5/0x20 [ 754.294131][T21729] kmem_cache_alloc_node_trace+0x6b/0x360 [ 754.299863][T21729] ? rcu_read_lock_bh_held+0x110/0x110 [ 754.305340][T21729] init_rescuer+0x93/0x290 [ 754.309774][T21729] alloc_workqueue+0xfd0/0x1460 [ 754.314663][T21729] ? apply_workqueue_attrs+0x700/0x700 [ 754.320148][T21729] ieee802154_register_hw+0xae/0x690 [ 754.325439][T21729] ? hwsim_add_one+0x339/0x10f0 [ 754.330303][T21729] hwsim_add_one+0x42c/0x10f0 [ 754.335000][T21729] genl_rcv_msg+0xfbc/0x1490 [ 754.339613][T21729] ? genl_bind+0x380/0x380 [ 754.344039][T21729] ? arch_stack_walk+0xf8/0x140 [ 754.348925][T21729] ? mark_lock+0x98/0x350 [ 754.353267][T21729] ? __lock_acquire+0x129a/0x1f80 [ 754.358310][T21729] ? hulusb_set_txpower+0x160/0x160 [ 754.363535][T21729] netlink_rcv_skb+0x1f0/0x460 [ 754.368313][T21729] ? genl_bind+0x380/0x380 [ 754.372738][T21729] ? netlink_ack+0xb40/0xb40 [ 754.377353][T21729] ? __down_read_common+0x156/0x2a0 [ 754.382566][T21729] genl_rcv+0x24/0x40 [ 754.386557][T21729] netlink_unicast+0x7e7/0x9c0 [ 754.391340][T21729] ? netlink_detachskb+0xa0/0xa0 [ 754.396286][T21729] ? check_heap_object+0x13c/0x310 [ 754.401414][T21729] ? __phys_addr_symbol+0x2b/0x70 [ 754.406452][T21729] ? 0xffffffff81000000 [ 754.410610][T21729] ? __check_object_size+0x15a/0x210 [ 754.415904][T21729] ? bpf_lsm_netlink_send+0x5/0x10 [ 754.421028][T21729] netlink_sendmsg+0x9b3/0xcd0 [ 754.425820][T21729] ? netlink_getsockopt+0x9c0/0x9c0 [ 754.431021][T21729] ? __import_iovec+0x340/0x4e0 [ 754.435887][T21729] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 754.441182][T21729] ? security_socket_sendmsg+0x9d/0xb0 [ 754.446654][T21729] ? netlink_getsockopt+0x9c0/0x9c0 [ 754.451867][T21729] ____sys_sendmsg+0x597/0x8e0 [ 754.456655][T21729] ? __sys_sendmsg_sock+0x30/0x30 [ 754.461704][T21729] __sys_sendmsg+0x27e/0x370 [ 754.466307][T21729] ? ____sys_sendmsg+0x8e0/0x8e0 [ 754.471269][T21729] ? __context_tracking_exit+0x4d/0x80 [ 754.476762][T21729] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 754.482765][T21729] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 754.488758][T21729] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 754.494754][T21729] do_syscall_64+0x2b/0x70 [ 754.499182][T21729] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 754.505093][T21729] RIP: 0033:0x7f5a582890e9 [ 754.509516][T21729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 754.529135][T21729] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 17:50:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x40, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xffb}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) (async) r0 = syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000100)="0479b45002fa4ad1d349f184b69578d35a9d97673b9fd09e6db6b7e84b5fe0d3cace68d9998267974c4e6967db1f2c7664931a57342ae50061ff48cc133395f6b31325a64958d4f1d2337d7a36b9f05368e6a793432474d9fd5df7e77b4836b88b91d156cc0f332251d30ca8bb8f56324575fb0aa7e4574d910df4a37ca717a9ad665a0a05c88cb89b0d2fdc248c2a0bbdc4b085e1388ebf12fef10eb30dabfdcd352384a2413913b853e3cf2a5f00be60dae46617909748f4434c1575", 0xbd, 0x40}, {&(0x7f0000000340)="e1c8aceefb3ba00469cda385211ca5a6375150827769ab665f48497a08f2b5f6b58f6d9727536e9ab2eb79679c351b8674389fc8a2522b1f03ebedcbbe4049e7d2e5c5ac697482233e0cfe2b6782bbf2ea7efa232551dd2dd998aa55c80001ca82a47de51985894bd7fd2f351ea0af4669eacd41774c29d0a39608f6e7aad2298d34264b041134ca74e7859f031c2106f2f3fec5e58e733ef246c23fb319c3666bc604e4b8f6603ebf4a712e53b725d7a53e0cfd984659f4e2909e39eadcad358ca03b3b4e51b37112e99bee6539ab0e93d95a9750", 0xd5, 0x1}, {&(0x7f0000000440)="a4af3950835d044b7dfe895218313f4daf2853020daca63500cc6473b615fa7011c11a1277a0040edc035e82139ab4cb976f8e68cb11dbbbcf096bc5b460398f3fabaea1fb1bf9b944b49df669ad1b9b1b2b872cf1fd7c8fde79aa23a410ae8a42bbed78fa8b664019a8166baeabf929e74b4168154d9db8240f3dc6d2d45ad629a3138eb8da3b13dcaa8f016b8fad8cd7038afc8acf25ca4e0e7f57f01d89d7410fe21ef1d96403cb", 0xa9, 0x5}, {&(0x7f00000001c0)="54a9ed06bc5511b6b6fab6b1d1974932ecfe5353", 0x14, 0x8000000000000001}, {&(0x7f0000000240)="4409b7c5a160d71a5462370a33ba9ba142c01e921540962d50a73f3c8b5b670022782059f531534211d81a8c023a841b64e606099cae140b8203e384ab8d15cbee0fca3016904c437c74f73601a974e6059a4ee9cbde817f201140cff8090c7420020d4840e60dccc1", 0x69, 0x80000001}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="5e257b5c2c66736e616d653d7d40212c657569643cf74648bac50a2bbe8a4656f661b4d82895c9b980b2193cbdf1a27c190adc97f173772b68922a792ca61e3b022d7199df13e937ee8e3bd763206e38d40fa3485d53800f46099a4ce7ec9a94961da161", @ANYRESDEC=0x0, @ANYBLOB=',subj_type=vfat\x00,\x00']) (async) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) utimensat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)={{}, {r1, r2/1000+60000}}, 0x0) (async) syz_mount_image$jfs(&(0x7f0000000580), &(0x7f0000000740)='./file0\x00', 0x7, 0x3, &(0x7f0000000980)=[{&(0x7f0000000780)="91d0c50f294fdddb266b9f0c41d8064cb8e5d9cd8ba89fcb351274f6e149901c890ae1568c70caa90fa9e83bfc1ab9a0d525c4e5c0171f95a656c54f4dcd904f65680293ab812bc3ba014d970a2ae46d8319ed13c632c66a9d88270ab261c78155bf6d008810a68c40b3ecded5580b4188dc8244615a122441bcd715611000473600ea7e15e1d07e399aa60e9fb05ee2e8d1250a486213941349282498c9961f2565a2692fb78aa6", 0xa8, 0x400}, {&(0x7f0000000840)="bfa37d4ff4531cf6aa7e2ea81b369cc5202ab867d9ad61ef25f4f86b92d5bc89eaae269a802b54514c3b2cf4fb735e340aa86a797201670ec72045ad", 0x3c, 0x3}, {&(0x7f0000000880)="2e391ff35d63b4fcd104fdcc98150aa3958fd715ff374c1e95d88ee6d2177cd964d23ce3987c7c55c33b8eb71d4f2f0bba89fcf3eb516438bd2900fa6192c1a6f7ed47e4fd72e0f36eb7b65ae2954357fa00ae4ce64e9502dba8349171de895b88ddd56dd4921cda9a45ae00d26a1ff6af7546d2eda16babb64076926f658a9e17185ce909b5ab23e07fccf146232b6c0f40db914452fda60d6a1d7567380d32bffbee9c40306994a4bc8005bd12fc696c7a558d2844a1f19b61c77caf78440e6083a8bb35c1ceb1cb7ca5", 0xcb, 0x838a}], 0x8000, &(0x7f0000000a00)={[{@grpquota}, {@quota}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}], [{@audit}]}) [ 754.537566][T21729] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 754.545545][T21729] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 754.553523][T21729] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 754.561500][T21729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.569480][T21729] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 754.577482][T21729] [ 754.705379][T21742] loop3: detected capacity change from 0 to 131 [ 754.722318][T21742] jfs: Unrecognized mount option "audit" or missing value [ 754.722690][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.748909][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.759114][ T3673] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 754.772443][ T3673] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 754.781497][ T3673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.274519][ T3673] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.004A/input/input67 [ 755.294241][ T3673] cm6533_jd 0003:0D8C:0022.004A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 755.477468][ T3673] usb 6-1: USB disconnect, device number 112 17:51:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:51:00 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x68, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:00 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1100, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 17:51:00 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 18) 17:51:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x8000000000000000}], 0xcb40296f0878dccc, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 756.012409][T21748] loop3: detected capacity change from 0 to 8192 [ 756.024450][T21750] FAULT_INJECTION: forcing a failure. [ 756.024450][T21750] name failslab, interval 1, probability 0, space 0, times 0 [ 756.083793][T21750] CPU: 1 PID: 21750 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 756.092590][T21750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.099529][ T4265] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 756.102667][T21750] Call Trace: [ 756.102677][T21750] [ 756.102686][T21750] dump_stack_lvl+0x1e3/0x2cb [ 756.102718][T21750] ? bfq_pos_tree_add_move+0x436/0x436 [ 756.102741][T21750] ? panic+0x76e/0x76e [ 756.102766][T21750] ? __might_sleep+0xc0/0xc0 [ 756.137456][T21750] ? lockdep_init_map_type+0x9d/0x8d0 [ 756.142864][T21750] should_fail+0x384/0x4b0 [ 756.147300][T21750] ? __kthread_create_on_node+0x106/0x520 [ 756.153033][T21750] should_failslab+0x5/0x20 [ 756.157551][T21750] kmem_cache_alloc_trace+0x68/0x310 [ 756.162856][T21750] ? rcu_free_pwq+0x20/0x20 [ 756.167373][T21750] ? rcu_free_pwq+0x20/0x20 [ 756.171892][T21750] __kthread_create_on_node+0x106/0x520 [ 756.177449][T21750] ? ____kasan_kmalloc+0xee/0x110 [ 756.182502][T21750] ? ____kasan_kmalloc+0xdc/0x110 [ 756.187548][T21750] ? kthread_create_on_node+0x120/0x120 [ 756.193118][T21750] ? netlink_unicast+0x7e7/0x9c0 [ 756.198099][T21750] ? rcu_free_pwq+0x20/0x20 [ 756.202631][T21750] kthread_create_on_node+0xda/0x120 [ 756.207940][T21750] ? tsk_fork_get_node+0x60/0x60 [ 756.212897][T21750] ? init_rescuer+0x93/0x290 [ 756.217496][T21750] ? kmem_cache_alloc_node_trace+0x23f/0x360 [ 756.223493][T21750] ? init_rescuer+0x93/0x290 [ 756.228114][T21750] init_rescuer+0x1a1/0x290 [ 756.232638][T21750] alloc_workqueue+0xfd0/0x1460 [ 756.237529][T21750] ? apply_workqueue_attrs+0x700/0x700 [ 756.243026][T21750] ieee802154_register_hw+0xae/0x690 [ 756.248322][T21750] ? hwsim_add_one+0x339/0x10f0 [ 756.253192][T21750] hwsim_add_one+0x42c/0x10f0 [ 756.257898][T21750] genl_rcv_msg+0xfbc/0x1490 [ 756.262512][T21750] ? genl_bind+0x380/0x380 [ 756.266940][T21750] ? arch_stack_walk+0xf8/0x140 [ 756.271827][T21750] ? mark_lock+0x98/0x350 [ 756.276172][T21750] ? __lock_acquire+0x129a/0x1f80 [ 756.281209][T21750] ? hulusb_set_txpower+0x160/0x160 [ 756.286431][T21750] netlink_rcv_skb+0x1f0/0x460 [ 756.291303][T21750] ? genl_bind+0x380/0x380 [ 756.295738][T21750] ? netlink_ack+0xb40/0xb40 [ 756.300361][T21750] ? __down_read_common+0x156/0x2a0 [ 756.305580][T21750] genl_rcv+0x24/0x40 [ 756.309579][T21750] netlink_unicast+0x7e7/0x9c0 [ 756.314371][T21750] ? netlink_detachskb+0xa0/0xa0 [ 756.319320][T21750] ? check_heap_object+0x13c/0x310 [ 756.324448][T21750] ? __phys_addr_symbol+0x2b/0x70 [ 756.329490][T21750] ? 0xffffffff81000000 17:51:00 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1200, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 756.333739][T21750] ? __check_object_size+0x15a/0x210 [ 756.339037][T21750] ? bpf_lsm_netlink_send+0x5/0x10 [ 756.344163][T21750] netlink_sendmsg+0x9b3/0xcd0 [ 756.348953][T21750] ? netlink_getsockopt+0x9c0/0x9c0 [ 756.354163][T21750] ? __import_iovec+0x340/0x4e0 [ 756.359036][T21750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 756.364333][T21750] ? security_socket_sendmsg+0x9d/0xb0 [ 756.369887][T21750] ? netlink_getsockopt+0x9c0/0x9c0 [ 756.375100][T21750] ____sys_sendmsg+0x597/0x8e0 [ 756.379891][T21750] ? __sys_sendmsg_sock+0x30/0x30 [ 756.384948][T21750] __sys_sendmsg+0x27e/0x370 [ 756.389566][T21750] ? ____sys_sendmsg+0x8e0/0x8e0 [ 756.394534][T21750] ? __context_tracking_exit+0x4d/0x80 [ 756.400022][T21750] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 756.406029][T21750] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 756.412031][T21750] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 756.418030][T21750] do_syscall_64+0x2b/0x70 [ 756.422470][T21750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 756.428380][T21750] RIP: 0033:0x7f5a582890e9 [ 756.432811][T21750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 756.452517][T21750] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.460953][T21750] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 756.468942][T21750] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 756.476927][T21750] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.484914][T21750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.492895][T21750] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 756.500901][T21750] 17:51:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x8000000000000000}], 0xcb40296f0878dccc, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 756.526503][T21752] __nla_validate_parse: 4 callbacks suppressed [ 756.526522][T21752] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:51:00 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6c, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:00 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 19) 17:51:00 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1800, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 756.592110][T21759] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 756.672853][T21761] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 756.682618][ T3673] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 756.707362][T21764] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. 17:51:00 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x74, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 756.712822][T21766] loop3: detected capacity change from 0 to 8192 [ 756.800648][T21764] FAULT_INJECTION: forcing a failure. [ 756.800648][T21764] name failslab, interval 1, probability 0, space 0, times 0 [ 756.836985][T21764] CPU: 1 PID: 21764 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 756.845800][T21764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.855874][T21764] Call Trace: [ 756.859175][T21764] [ 756.862120][T21764] dump_stack_lvl+0x1e3/0x2cb [ 756.866817][T21764] ? bfq_pos_tree_add_move+0x436/0x436 [ 756.872288][T21764] ? panic+0x76e/0x76e [ 756.876382][T21764] ? __might_sleep+0xc0/0xc0 [ 756.880988][T21764] ? __mutex_lock_common+0x465/0x26e0 [ 756.886382][T21764] should_fail+0x384/0x4b0 [ 756.890814][T21764] ? device_add+0xb6/0xf90 [ 756.895238][T21764] should_failslab+0x5/0x20 [ 756.899750][T21764] kmem_cache_alloc_trace+0x68/0x310 [ 756.905058][T21764] device_add+0xb6/0xf90 [ 756.909328][T21764] wpan_phy_register+0x28/0x100 [ 756.914234][T21764] ieee802154_register_hw+0x43e/0x690 [ 756.919628][T21764] hwsim_add_one+0x42c/0x10f0 [ 756.924333][T21764] genl_rcv_msg+0xfbc/0x1490 [ 756.928951][T21764] ? genl_bind+0x380/0x380 [ 756.933378][T21764] ? get_partial_node+0x252/0x280 [ 756.938440][T21764] ? mark_lock+0x98/0x350 [ 756.942783][T21764] ? __lock_acquire+0x129a/0x1f80 [ 756.947815][T21764] ? hulusb_set_txpower+0x160/0x160 [ 756.953019][T21764] netlink_rcv_skb+0x1f0/0x460 [ 756.957779][T21764] ? genl_bind+0x380/0x380 [ 756.962195][T21764] ? netlink_ack+0xb40/0xb40 [ 756.966794][T21764] ? __down_read_common+0x156/0x2a0 [ 756.971994][T21764] genl_rcv+0x24/0x40 [ 756.975970][T21764] netlink_unicast+0x7e7/0x9c0 [ 756.980758][T21764] ? netlink_detachskb+0xa0/0xa0 [ 756.985685][T21764] ? check_heap_object+0x13c/0x310 [ 756.990792][T21764] ? __phys_addr_symbol+0x2b/0x70 [ 756.995808][T21764] ? 0xffffffff81000000 [ 756.999950][T21764] ? __check_object_size+0x15a/0x210 [ 757.005224][T21764] ? bpf_lsm_netlink_send+0x5/0x10 [ 757.010332][T21764] netlink_sendmsg+0x9b3/0xcd0 [ 757.015107][T21764] ? netlink_getsockopt+0x9c0/0x9c0 [ 757.020297][T21764] ? __import_iovec+0x340/0x4e0 [ 757.025149][T21764] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 757.030428][T21764] ? security_socket_sendmsg+0x9d/0xb0 [ 757.035876][T21764] ? netlink_getsockopt+0x9c0/0x9c0 [ 757.041066][T21764] ____sys_sendmsg+0x597/0x8e0 [ 757.045830][T21764] ? __sys_sendmsg_sock+0x30/0x30 [ 757.050860][T21764] __sys_sendmsg+0x27e/0x370 [ 757.055442][T21764] ? ____sys_sendmsg+0x8e0/0x8e0 [ 757.060388][T21764] ? __context_tracking_exit+0x4d/0x80 [ 757.065850][T21764] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 757.071837][T21764] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 757.077812][T21764] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 757.083783][T21764] do_syscall_64+0x2b/0x70 [ 757.088191][T21764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 757.094072][T21764] RIP: 0033:0x7f5a582890e9 [ 757.098480][T21764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 757.118077][T21764] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.126497][T21764] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 757.134459][T21764] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 757.142424][T21764] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.150383][T21764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.158345][T21764] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 757.166330][T21764] [ 757.180429][T21769] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 757.208516][T21772] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 757.372023][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.383121][ T3673] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.393072][ T3673] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 757.406048][ T3673] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 757.415198][ T3673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.915391][ T3673] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.004B/input/input68 [ 757.930327][ T3673] cm6533_jd 0003:0D8C:0022.004B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 758.123110][ T3673] usb 6-1: USB disconnect, device number 113 17:51:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) 17:51:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x8000000000000000}], 0xcb40296f0878dccc, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:51:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 17:51:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1aae, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:02 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x7a, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:02 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 20) [ 758.676700][T21783] loop3: detected capacity change from 0 to 8192 [ 758.687837][T21782] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:51:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2000, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 758.719541][T21779] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.737171][T21781] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. 17:51:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x6b) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:51:02 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x300, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 758.780741][T21781] FAULT_INJECTION: forcing a failure. [ 758.780741][T21781] name failslab, interval 1, probability 0, space 0, times 0 [ 758.836452][T21781] CPU: 1 PID: 21781 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 758.845269][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.855340][T21781] Call Trace: [ 758.858630][T21781] [ 758.861573][T21781] dump_stack_lvl+0x1e3/0x2cb [ 758.866276][T21781] ? bfq_pos_tree_add_move+0x436/0x436 [ 758.871753][T21781] ? panic+0x76e/0x76e [ 758.875848][T21781] ? __might_sleep+0xc0/0xc0 [ 758.880463][T21781] should_fail+0x384/0x4b0 [ 758.884904][T21781] ? __kernfs_new_node+0x99/0x730 [ 758.890006][T21781] should_failslab+0x5/0x20 [ 758.894525][T21781] __kmalloc_track_caller+0x89/0x350 [ 758.899820][T21781] ? mark_lock+0x98/0x350 [ 758.904178][T21781] kstrdup_const+0x51/0x90 [ 758.908655][T21781] __kernfs_new_node+0x99/0x730 [ 758.913515][T21781] ? kobject_add_internal+0x49f/0xd10 [ 758.918885][T21781] ? rcu_read_lock_sched_held+0x89/0x130 [ 758.924508][T21781] ? kernfs_new_node+0x160/0x160 [ 758.929466][T21781] kernfs_create_dir_ns+0x90/0x220 [ 758.934577][T21781] sysfs_create_dir_ns+0x181/0x390 [ 758.939690][T21781] ? sysfs_warn_dup+0xa0/0xa0 [ 758.944374][T21781] kobject_add_internal+0x6dd/0xd10 [ 758.949582][T21781] kobject_add+0x14c/0x210 [ 758.953997][T21781] ? device_add+0x3d6/0xf90 [ 758.958488][T21781] ? kobject_init+0x1d0/0x1d0 [ 758.963161][T21781] ? get_device_parent+0x2cd/0x430 [ 758.968265][T21781] device_add+0x47d/0xf90 [ 758.972593][T21781] wpan_phy_register+0x28/0x100 [ 758.977457][T21781] ieee802154_register_hw+0x43e/0x690 [ 758.982829][T21781] hwsim_add_one+0x42c/0x10f0 [ 758.987508][T21781] genl_rcv_msg+0xfbc/0x1490 [ 758.992097][T21781] ? genl_bind+0x380/0x380 [ 758.996503][T21781] ? arch_stack_walk+0xf8/0x140 [ 759.001357][T21781] ? mark_lock+0x98/0x350 [ 759.005684][T21781] ? __lock_acquire+0x129a/0x1f80 [ 759.010707][T21781] ? hulusb_set_txpower+0x160/0x160 [ 759.015909][T21781] netlink_rcv_skb+0x1f0/0x460 [ 759.020671][T21781] ? genl_bind+0x380/0x380 [ 759.025079][T21781] ? netlink_ack+0xb40/0xb40 [ 759.029671][T21781] ? __down_read_common+0x156/0x2a0 [ 759.034865][T21781] genl_rcv+0x24/0x40 [ 759.038838][T21781] netlink_unicast+0x7e7/0x9c0 [ 759.043601][T21781] ? netlink_detachskb+0xa0/0xa0 [ 759.048524][T21781] ? check_heap_object+0x13c/0x310 [ 759.053629][T21781] ? __phys_addr_symbol+0x2b/0x70 [ 759.058649][T21781] ? 0xffffffff81000000 [ 759.062798][T21781] ? __check_object_size+0x15a/0x210 [ 759.068103][T21781] ? bpf_lsm_netlink_send+0x5/0x10 [ 759.073209][T21781] netlink_sendmsg+0x9b3/0xcd0 [ 759.077974][T21781] ? netlink_getsockopt+0x9c0/0x9c0 [ 759.083161][T21781] ? __import_iovec+0x340/0x4e0 [ 759.088009][T21781] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 759.093284][T21781] ? security_socket_sendmsg+0x9d/0xb0 [ 759.098729][T21781] ? netlink_getsockopt+0x9c0/0x9c0 [ 759.103915][T21781] ____sys_sendmsg+0x597/0x8e0 [ 759.108676][T21781] ? __sys_sendmsg_sock+0x30/0x30 [ 759.113704][T21781] __sys_sendmsg+0x27e/0x370 [ 759.118285][T21781] ? ____sys_sendmsg+0x8e0/0x8e0 [ 759.123220][T21781] ? __context_tracking_exit+0x4d/0x80 [ 759.128679][T21781] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 759.134664][T21781] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 759.140633][T21781] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 759.146609][T21781] do_syscall_64+0x2b/0x70 [ 759.151021][T21781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.156903][T21781] RIP: 0033:0x7f5a582890e9 [ 759.161309][T21781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 759.180903][T21781] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.189310][T21781] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 759.197272][T21781] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 759.205234][T21781] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.213192][T21781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.221151][T21781] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 759.229124][T21781] [ 759.236132][T21790] loop3: detected capacity change from 0 to 15 [ 759.258367][T21781] kobject_add_internal failed for phy20 (error: -12 parent: ieee802154) 17:51:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x6b) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 759.302030][ T3676] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 759.398040][T21795] loop3: detected capacity change from 0 to 15 17:51:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async, rerun: 32) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 32) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x6b) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:51:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 21) [ 759.479346][T21787] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 759.556850][T21799] loop3: detected capacity change from 0 to 15 [ 759.620482][T21803] FAULT_INJECTION: forcing a failure. [ 759.620482][T21803] name failslab, interval 1, probability 0, space 0, times 0 [ 759.634940][T21803] CPU: 0 PID: 21803 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 759.643731][T21803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.653792][T21803] Call Trace: [ 759.657079][T21803] [ 759.660014][T21803] dump_stack_lvl+0x1e3/0x2cb [ 759.664706][T21803] ? bfq_pos_tree_add_move+0x436/0x436 [ 759.670153][T21803] ? panic+0x76e/0x76e [ 759.674210][T21803] ? __might_sleep+0xc0/0xc0 [ 759.678789][T21803] should_fail+0x384/0x4b0 [ 759.683194][T21803] ? __kernfs_new_node+0x99/0x730 [ 759.688197][T21803] should_failslab+0x5/0x20 [ 759.692686][T21803] __kmalloc_track_caller+0x89/0x350 [ 759.697981][T21803] ? mark_lock+0x98/0x350 [ 759.702320][T21803] kstrdup_const+0x51/0x90 [ 759.706724][T21803] __kernfs_new_node+0x99/0x730 [ 759.711559][T21803] ? kobject_add_internal+0x49f/0xd10 [ 759.716914][T21803] ? rcu_read_lock_sched_held+0x89/0x130 [ 759.722527][T21803] ? kernfs_new_node+0x160/0x160 [ 759.727463][T21803] kernfs_create_dir_ns+0x90/0x220 [ 759.732563][T21803] sysfs_create_dir_ns+0x181/0x390 [ 759.737667][T21803] ? sysfs_warn_dup+0xa0/0xa0 [ 759.742349][T21803] kobject_add_internal+0x6dd/0xd10 [ 759.747573][T21803] kobject_add+0x14c/0x210 [ 759.752016][T21803] ? device_add+0x3d6/0xf90 [ 759.756526][T21803] ? kobject_init+0x1d0/0x1d0 [ 759.761194][T21803] ? get_device_parent+0x2cd/0x430 [ 759.766291][T21803] device_add+0x47d/0xf90 [ 759.770615][T21803] wpan_phy_register+0x28/0x100 [ 759.775451][T21803] ieee802154_register_hw+0x43e/0x690 [ 759.780808][T21803] hwsim_add_one+0x42c/0x10f0 [ 759.785476][T21803] genl_rcv_msg+0xfbc/0x1490 [ 759.790056][T21803] ? genl_bind+0x380/0x380 [ 759.794459][T21803] ? arch_stack_walk+0xf8/0x140 [ 759.799322][T21803] ? mark_lock+0x98/0x350 [ 759.803636][T21803] ? __lock_acquire+0x129a/0x1f80 [ 759.808767][T21803] ? hulusb_set_txpower+0x160/0x160 [ 759.813969][T21803] netlink_rcv_skb+0x1f0/0x460 [ 759.818732][T21803] ? genl_bind+0x380/0x380 [ 759.823142][T21803] ? netlink_ack+0xb40/0xb40 [ 759.827730][T21803] ? __down_read_common+0x156/0x2a0 [ 759.832928][T21803] genl_rcv+0x24/0x40 [ 759.836907][T21803] netlink_unicast+0x7e7/0x9c0 [ 759.841668][T21803] ? netlink_detachskb+0xa0/0xa0 [ 759.846603][T21803] ? check_heap_object+0x13c/0x310 [ 759.851739][T21803] ? __phys_addr_symbol+0x2b/0x70 [ 759.856773][T21803] ? 0xffffffff81000000 [ 759.860929][T21803] ? __check_object_size+0x15a/0x210 [ 759.866202][T21803] ? bpf_lsm_netlink_send+0x5/0x10 [ 759.871303][T21803] netlink_sendmsg+0x9b3/0xcd0 [ 759.876070][T21803] ? netlink_getsockopt+0x9c0/0x9c0 [ 759.881284][T21803] ? __import_iovec+0x340/0x4e0 [ 759.886145][T21803] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 759.891420][T21803] ? security_socket_sendmsg+0x9d/0xb0 [ 759.896875][T21803] ? netlink_getsockopt+0x9c0/0x9c0 [ 759.902089][T21803] ____sys_sendmsg+0x597/0x8e0 [ 759.906845][T21803] ? __sys_sendmsg_sock+0x30/0x30 [ 759.911871][T21803] __sys_sendmsg+0x27e/0x370 [ 759.916454][T21803] ? ____sys_sendmsg+0x8e0/0x8e0 [ 759.921381][T21803] ? __context_tracking_exit+0x4d/0x80 [ 759.926831][T21803] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 759.932803][T21803] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 759.938774][T21803] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 759.944747][T21803] do_syscall_64+0x2b/0x70 [ 759.949174][T21803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.955067][T21803] RIP: 0033:0x7f5a582890e9 [ 759.959471][T21803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 759.979143][T21803] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.987535][T21803] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 759.995493][T21803] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 760.003469][T21803] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.011424][T21803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.019376][T21803] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 760.027340][T21803] [ 760.044195][T21799] loop3: detected capacity change from 0 to 15 [ 760.049931][T21803] kobject_add_internal failed for phy21 (error: -12 parent: ieee802154) [ 760.072114][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.090631][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.109682][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.123085][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 760.132236][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.153792][T21799] loop3: detected capacity change from 0 to 15 [ 760.221715][T21799] loop3: detected capacity change from 0 to 15 [ 760.294318][T21799] loop3: detected capacity change from 0 to 15 [ 760.371688][T21799] loop3: detected capacity change from 0 to 15 [ 760.625655][ T3676] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.004C/input/input69 [ 760.667391][ T3676] cm6533_jd 0003:0D8C:0022.004C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 760.827561][ T3676] usb 6-1: USB disconnect, device number 114 17:51:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) 17:51:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x500, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 17:51:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2100, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 22) 17:51:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0]) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x1) [ 761.374034][T21813] loop3: detected capacity change from 0 to 15 [ 761.382227][T21811] FAULT_INJECTION: forcing a failure. [ 761.382227][T21811] name failslab, interval 1, probability 0, space 0, times 0 [ 761.399695][T21811] CPU: 0 PID: 21811 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 761.408489][T21811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.418559][T21811] Call Trace: 17:51:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x600, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 761.421852][T21811] [ 761.424795][T21811] dump_stack_lvl+0x1e3/0x2cb [ 761.429492][T21811] ? bfq_pos_tree_add_move+0x436/0x436 [ 761.434966][T21811] ? panic+0x76e/0x76e [ 761.439050][T21811] ? __might_sleep+0xc0/0xc0 [ 761.443649][T21811] ? __radix_tree_preload+0x444/0x4c0 [ 761.449032][T21811] ? __kernfs_new_node+0xdb/0x730 [ 761.449098][T21813] FAT-fs (loop3): Unrecognized mount option "00000000000000000003" or missing value [ 761.454067][T21811] should_fail+0x384/0x4b0 [ 761.454100][T21811] ? __kernfs_new_node+0xdb/0x730 [ 761.454120][T21811] should_failslab+0x5/0x20 [ 761.454141][T21811] kmem_cache_alloc+0x69/0x2f0 [ 761.454168][T21811] __kernfs_new_node+0xdb/0x730 [ 761.454199][T21811] ? kernfs_new_node+0x160/0x160 [ 761.454217][T21811] ? mark_lock+0x98/0x350 [ 761.454244][T21811] ? acpi_device_notify+0x1f3/0x380 [ 761.454354][T21811] ? rcu_read_lock_sched_held+0x89/0x130 [ 761.454375][T21811] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 761.454400][T21811] kernfs_new_node+0x95/0x160 [ 761.454426][T21811] __kernfs_create_file+0x45/0x2e0 [ 761.454452][T21811] sysfs_add_file_mode_ns+0x21d/0x330 [ 761.454486][T21811] sysfs_create_file_ns+0x18e/0x290 [ 761.454507][T21811] ? up_read+0x20/0x20 [ 761.454530][T21811] ? sysfs_add_bin_file_mode_ns+0x230/0x230 [ 761.454554][T21811] ? dev_fwnode+0x4c/0x80 [ 761.547756][T21811] device_add+0x569/0xf90 [ 761.552113][T21811] wpan_phy_register+0x28/0x100 [ 761.556966][T21811] ieee802154_register_hw+0x43e/0x690 [ 761.562337][T21811] hwsim_add_one+0x42c/0x10f0 [ 761.567020][T21811] genl_rcv_msg+0xfbc/0x1490 [ 761.571615][T21811] ? genl_bind+0x380/0x380 [ 761.576024][T21811] ? arch_stack_walk+0xf8/0x140 [ 761.580887][T21811] ? mark_lock+0x98/0x350 [ 761.585210][T21811] ? __lock_acquire+0x129a/0x1f80 [ 761.590226][T21811] ? hulusb_set_txpower+0x160/0x160 [ 761.595445][T21811] netlink_rcv_skb+0x1f0/0x460 [ 761.600216][T21811] ? genl_bind+0x380/0x380 [ 761.604644][T21811] ? netlink_ack+0xb40/0xb40 [ 761.609241][T21811] ? __down_read_common+0x156/0x2a0 [ 761.614536][T21811] genl_rcv+0x24/0x40 [ 761.618539][T21811] netlink_unicast+0x7e7/0x9c0 [ 761.623320][T21811] ? netlink_detachskb+0xa0/0xa0 [ 761.628253][T21811] ? check_heap_object+0x13c/0x310 [ 761.633362][T21811] ? __phys_addr_symbol+0x2b/0x70 [ 761.638383][T21811] ? 0xffffffff81000000 [ 761.642530][T21811] ? __check_object_size+0x15a/0x210 [ 761.647802][T21811] ? bpf_lsm_netlink_send+0x5/0x10 [ 761.652909][T21811] netlink_sendmsg+0x9b3/0xcd0 [ 761.657675][T21811] ? netlink_getsockopt+0x9c0/0x9c0 [ 761.662862][T21811] ? __import_iovec+0x340/0x4e0 [ 761.667709][T21811] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 761.672982][T21811] ? security_socket_sendmsg+0x9d/0xb0 [ 761.678439][T21811] ? netlink_getsockopt+0x9c0/0x9c0 [ 761.683668][T21811] ____sys_sendmsg+0x597/0x8e0 [ 761.688433][T21811] ? __sys_sendmsg_sock+0x30/0x30 [ 761.693460][T21811] __sys_sendmsg+0x27e/0x370 [ 761.698041][T21811] ? ____sys_sendmsg+0x8e0/0x8e0 [ 761.702990][T21811] ? __context_tracking_exit+0x4d/0x80 [ 761.708463][T21811] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 761.714450][T21811] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 761.720420][T21811] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 761.726396][T21811] do_syscall_64+0x2b/0x70 [ 761.730812][T21811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 761.736697][T21811] RIP: 0033:0x7f5a582890e9 [ 761.741121][T21811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 761.760715][T21811] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.769119][T21811] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 761.777077][T21811] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 761.785034][T21811] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 761.792998][T21811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 761.800980][T21811] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 761.808974][T21811] [ 761.825568][T21816] __nla_validate_parse: 4 callbacks suppressed [ 761.825585][T21816] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:51:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0]) (async) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x1) 17:51:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 23) 17:51:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2500, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 761.875655][ T27] audit: type=1804 audit(1650304266.025:19): pid=21813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir87964196/syzkaller.k7qOxG/1217/file0/file0" dev="sda1" ino=1169 res=1 errno=0 [ 761.900541][T21821] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:51:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x700, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 761.954886][T21823] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.968755][T21823] FAULT_INJECTION: forcing a failure. [ 761.968755][T21823] name failslab, interval 1, probability 0, space 0, times 0 [ 761.972093][ T3676] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 761.984104][T21823] CPU: 1 PID: 21823 Comm: syz-executor.4 Not tainted 5.18.0-rc3-syzkaller #0 [ 761.997943][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.008009][T21823] Call Trace: [ 762.011296][T21823] [ 762.014233][T21823] dump_stack_lvl+0x1e3/0x2cb [ 762.018930][T21823] ? bfq_pos_tree_add_move+0x436/0x436 [ 762.024413][T21823] ? panic+0x76e/0x76e [ 762.028501][T21823] ? __might_sleep+0xc0/0xc0 [ 762.033102][T21823] ? __radix_tree_preload+0x444/0x4c0 [ 762.038494][T21823] ? __kernfs_new_node+0xdb/0x730 [ 762.043536][T21823] should_fail+0x384/0x4b0 [ 762.047970][T21823] ? __kernfs_new_node+0xdb/0x730 [ 762.053001][T21823] should_failslab+0x5/0x20 [ 762.057511][T21823] kmem_cache_alloc+0x69/0x2f0 [ 762.062298][T21823] __kernfs_new_node+0xdb/0x730 [ 762.067171][T21823] ? kernfs_new_node+0x160/0x160 [ 762.072115][T21823] ? mark_lock+0x98/0x350 [ 762.076463][T21823] ? acpi_device_notify+0x1f3/0x380 [ 762.081675][T21823] ? rcu_read_lock_sched_held+0x89/0x130 [ 762.087317][T21823] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 762.093305][T21823] kernfs_new_node+0x95/0x160 [ 762.098002][T21823] __kernfs_create_file+0x45/0x2e0 [ 762.103128][T21823] sysfs_add_file_mode_ns+0x21d/0x330 [ 762.108520][T21823] sysfs_create_file_ns+0x18e/0x290 [ 762.113730][T21823] ? up_read+0x20/0x20 [ 762.117832][T21823] ? sysfs_add_bin_file_mode_ns+0x230/0x230 [ 762.123740][T21823] ? dev_fwnode+0x4c/0x80 [ 762.128198][T21823] device_add+0x569/0xf90 [ 762.132549][T21823] wpan_phy_register+0x28/0x100 [ 762.137409][T21823] ieee802154_register_hw+0x43e/0x690 [ 762.142796][T21823] hwsim_add_one+0x42c/0x10f0 [ 762.147499][T21823] genl_rcv_msg+0xfbc/0x1490 [ 762.152108][T21823] ? genl_bind+0x380/0x380 [ 762.156525][T21823] ? get_partial_node+0x252/0x280 [ 762.161582][T21823] ? mark_lock+0x98/0x350 [ 762.165921][T21823] ? __lock_acquire+0x129a/0x1f80 [ 762.170977][T21823] ? hulusb_set_txpower+0x160/0x160 [ 762.176209][T21823] netlink_rcv_skb+0x1f0/0x460 [ 762.180987][T21823] ? genl_bind+0x380/0x380 [ 762.185421][T21823] ? netlink_ack+0xb40/0xb40 [ 762.190056][T21823] ? __down_read_common+0x156/0x2a0 [ 762.195362][T21823] genl_rcv+0x24/0x40 [ 762.199356][T21823] netlink_unicast+0x7e7/0x9c0 [ 762.204145][T21823] ? netlink_detachskb+0xa0/0xa0 [ 762.209107][T21823] ? check_heap_object+0x13c/0x310 [ 762.214234][T21823] ? __phys_addr_symbol+0x2b/0x70 [ 762.219273][T21823] ? 0xffffffff81000000 [ 762.223698][T21823] ? __check_object_size+0x15a/0x210 [ 762.229004][T21823] ? bpf_lsm_netlink_send+0x5/0x10 [ 762.234141][T21823] netlink_sendmsg+0x9b3/0xcd0 [ 762.238935][T21823] ? netlink_getsockopt+0x9c0/0x9c0 [ 762.244142][T21823] ? __import_iovec+0x340/0x4e0 [ 762.249009][T21823] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 762.254313][T21823] ? security_socket_sendmsg+0x9d/0xb0 [ 762.259780][T21823] ? netlink_getsockopt+0x9c0/0x9c0 [ 762.264993][T21823] ____sys_sendmsg+0x597/0x8e0 [ 762.269786][T21823] ? __sys_sendmsg_sock+0x30/0x30 [ 762.274835][T21823] __sys_sendmsg+0x27e/0x370 [ 762.279435][T21823] ? ____sys_sendmsg+0x8e0/0x8e0 [ 762.284395][T21823] ? __context_tracking_exit+0x4d/0x80 [ 762.289881][T21823] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 762.295898][T21823] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 762.301891][T21823] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 762.307879][T21823] do_syscall_64+0x2b/0x70 [ 762.312305][T21823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 762.318207][T21823] RIP: 0033:0x7f5a582890e9 [ 762.322642][T21823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 762.342255][T21823] RSP: 002b:00007f5a571fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.350684][T21823] RAX: ffffffffffffffda RBX: 00007f5a5839bf60 RCX: 00007f5a582890e9 [ 762.358661][T21823] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 762.366636][T21823] RBP: 00007f5a571fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 762.374613][T21823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 762.382590][T21823] R13: 00007ffe511441ef R14: 00007f5a571fe300 R15: 0000000000022000 [ 762.390681][T21823] [ 762.394683][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.422851][T21831] loop3: detected capacity change from 0 to 15 [ 762.426162][T21829] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 762.445838][T21831] FAT-fs (loop3): Unrecognized mount option "00000000000000000003" or missing value 17:51:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x900, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 762.476875][T21828] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.506440][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.516310][T21834] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 762.551183][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 762.556154][ T27] audit: type=1804 audit(1650304266.695:20): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir87964196/syzkaller.k7qOxG/1218/file0/file0" dev="sda1" ino=1160 res=1 errno=0 [ 762.565522][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 762.645728][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.134514][ T3676] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.004D/input/input70 [ 763.150089][ T3676] cm6533_jd 0003:0D8C:0022.004D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 763.336569][ T3673] usb 6-1: USB disconnect, device number 115 17:51:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) 17:51:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 17:51:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) (fail_nth: 24) 17:51:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xa00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4000, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0]) chdir(&(0x7f0000000040)='./file0\x00') (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x1) [ 763.865987][T21840] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 763.866430][T21841] loop3: detected capacity change from 0 to 15 17:51:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xb00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4800, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 763.907884][T21841] FAT-fs (loop3): Unrecognized mount option "00000000000000000003" or missing value [ 763.945294][T21838] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 763.986971][ T27] audit: type=1804 audit(1650304268.135:21): pid=21848 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir87964196/syzkaller.k7qOxG/1219/file0/file0" dev="sda1" ino=1182 res=1 errno=0 17:51:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xa, 0xd}, {0xa, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r4, @ANYRES32=r1]) chdir(&(0x7f0000000040)='./file0\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000002580)=ANY=[], 0x16) [ 764.088282][T21854] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:51:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xb8e, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4c00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 764.135997][T21853] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.169860][T21857] loop3: detected capacity change from 0 to 15 [ 764.222203][ T918] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 764.248474][T21857] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff0177777777777777777777700000000000000000000003" or missing value [ 764.642062][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.653080][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.662935][ T918] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 764.675921][ T918] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 764.685214][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.195015][ T918] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.004E/input/input71 [ 765.211284][ T918] cm6533_jd 0003:0D8C:0022.004E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 765.398757][ T918] usb 6-1: USB disconnect, device number 116 17:51:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:51:10 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xc00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6000, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xa, 0xd}, {0xa, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r4, @ANYRES32=r1]) chdir(&(0x7f0000000040)='./file0\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000002580)=ANY=[], 0x16) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xa, 0xd}, {0xa, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r4, @ANYRES32=r1]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) write$P9_RREADLINK(r6, &(0x7f0000002580)=ANY=[], 0x16) (async) 17:51:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 17:51:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xd00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6800, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) [ 765.943098][T21874] loop3: detected capacity change from 0 to 15 [ 765.979434][T21874] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff0177777777777777777777700000000000000000000003" or missing value 17:51:10 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xa, 0xd}, {0xa, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r4, @ANYRES32=r1]) chdir(&(0x7f0000000040)='./file0\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000002580)=ANY=[], 0x16) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xa, 0xd}, {0xa, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r4, @ANYRES32=r1]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) write$P9_RREADLINK(r6, &(0x7f0000002580)=ANY=[], 0x16) (async) 17:51:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6c00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xe00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 766.261914][ T3676] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 766.364926][T21894] loop3: detected capacity change from 0 to 15 [ 766.410659][T21894] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff0177777777777777777777700000000000000000000003" or missing value [ 766.662834][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.677978][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.689009][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 766.702441][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 766.711497][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.205698][ T3676] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.004F/input/input72 [ 767.221729][ T3676] cm6533_jd 0003:0D8C:0022.004F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 767.406334][ T3673] usb 6-1: USB disconnect, device number 117 17:51:12 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:51:12 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1100, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:12 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x3, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) 17:51:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x7400, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) [ 767.951109][T21912] __nla_validate_parse: 11 callbacks suppressed [ 767.951127][T21912] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 767.975081][T21914] FAT-fs (loop3): bogus number of reserved sectors [ 767.981630][T21914] FAT-fs (loop3): Can't find a valid FAT filesystem 17:51:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x7a00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) [ 768.013252][T21909] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:51:12 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1200, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 768.062310][T21916] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 768.109783][T21921] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 17:51:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xae1a, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:12 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 768.160923][T21924] FAT-fs (loop3): bogus number of reserved sectors [ 768.246165][T21924] FAT-fs (loop3): Can't find a valid FAT filesystem [ 768.266973][T21930] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 768.302120][ T918] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 768.320365][T21929] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. 17:51:12 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1800, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 768.358305][T21932] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 768.484582][T21935] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 768.682211][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.693841][ T918] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.703767][ T918] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 768.716641][ T918] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 768.725768][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.214040][ T918] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0050/input/input73 [ 769.230326][ T918] cm6533_jd 0003:0D8C:0022.0050: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 769.415605][ T3676] usb 6-1: USB disconnect, device number 118 17:51:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) 17:51:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x800080, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (async) 17:51:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xe20b, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:14 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1c73, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:14 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x5, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) (fail_nth: 1) 17:51:14 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 769.949200][T21942] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 769.979671][T21941] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 769.984426][T21943] FAT-fs (loop3): bogus number of reserved sectors [ 770.022590][T21943] FAT-fs (loop3): Can't find a valid FAT filesystem 17:51:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x30000, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:14 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2000, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 770.072339][T21948] FAULT_INJECTION: forcing a failure. [ 770.072339][T21948] name failslab, interval 1, probability 0, space 0, times 0 [ 770.113979][T21948] CPU: 0 PID: 21948 Comm: syz-executor.0 Not tainted 5.18.0-rc3-syzkaller #0 [ 770.122819][T21948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.132882][T21948] Call Trace: [ 770.136167][T21948] [ 770.139099][T21948] dump_stack_lvl+0x1e3/0x2cb [ 770.143794][T21948] ? bfq_pos_tree_add_move+0x436/0x436 [ 770.149267][T21948] ? panic+0x76e/0x76e [ 770.153352][T21948] ? __might_sleep+0xc0/0xc0 [ 770.157956][T21948] ? rcu_read_lock_sched_held+0x89/0x130 [ 770.163616][T21948] should_fail+0x384/0x4b0 [ 770.168053][T21948] ? tomoyo_realpath_from_path+0xd8/0x5f0 [ 770.173786][T21948] should_failslab+0x5/0x20 [ 770.178290][T21948] __kmalloc+0x8b/0x370 [ 770.182440][T21948] ? kfree+0x2f/0x210 [ 770.186409][T21948] ? rcu_read_lock_sched_held+0x89/0x130 [ 770.192119][T21948] tomoyo_realpath_from_path+0xd8/0x5f0 [ 770.197664][T21948] tomoyo_path_number_perm+0x219/0x7b0 [ 770.203118][T21948] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 770.208600][T21948] ? __fget_files+0x3d0/0x440 [ 770.213269][T21948] security_file_ioctl+0x55/0xb0 [ 770.218204][T21948] __se_sys_ioctl+0x48/0x170 [ 770.222789][T21948] do_syscall_64+0x2b/0x70 [ 770.227200][T21948] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 770.233082][T21948] RIP: 0033:0x7f1ac8a890e9 [ 770.237485][T21948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:51:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f00000001c0)="04b419d816d64960a242ccfa0afa55db9fea0ce0abb31110d7975ef679a32c559c92618418ebfcf0", 0x28, 0x9}, {&(0x7f0000000240)="7029f77658768f91741150df44fd1b1e86888a8ced8bd819f51ed7486a5f551f1f5f0444a7a7d9411c3ee6436e64e7f5e186c7e8dc334a459efb20aa794a51ab81fd", 0x42, 0x8000000000000000}, {&(0x7f0000000340)="98a0c18b636a317fd9026532288c1a712c607ee7cad77509093628e931d344d8a8d7b1988602f3f195b2960f63a07b86ce4235bd61fb4eddc63acd4e3dfe9e9414069f0fac962aa3bfa03c57673262356c8768f16a2124b0a261bc50360cefee32e319acff4041ea1ef1b152aae10c70827a4f281e85aa5c5fad0a", 0x7b, 0x8}, {&(0x7f00000003c0)="6e9091a7b0f759d773a73e946409f68fab635d4da90124e27d61cc0b85a9a2504a313df9404c926ace0e7a6ae993c7ed62aef8ae5a7b993e35a1e85e01f7d0d1a6e1f3e9f5f29a42403f23278ae9c56b7c38b95432fd7d56facf2caffde4b9777131118841b7bea9594c8c29765804ca888ba009668d3753b9938c41f4e301af89ca3d5c60824baa3f4d931751aa0fec673e4ddea09ed66fe4a6f2404a142c1c94aa2221067ac0e14226e07caa55a03da1a78c4b79e5bc32e41a72e7bc3b83decfb0df79ebcc28eb9849fc451de587d096b4424ce68c94eed9af90cfcaf3fea2669f0b", 0xe3, 0x1}, {&(0x7f00000004c0)="e1d48334672ddc2bd9c8f50ab1cbbdeacf39a8f35015d618cd005855764042cd553ad3ecfcbf40ebb275fef8230a4e745891690d0799fabee2ea223296a7a1acd88251d6f01964f77124d44af85764539d3e9d499a69142eb1ab1998e299ec2aa2fcff7ec9a8e35b7e1296e60f6c2221f1db00b6c1d8021161be094bd6942c4430cff2c9dfc372c60db0724e976a5d6a5c63c0d54f7d6db5e03c9cc7124f3eb6847e5b390a2519cc3a", 0xa9, 0x9}, {&(0x7f0000000580)="c1a56831ef0c0786c4d5682d8b6148fd9c1017937e8c72b4ca81254a2268ba83431e63edc304249688121362c1ef7c29b96d0866b5cd307a31dd3e2fc8c37865a315c0b686485cfa1e73cbc08efa21023baa41f7547c8a317681239b106f705c7c25ad2b0c18c6632dcdb98abc47db218a4bc0773686d238131bde1f90448e80cbf4cfe7f39ccfed81dc19bd985f62b5a7bac7d694708b65df079bc49353f8d8b8c87184ba0ac56438b30ef23ba9a90f34aaaf20c4e99133b45c087845ecf1d0cdb0336f62373874032e09efbe831360b6", 0xd1, 0x7}], 0x20000, &(0x7f0000000740)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {}, {}, {@file_umask={'file_umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "d7d446f6"}}], [{@measure}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, 'security.capability\x00'}}, {@appraise_type}]}) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x7fffffff, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000880)="e683863175ad99f5d10bf0bd833c0b38e3f47bb447acba7667b84c90c5a0ef9f4ab57b83096aad5009163e986ed7925f8ada08110c7cf5bfcfa2ee86a9d8be11a22f73a0134285bf6d13e927ac527dfce47d529550d9277b4e68adc052aea7b276bca0624d08478643550536b2b1ffe8060b288e8bc5e9d956b88a50113a6868aeac710ff28572aec579fb0f967f72e1e14bbffcd9ad3cfcd9b297359f2d2dbdbfbef9947949dc9e00359a025e340cb17fb988b9470ba19d302fa322eaea01272dfa0cf76bf11f63ec8f402b1e4b813d56d5cf", 0xd3, 0xfffffffffffffffd}, {&(0x7f0000000980)="2167d49497f55c1db91616729091f1d7e0dd127cd39acff272922313043fd3ee0b851f4c17685b3c3df238f80250079f7da67fe341a97aafcb6244a063d5947db7ca34af59d04d51e611ab6d90c5e5260170023cb7b199f3310788c6e75a2f2f0bd3d52b6a3a4c14d9d2b1e526afdbaa744b7f41ec9d0478713c245a193d", 0x7e, 0xeec}], 0x2043000, &(0x7f0000000a40)={[{@fat=@quiet}, {@dots}, {@fat=@errors_remount}, {@fat=@flush}], [{@hash}, {@appraise_type}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x8}]}, 0xc, 0x1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) chdir(&(0x7f0000000a80)='./file0\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b40)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) creat(&(0x7f0000000ac0)='./file0\x00', 0x100) [ 770.257078][T21948] RSP: 002b:00007f1ac9b9b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.265479][T21948] RAX: ffffffffffffffda RBX: 00007f1ac8b9c030 RCX: 00007f1ac8a890e9 [ 770.273438][T21948] RDX: 00000000200000c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 770.281397][T21948] RBP: 00007f1ac9b9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.289353][T21948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.297313][T21948] R13: 00007ffc1a42554f R14: 00007f1ac9b9b300 R15: 0000000000022000 [ 770.305287][T21948] 17:51:14 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2100, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:14 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x7, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 770.427428][T21962] loop3: detected capacity change from 0 to 15 [ 770.454589][T21948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 770.592096][ T3676] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 770.962096][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.973038][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.982927][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 770.996444][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 771.005571][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.495455][ T3676] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/0003:0D8C:0022.0051/input/input74 [ 771.511744][ T3676] cm6533_jd 0003:0D8C:0022.0051: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 771.697292][ T3746] usb 6-1: USB disconnect, device number 119 17:51:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) (fail_nth: 2) 17:51:16 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x34000, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x2500, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f00000001c0)="04b419d816d64960a242ccfa0afa55db9fea0ce0abb31110d7975ef679a32c559c92618418ebfcf0", 0x28, 0x9}, {&(0x7f0000000240)="7029f77658768f91741150df44fd1b1e86888a8ced8bd819f51ed7486a5f551f1f5f0444a7a7d9411c3ee6436e64e7f5e186c7e8dc334a459efb20aa794a51ab81fd", 0x42, 0x8000000000000000}, {&(0x7f0000000340)="98a0c18b636a317fd9026532288c1a712c607ee7cad77509093628e931d344d8a8d7b1988602f3f195b2960f63a07b86ce4235bd61fb4eddc63acd4e3dfe9e9414069f0fac962aa3bfa03c57673262356c8768f16a2124b0a261bc50360cefee32e319acff4041ea1ef1b152aae10c70827a4f281e85aa5c5fad0a", 0x7b, 0x8}, {&(0x7f00000003c0)="6e9091a7b0f759d773a73e946409f68fab635d4da90124e27d61cc0b85a9a2504a313df9404c926ace0e7a6ae993c7ed62aef8ae5a7b993e35a1e85e01f7d0d1a6e1f3e9f5f29a42403f23278ae9c56b7c38b95432fd7d56facf2caffde4b9777131118841b7bea9594c8c29765804ca888ba009668d3753b9938c41f4e301af89ca3d5c60824baa3f4d931751aa0fec673e4ddea09ed66fe4a6f2404a142c1c94aa2221067ac0e14226e07caa55a03da1a78c4b79e5bc32e41a72e7bc3b83decfb0df79ebcc28eb9849fc451de587d096b4424ce68c94eed9af90cfcaf3fea2669f0b", 0xe3, 0x1}, {&(0x7f00000004c0)="e1d48334672ddc2bd9c8f50ab1cbbdeacf39a8f35015d618cd005855764042cd553ad3ecfcbf40ebb275fef8230a4e745891690d0799fabee2ea223296a7a1acd88251d6f01964f77124d44af85764539d3e9d499a69142eb1ab1998e299ec2aa2fcff7ec9a8e35b7e1296e60f6c2221f1db00b6c1d8021161be094bd6942c4430cff2c9dfc372c60db0724e976a5d6a5c63c0d54f7d6db5e03c9cc7124f3eb6847e5b390a2519cc3a", 0xa9, 0x9}, {&(0x7f0000000580)="c1a56831ef0c0786c4d5682d8b6148fd9c1017937e8c72b4ca81254a2268ba83431e63edc304249688121362c1ef7c29b96d0866b5cd307a31dd3e2fc8c37865a315c0b686485cfa1e73cbc08efa21023baa41f7547c8a317681239b106f705c7c25ad2b0c18c6632dcdb98abc47db218a4bc0773686d238131bde1f90448e80cbf4cfe7f39ccfed81dc19bd985f62b5a7bac7d694708b65df079bc49353f8d8b8c87184ba0ac56438b30ef23ba9a90f34aaaf20c4e99133b45c087845ecf1d0cdb0336f62373874032e09efbe831360b6", 0xd1, 0x7}], 0x20000, &(0x7f0000000740)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {}, {}, {@file_umask={'file_umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "d7d446f6"}}], [{@measure}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, 'security.capability\x00'}}, {@appraise_type}]}) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x7fffffff, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000880)="e683863175ad99f5d10bf0bd833c0b38e3f47bb447acba7667b84c90c5a0ef9f4ab57b83096aad5009163e986ed7925f8ada08110c7cf5bfcfa2ee86a9d8be11a22f73a0134285bf6d13e927ac527dfce47d529550d9277b4e68adc052aea7b276bca0624d08478643550536b2b1ffe8060b288e8bc5e9d956b88a50113a6868aeac710ff28572aec579fb0f967f72e1e14bbffcd9ad3cfcd9b297359f2d2dbdbfbef9947949dc9e00359a025e340cb17fb988b9470ba19d302fa322eaea01272dfa0cf76bf11f63ec8f402b1e4b813d56d5cf", 0xd3, 0xfffffffffffffffd}, {&(0x7f0000000980)="2167d49497f55c1db91616729091f1d7e0dd127cd39acff272922313043fd3ee0b851f4c17685b3c3df238f80250079f7da67fe341a97aafcb6244a063d5947db7ca34af59d04d51e611ab6d90c5e5260170023cb7b199f3310788c6e75a2f2f0bd3d52b6a3a4c14d9d2b1e526afdbaa744b7f41ec9d0478713c245a193d", 0x7e, 0xeec}], 0x2043000, &(0x7f0000000a40)={[{@fat=@quiet}, {@dots}, {@fat=@errors_remount}, {@fat=@flush}], [{@hash}, {@appraise_type}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x8}]}, 0xc, 0x1) (async) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) chdir(&(0x7f0000000a80)='./file0\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b40)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x100) 17:51:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0x9, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x8, "22a4da25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, "eea55c2e684e01e97ef8b775a3b1c3474a9da279478a00"}) (fail_nth: 1) [ 772.245759][T21976] loop3: detected capacity change from 0 to 15 17:51:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x400300, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4000, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 772.314276][T21982] FAULT_INJECTION: forcing a failure. [ 772.314276][T21982] name failslab, interval 1, probability 0, space 0, times 0 17:51:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4800, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f00000001c0)="04b419d816d64960a242ccfa0afa55db9fea0ce0abb31110d7975ef679a32c559c92618418ebfcf0", 0x28, 0x9}, {&(0x7f0000000240)="7029f77658768f91741150df44fd1b1e86888a8ced8bd819f51ed7486a5f551f1f5f0444a7a7d9411c3ee6436e64e7f5e186c7e8dc334a459efb20aa794a51ab81fd", 0x42, 0x8000000000000000}, {&(0x7f0000000340)="98a0c18b636a317fd9026532288c1a712c607ee7cad77509093628e931d344d8a8d7b1988602f3f195b2960f63a07b86ce4235bd61fb4eddc63acd4e3dfe9e9414069f0fac962aa3bfa03c57673262356c8768f16a2124b0a261bc50360cefee32e319acff4041ea1ef1b152aae10c70827a4f281e85aa5c5fad0a", 0x7b, 0x8}, {&(0x7f00000003c0)="6e9091a7b0f759d773a73e946409f68fab635d4da90124e27d61cc0b85a9a2504a313df9404c926ace0e7a6ae993c7ed62aef8ae5a7b993e35a1e85e01f7d0d1a6e1f3e9f5f29a42403f23278ae9c56b7c38b95432fd7d56facf2caffde4b9777131118841b7bea9594c8c29765804ca888ba009668d3753b9938c41f4e301af89ca3d5c60824baa3f4d931751aa0fec673e4ddea09ed66fe4a6f2404a142c1c94aa2221067ac0e14226e07caa55a03da1a78c4b79e5bc32e41a72e7bc3b83decfb0df79ebcc28eb9849fc451de587d096b4424ce68c94eed9af90cfcaf3fea2669f0b", 0xe3, 0x1}, {&(0x7f00000004c0)="e1d48334672ddc2bd9c8f50ab1cbbdeacf39a8f35015d618cd005855764042cd553ad3ecfcbf40ebb275fef8230a4e745891690d0799fabee2ea223296a7a1acd88251d6f01964f77124d44af85764539d3e9d499a69142eb1ab1998e299ec2aa2fcff7ec9a8e35b7e1296e60f6c2221f1db00b6c1d8021161be094bd6942c4430cff2c9dfc372c60db0724e976a5d6a5c63c0d54f7d6db5e03c9cc7124f3eb6847e5b390a2519cc3a", 0xa9, 0x9}, {&(0x7f0000000580)="c1a56831ef0c0786c4d5682d8b6148fd9c1017937e8c72b4ca81254a2268ba83431e63edc304249688121362c1ef7c29b96d0866b5cd307a31dd3e2fc8c37865a315c0b686485cfa1e73cbc08efa21023baa41f7547c8a317681239b106f705c7c25ad2b0c18c6632dcdb98abc47db218a4bc0773686d238131bde1f90448e80cbf4cfe7f39ccfed81dc19bd985f62b5a7bac7d694708b65df079bc49353f8d8b8c87184ba0ac56438b30ef23ba9a90f34aaaf20c4e99133b45c087845ecf1d0cdb0336f62373874032e09efbe831360b6", 0xd1, 0x7}], 0x20000, &(0x7f0000000740)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {}, {}, {@file_umask={'file_umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "d7d446f6"}}], [{@measure}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, 'security.capability\x00'}}, {@appraise_type}]}) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x7fffffff, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000880)="e683863175ad99f5d10bf0bd833c0b38e3f47bb447acba7667b84c90c5a0ef9f4ab57b83096aad5009163e986ed7925f8ada08110c7cf5bfcfa2ee86a9d8be11a22f73a0134285bf6d13e927ac527dfce47d529550d9277b4e68adc052aea7b276bca0624d08478643550536b2b1ffe8060b288e8bc5e9d956b88a50113a6868aeac710ff28572aec579fb0f967f72e1e14bbffcd9ad3cfcd9b297359f2d2dbdbfbef9947949dc9e00359a025e340cb17fb988b9470ba19d302fa322eaea01272dfa0cf76bf11f63ec8f402b1e4b813d56d5cf", 0xd3, 0xfffffffffffffffd}, {&(0x7f0000000980)="2167d49497f55c1db91616729091f1d7e0dd127cd39acff272922313043fd3ee0b851f4c17685b3c3df238f80250079f7da67fe341a97aafcb6244a063d5947db7ca34af59d04d51e611ab6d90c5e5260170023cb7b199f3310788c6e75a2f2f0bd3d52b6a3a4c14d9d2b1e526afdbaa744b7f41ec9d0478713c245a193d", 0x7e, 0xeec}], 0x2043000, &(0x7f0000000a40)={[{@fat=@quiet}, {@dots}, {@fat=@errors_remount}, {@fat=@flush}], [{@hash}, {@appraise_type}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x8}]}, 0xc, 0x1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) chdir(&(0x7f0000000a80)='./file0\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b40)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) creat(&(0x7f0000000ac0)='./file0\x00', 0x100) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) (async) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f00000001c0)="04b419d816d64960a242ccfa0afa55db9fea0ce0abb31110d7975ef679a32c559c92618418ebfcf0", 0x28, 0x9}, {&(0x7f0000000240)="7029f77658768f91741150df44fd1b1e86888a8ced8bd819f51ed7486a5f551f1f5f0444a7a7d9411c3ee6436e64e7f5e186c7e8dc334a459efb20aa794a51ab81fd", 0x42, 0x8000000000000000}, {&(0x7f0000000340)="98a0c18b636a317fd9026532288c1a712c607ee7cad77509093628e931d344d8a8d7b1988602f3f195b2960f63a07b86ce4235bd61fb4eddc63acd4e3dfe9e9414069f0fac962aa3bfa03c57673262356c8768f16a2124b0a261bc50360cefee32e319acff4041ea1ef1b152aae10c70827a4f281e85aa5c5fad0a", 0x7b, 0x8}, {&(0x7f00000003c0)="6e9091a7b0f759d773a73e946409f68fab635d4da90124e27d61cc0b85a9a2504a313df9404c926ace0e7a6ae993c7ed62aef8ae5a7b993e35a1e85e01f7d0d1a6e1f3e9f5f29a42403f23278ae9c56b7c38b95432fd7d56facf2caffde4b9777131118841b7bea9594c8c29765804ca888ba009668d3753b9938c41f4e301af89ca3d5c60824baa3f4d931751aa0fec673e4ddea09ed66fe4a6f2404a142c1c94aa2221067ac0e14226e07caa55a03da1a78c4b79e5bc32e41a72e7bc3b83decfb0df79ebcc28eb9849fc451de587d096b4424ce68c94eed9af90cfcaf3fea2669f0b", 0xe3, 0x1}, {&(0x7f00000004c0)="e1d48334672ddc2bd9c8f50ab1cbbdeacf39a8f35015d618cd005855764042cd553ad3ecfcbf40ebb275fef8230a4e745891690d0799fabee2ea223296a7a1acd88251d6f01964f77124d44af85764539d3e9d499a69142eb1ab1998e299ec2aa2fcff7ec9a8e35b7e1296e60f6c2221f1db00b6c1d8021161be094bd6942c4430cff2c9dfc372c60db0724e976a5d6a5c63c0d54f7d6db5e03c9cc7124f3eb6847e5b390a2519cc3a", 0xa9, 0x9}, {&(0x7f0000000580)="c1a56831ef0c0786c4d5682d8b6148fd9c1017937e8c72b4ca81254a2268ba83431e63edc304249688121362c1ef7c29b96d0866b5cd307a31dd3e2fc8c37865a315c0b686485cfa1e73cbc08efa21023baa41f7547c8a317681239b106f705c7c25ad2b0c18c6632dcdb98abc47db218a4bc0773686d238131bde1f90448e80cbf4cfe7f39ccfed81dc19bd985f62b5a7bac7d694708b65df079bc49353f8d8b8c87184ba0ac56438b30ef23ba9a90f34aaaf20c4e99133b45c087845ecf1d0cdb0336f62373874032e09efbe831360b6", 0xd1, 0x7}], 0x20000, &(0x7f0000000740)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {}, {}, {@file_umask={'file_umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "d7d446f6"}}], [{@measure}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, 'security.capability\x00'}}, {@appraise_type}]}) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x7fffffff, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000880)="e683863175ad99f5d10bf0bd833c0b38e3f47bb447acba7667b84c90c5a0ef9f4ab57b83096aad5009163e986ed7925f8ada08110c7cf5bfcfa2ee86a9d8be11a22f73a0134285bf6d13e927ac527dfce47d529550d9277b4e68adc052aea7b276bca0624d08478643550536b2b1ffe8060b288e8bc5e9d956b88a50113a6868aeac710ff28572aec579fb0f967f72e1e14bbffcd9ad3cfcd9b297359f2d2dbdbfbef9947949dc9e00359a025e340cb17fb988b9470ba19d302fa322eaea01272dfa0cf76bf11f63ec8f402b1e4b813d56d5cf", 0xd3, 0xfffffffffffffffd}, {&(0x7f0000000980)="2167d49497f55c1db91616729091f1d7e0dd127cd39acff272922313043fd3ee0b851f4c17685b3c3df238f80250079f7da67fe341a97aafcb6244a063d5947db7ca34af59d04d51e611ab6d90c5e5260170023cb7b199f3310788c6e75a2f2f0bd3d52b6a3a4c14d9d2b1e526afdbaa744b7f41ec9d0478713c245a193d", 0x7e, 0xeec}], 0x2043000, &(0x7f0000000a40)={[{@fat=@quiet}, {@dots}, {@fat=@errors_remount}, {@fat=@flush}], [{@hash}, {@appraise_type}]}) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x8}]}, 0xc, 0x1) (async) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) (async) chdir(&(0x7f0000000a80)='./file0\x00') (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000b40)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x100) (async) 17:51:16 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x9, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 772.384357][T21982] CPU: 1 PID: 21982 Comm: syz-executor.0 Not tainted 5.18.0-rc3-syzkaller #0 [ 772.393160][T21982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.403232][T21982] Call Trace: [ 772.406518][T21982] [ 772.409455][T21982] dump_stack_lvl+0x1e3/0x2cb [ 772.414151][T21982] ? bfq_pos_tree_add_move+0x436/0x436 [ 772.419622][T21982] ? panic+0x76e/0x76e [ 772.423709][T21982] ? tomoyo_get_local_path+0x654/0x7a0 [ 772.429186][T21982] should_fail+0x384/0x4b0 [ 772.433624][T21982] ? tomoyo_encode+0x26f/0x540 [ 772.438398][T21982] should_failslab+0x5/0x20 [ 772.442914][T21982] __kmalloc+0x8b/0x370 [ 772.447091][T21982] tomoyo_encode+0x26f/0x540 [ 772.451704][T21982] tomoyo_realpath_from_path+0x5b4/0x5f0 [ 772.457453][T21982] tomoyo_path_number_perm+0x219/0x7b0 [ 772.462939][T21982] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 772.468457][T21982] ? __fget_files+0x3d0/0x440 [ 772.473151][T21982] security_file_ioctl+0x55/0xb0 [ 772.478100][T21982] __se_sys_ioctl+0x48/0x170 [ 772.482703][T21982] do_syscall_64+0x2b/0x70 [ 772.487131][T21982] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 772.493024][T21982] RIP: 0033:0x7f1ac8a890e9 [ 772.497431][T21982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 772.517023][T21982] RSP: 002b:00007f1ac9b9b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.525427][T21982] RAX: ffffffffffffffda RBX: 00007f1ac8b9c030 RCX: 00007f1ac8a890e9 [ 772.533391][T21982] RDX: 00000000200000c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 772.541353][T21982] RBP: 00007f1ac9b9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.549313][T21982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.557269][T21982] R13: 00007ffc1a42554f R14: 00007f1ac9b9b300 R15: 0000000000022000 [ 772.565262][T21982] 17:51:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x4c00, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) [ 772.634125][ T3676] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 772.673640][T21995] loop3: detected capacity change from 0 to 15 [ 772.682002][T21982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 773.011975][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.023052][ T3676] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.032950][ T3676] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 773.046301][ T3676] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 17:51:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000000000003a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) (fail_nth: 3) 17:51:17 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xe0ffff, &(0x7f0000000800)=[{&(0x7f0000000140)={0x118, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0915111"]}]}, 0x118}], 0x1}, 0x0) 17:51:17 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xa, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:17 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x6000, &(0x7f0000000800)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd70265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091"]}]}, 0x114}], 0x1}, 0x0) 17:51:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x800080, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x2, 0x6, 0x1f, 0xe7, "d29f062dedc1c592547a820b94391af51986c1c34042578366770c620fb4293cd5eb6e9cf3481dee48bd4300dcb140116ffd70a81b18bd357dff892e771731", 0x1b}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)="128c65acba72bdf98a1a468dfef2f20b363cc2042e1b83554d72d21e4014c31a216c4e4253286f2335ed1ed6192b242eb709dafd665cbc9a007f8392e6a4cd8be353e438040cbeeee94335c90b1bc47aa9f457fbee7a09b9db8f0a275f55424e26be5d2d96a8586a49e2b6d05c347deb69af800413878b", 0x77}, {&(0x7f0000000180)="f4a07aa8d1b6b2cba90a1f5d", 0xc}, {&(0x7f0000000240)="e723664b4ca9dabdba83156218376b51d2ce6e1430411a1d10cb0c30b26b319c4e4711d47d6ef36cb0257d07c8918fa6a754f593c5d8dfa9140f87d7a246cc347f76ca60c5c8ef7de03fa1eb99aea14008cee1df87b20a9af74d10db5636e2e3da8e13ab097e88e962", 0x69}, {&(0x7f0000000340)="96e63ffc3f23bda526e4fc20f1020cae27122ff0dd3f2ce833e62a57ef9ee17f5442af6c1c3d5a913dc5e017bb5b0f1b9776c09340aaca21911c6398c8ec3284fda21fee9832be39efc0a2e6813d8a5737aa0e80122af023ab8af38d545521efb6a5b120f0cbfcb0664af3867dc9836529c61d92ae40f04e0f31ecc2723e9f1934acd0db850611e9992e04895addf8cc32d3c31bbf7b31b5bafb5efafb306b1392c3aee685a23414875d305a254a734413e3baf88372530d75cf559f8b96d135285a3aa5e7eb0d7bd7bf7220f2c7c88cfa194dab20a6af5d9bb750d90c81f64052a9dfe653447f1e344cd0c1935b", 0xee}, {&(0x7f00000001c0)="5df6aac543a86a7054b19b3ebe51cf9ae392a482004709a366982ef48832a4bf40b4e6b5d50fe3ec9a59df7a0b", 0x2d}], 0x5, &(0x7f00000004c0)=[{0x80, 0x112, 0x8, "36eb29b9d799db0372ad5f95ddf8b5d242266f844bf182e55d8689c8b9694f5f63747a2c43f4fa13c80ab0eff3b7ee4ad05d996f3f696e70373b6acce676239c80f3001093acb02fcc667ec9eea27181304881f89ee97f148f64cc8005122a525911b491c78957e2bd"}, {0x68, 0x10a, 0x5, "445589cdd4439f5261d68346dfb2df343477d281adf11b4fad4fd9010724b12038ee4dccbe4903aad2a950c3f614fcb82d798d92a31c5bb74742f9c32821a0f6db50183f0059a0c021572e526a1c8316a054b56d13c609ba"}], 0xe8}, 0x4000000) [ 773.055502][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.108768][T22011] loop3: detected capacity change from 0 to 15 [ 773.109501][T22012] __nla_validate_parse: 12 callbacks suppressed [ 773.109516][T22012] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 773.139263][T22014] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 773.161260][T22013] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 773.312207][T22018] FAULT_INJECTION: forcing a failure. [ 773.312207][T22018] name failslab, interval 1, probability 0, space 0, times 0 [ 773.312555][T22018] [ 773.312561][T22018] ======================================================