954] 15:25:56 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd6027e13d004c2f00fc02000000000000000000000100fe8000000000000000000000000000bb"], 0x0) 15:25:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5410, 0x0) 15:25:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af60, &(0x7f0000000040)) 15:25:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='oom_score_adj\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ppoll(&(0x7f0000000400)=[{}, {r1}, {r2}, {r0}], 0x4, &(0x7f0000000480), 0x0, 0x0) 15:25:56 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'gre0\x00', 0x0}) 15:25:56 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000080)=""/184, &(0x7f0000000140)=0xb8) 15:25:56 executing program 4: syz_emit_ethernet(0x96, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast, {[@rr={0x7, 0x17, 0x7f, [@loopback, @empty, @rand_addr, @dev, @multicast1]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast, {[@generic={0x0, 0x6, "fa765874"}, @rr={0x7, 0x27, 0x0, [@empty, @remote, @rand_addr, @rand_addr, @private, @empty, @multicast2, @loopback, @multicast2]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @empty, @local]}, @noop]}}}}}}}, 0x0) 15:25:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x7f, 0x5}) 15:25:56 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='&-\xd4}$\'+{^\xc8.:\x00') 15:25:56 executing program 0: bpf$ITER_CREATE(0x16, 0x0, 0x0) 15:25:56 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 15:25:56 executing program 3: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x83, 0x0, 0xfffffffd}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 15:25:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_snmp6\x00') write$char_usb(r0, 0x0, 0x0) 15:25:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x7f, 0x5}) 15:25:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0xfffffffffffffeea}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) 15:25:56 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 15:25:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3c, 0x0, &(0x7f0000000040)) 15:25:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x7f, 0x5}) [ 959.546939][T31008] ptrace attach of "/root/syz-executor.3"[31007] was attempted by "/root/syz-executor.3"[31008] 15:25:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)='\xa2\x1f{\'\x00') 15:25:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfb, &(0x7f0000000000)) 15:25:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xa, &(0x7f0000000040)=@framed={{}, [@btf_id, @initr0, @jmp, @map_val]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:25:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8917, &(0x7f0000004c40)={0x0, @in={0x2, 0x0, @multicast1}, @can, @l2tp}) [ 959.641688][T31015] __nla_validate_parse: 1 callbacks suppressed [ 959.652234][T31015] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 959.681840][T31023] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:25:57 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x414101, 0x0) 15:25:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x31, 0x0, &(0x7f0000000340)) 15:25:57 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0}, {&(0x7f0000011d00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000011f00)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x6011e0}, {&(0x7f0000012300)="000000000000000000000000000000000000000000120000000510ec", 0x1c, 0x601320}, {&(0x7f0000012400)="00000014000000020c60", 0xa, 0x601380}, {&(0x7f0000012a00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012b00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}, {&(0x7f0000012e00)="0000000000000000000001000000010000000002000000010000000003000000013c", 0x22, 0xc00000}, {&(0x7f0000014300)="ed4100005cf90100535f010003000000001000000000000002", 0x19, 0x3c01000}, {&(0x7f0000014500)="00000000000000000300000003", 0xd, 0x3c01fe0}], 0x0, &(0x7f0000014900)) 15:25:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0xfffffffffffffeea}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) 15:25:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0189436, &(0x7f0000000000)) 15:25:57 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@volatile, @datasec={0x0, 0xc, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "d6"}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @const, @enum]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:25:57 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x414101, 0x0) 15:25:57 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f00000000c0)) [ 959.903685][T31041] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:25:57 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 15:25:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, "ed0115f80d79014c"}) 15:25:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0xfffffffffffffeea}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) 15:25:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 959.994624][T31048] ptrace attach of "/root/syz-executor.2"[31045] was attempted by "/root/syz-executor.2"[31048] 15:25:57 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x414101, 0x0) 15:25:57 executing program 2: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x2, &(0x7f00000003c0)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 960.067564][T31056] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:25:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1000000}, 0x20) 15:25:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0xfffffffffffffeea}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) 15:25:57 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='oom_score_adj\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x8000000) 15:25:57 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x414101, 0x0) 15:25:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x3, 0x0, &(0x7f0000000240)) [ 960.259955][T31071] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:25:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000080)) [ 960.325387][T12495] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 960.425431][ T8899] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 960.595386][T12495] usb 4-1: Using ep0 maxpacket: 8 [ 960.685693][ T8899] usb 3-1: Using ep0 maxpacket: 8 [ 960.735464][T12495] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 960.745047][T12495] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 960.755861][T12495] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 960.885475][ T8899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.897375][ T8899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 960.945803][T12495] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 960.955245][T12495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.964315][T12495] usb 4-1: Product: syz [ 960.969373][T12495] usb 4-1: Manufacturer: syz [ 960.974388][T12495] usb 4-1: SerialNumber: syz [ 961.145557][ T8899] usb 3-1: string descriptor 0 read error: -22 [ 961.152331][ T8899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 961.162317][ T8899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.325420][T12495] usb 4-1: 0:2 : does not exist [ 961.334973][ T8899] usb 3-1: 0:2 : does not exist [ 961.335750][T12495] usb 4-1: USB disconnect, device number 35 [ 961.407466][ T8899] usb 3-1: USB disconnect, device number 48 [ 962.015314][ T9635] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 962.175357][ T8899] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 962.265770][ T9635] usb 4-1: Using ep0 maxpacket: 8 [ 962.395351][ T9635] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 962.404867][ T9635] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 962.415311][ T8899] usb 3-1: Using ep0 maxpacket: 8 [ 962.416361][ T9635] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.605361][ T9635] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.615701][ T8899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.617331][ T9635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.626377][ T8899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.635747][ T9635] usb 4-1: Product: syz [ 962.648288][ T9635] usb 4-1: Manufacturer: syz [ 962.653141][ T9635] usb 4-1: SerialNumber: syz 15:26:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r0}, {r1}], 0x2, &(0x7f0000000480)={0x0, r2+60000000}, 0x0, 0x0) 15:26:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "ec7adde1a3e88206"}) 15:26:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1000000}, 0x20) 15:26:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540d, 0x0) 15:26:00 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) [ 962.875354][ T8899] usb 3-1: string descriptor 0 read error: -22 [ 962.882429][ T8899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.891894][ T8899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.976665][ T9635] usb 4-1: 0:2 : does not exist [ 962.991304][ T8899] usb 3-1: 0:2 : does not exist [ 962.997863][ T9635] usb 4-1: USB disconnect, device number 36 15:26:00 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @host}, 0x10) 15:26:00 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='oom_score_adj\x00') perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x5) 15:26:00 executing program 1: add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 15:26:00 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xd, 0x0, 0x0, 0x0}, 0x20) 15:26:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1000000}, 0x20) [ 963.101879][ T8899] usb 3-1: USB disconnect, device number 49 15:26:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x16, 0x0, &(0x7f0000000240)) 15:26:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x3b, 0x0, &(0x7f0000000340)) 15:26:00 executing program 3: pipe(&(0x7f0000002480)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0xffffffffffffff3d) 15:26:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b49, &(0x7f0000000000)) 15:26:00 executing program 2: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f00000024c0)="1d", 0x1, 0x305a0283}, {&(0x7f0000000340)="ee", 0x1}], 0x0, 0x0) 15:26:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1000000}, 0x20) 15:26:00 executing program 1: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x0, @multicast2}}) 15:26:00 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@var, @volatile, @datasec={0x0, 0xc, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}], "d6"}, @const, @array]}}, 0x0, 0xfa}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:26:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 15:26:00 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@local}) 15:26:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x7ffff000, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x34}}, 0x0) [ 963.533222][T31200] ptrace attach of "/root/syz-executor.4"[31196] was attempted by "/root/syz-executor.4"[31200] 15:26:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541b, &(0x7f0000000000)) 15:26:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20b, 0xb611, 0xdcf}) 15:26:01 executing program 2: io_setup(0xb836, &(0x7f0000000000)) 15:26:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8915, &(0x7f0000004c40)={0x0, @in={0x2, 0x0, @multicast1}, @can, @l2tp}) 15:26:01 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 15:26:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 15:26:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="5d17") 15:26:01 executing program 0: futex(&(0x7f0000000540), 0x3, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0), 0x0) 15:26:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @multicast2}, {0x0, @random="08c3774f7712"}, 0x8, {0x2, 0x0, @loopback}, 'tunl0\x00'}) 15:26:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x891c, &(0x7f0000004c40)={0x0, @in={0x2, 0x0, @multicast1}, @can, @l2tp}) 15:26:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6c, 0x0) 15:26:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="5d17") 15:26:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)) 15:26:01 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) 15:26:01 executing program 3: syz_emit_ethernet(0x7c, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff0b00ffc1aaaaaaaa0086dd6027b40000002f"], 0x0) 15:26:01 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x83}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 15:26:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x25, 0x0, &(0x7f0000000340)) 15:26:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, 0x0}, 0x0) 15:26:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="5d17") 15:26:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4c, &(0x7f0000000000)) 15:26:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)) 15:26:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000340)) 15:26:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xca, &(0x7f0000000100)=""/202, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:26:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5414, 0x0) 15:26:01 executing program 4: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffb) 15:26:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="5d17") 15:26:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)) 15:26:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0xffffffff}) 15:26:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x7f, 0x5}) 15:26:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xb, 0x0, &(0x7f0000000240)) 15:26:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b37, 0x0) 15:26:01 executing program 4: add_key$user(0x0, 0x0, &(0x7f0000000080)="e8", 0x1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000e40)) 15:26:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x300, 0x0, 0x0, 0x0) 15:26:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)) 15:26:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x545d, 0x0) 15:26:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000002c0)) 15:26:01 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') 15:26:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x28, &(0x7f0000002b00)) 15:26:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 15:26:01 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000080)={[0x40000000000008]}, 0x0, 0x8) 15:26:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) setfsuid(r1) 15:26:01 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x101, 0x101, 0x2, [@volatile, @datasec={0x0, 0xc, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "d6"}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @const, @array]}}, 0x0, 0x11e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:26:01 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000011d00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000011f00)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x6011e0}, {&(0x7f0000012300)="000000000000000000000000000000000000000000120000000510ec", 0x1c, 0x601320}, {&(0x7f0000012400)="00000014000000020c60", 0xa, 0x601380}, {&(0x7f0000012a00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012b00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014900)) 15:26:01 executing program 5: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4f6a38783c6a00f7, @thr={0x0, 0x0}}, 0x0) 15:26:01 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) r2 = inotify_init() mount(0x0, &(0x7f0000000040)='./control\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f000003a000)='./control\x00', 0x81000100) 15:26:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x3e, 0x0, &(0x7f0000000340)) 15:26:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000800)={[], [{@pcr={'pcr', 0x3d, 0x31}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext3\x00'}}, {@appraise='appraise'}, {@obj_type={'obj_type', 0x3d, 'ext3\x00'}}]}) 15:26:01 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f00000016c0)='ns/pid_for_children\x00') 15:26:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5606, 0x0) [ 964.539583][T31312] ptrace attach of "/root/syz-executor.2"[31309] was attempted by "/root/syz-executor.2"[31312] 15:26:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x4020940d, &(0x7f0000004c40)={0x0, @in={0x2, 0x0, @multicast1}, @can, @l2tp}) 15:26:02 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macvlan1\x00'}) 15:26:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000340)) 15:26:02 executing program 1: add_key$keyring(&(0x7f0000000200)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 15:26:02 executing program 2: timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) 15:26:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045440, &(0x7f0000000000)) 15:26:02 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x80, 0x1, &(0x7f00000009c0)=[{&(0x7f00000008c0)='\v', 0x1}], 0x0, 0x0) 15:26:02 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) r2 = inotify_init() mount(0x0, &(0x7f0000000040)='./control\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f000003a000)='./control\x00', 0x81000100) 15:26:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'root'}}]}) 15:26:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5422, 0x0) 15:26:02 executing program 4: socket$netlink(0x10, 0x3, 0xa) 15:26:02 executing program 3: r0 = socket(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00'}) r1 = accept4(r0, &(0x7f0000000000)=@caif=@rfm, &(0x7f0000000080)=0x80, 0x80800) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000009c0)={'TPROXY\x00'}, &(0x7f0000000a00)=0x1e) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'bridge_slave_0\x00', {0x2, 0x0, @remote}}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000009c0)={'TPROXY\x00'}, &(0x7f0000000a00)=0x1e) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000280)='bond0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000f703000829bd7000ffdbdf2507000000070000002e2f66696c6501000000000000000082"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8006) 15:26:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0xfff, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:26:02 executing program 2: sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x7}) 15:26:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'root'}}]}) 15:26:02 executing program 4: pipe(&(0x7f0000002480)={0xffffffffffffffff}) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 15:26:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f00000000c0)) 15:26:02 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003680)={0x14, 0x453, 0x4, 0x0, 0x0, "94"}, 0x14}}, 0x0) 15:26:02 executing program 3: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 965.630828][ T37] audit: type=1107 audit(1618154763.002:19): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='”' 15:26:03 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) r2 = inotify_init() mount(0x0, &(0x7f0000000040)='./control\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f000003a000)='./control\x00', 0x81000100) 15:26:03 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x420}, 0x420}}, 0x0) 15:26:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'root'}}]}) 15:26:03 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe5, 0xe5, 0x2, [@volatile, @datasec={0x0, 0xc, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "d6"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @const, @enum]}}, 0x0, 0x102}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:26:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000000400)) 15:26:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x12, 0x0, &(0x7f0000000240)) 15:26:03 executing program 2: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={0x0, r0+60000000}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000040)={0x0, 0x3938700}, 0x0) socket$inet(0x2, 0x0, 0x2000000) 15:26:03 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f0000000600)={0x0}) 15:26:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'root'}}]}) [ 966.386925][T31391] ptrace attach of "/root/syz-executor.4"[31389] was attempted by "/root/syz-executor.4"[31391] 15:26:03 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000200)) 15:26:03 executing program 5: socketpair(0xa, 0x1, 0x0, &(0x7f0000001140)) 15:26:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b61, 0x0) 15:26:04 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) r2 = inotify_init() mount(0x0, &(0x7f0000000040)='./control\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f000003a000)='./control\x00', 0x81000100) 15:26:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000280)={@host}) 15:26:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f0000000000)) 15:26:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x300, 0x29, 0x0, 0x0) 15:26:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5452, 0x0) 15:26:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f0000000000)) 15:26:04 executing program 2: r0 = getpgrp(0x0) get_robust_list(r0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) 15:26:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4e, 0x0) 15:26:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000004cc0)=@deltfilter={0x1ec4, 0x2d, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x1e6c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x498, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404}]}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_ACT={0x19b8, 0x6, [@m_police={0x19b4, 0x0, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x1974, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x15, 0x6, "3c2f2f7bdb690b9350fb2d913e80cb54d0"}, {0xc}, {0xc}}}]}]}}]}, 0x1ec4}}, 0x0) 15:26:04 executing program 1: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00', 0xffffffffffffffff) 15:26:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f0000000000)) 15:26:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5602, 0x0) 15:26:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f0000000000)) 15:26:05 executing program 5: time(&(0x7f0000000180)) 15:26:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', 0x0, 0x0, 0x0, 0x0, 0x8cffffff, &(0x7f0000000400)) 15:26:05 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101002, 0x0) 15:26:05 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x5, [@ext_cap={0x7}, @ptm_cap={0x3}, @ss_cap={0xa}, @ext_cap={0x7, 0x10, 0x2, 0x16}, @ss_cap={0xa}]}}) 15:26:05 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000018c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001880)={&(0x7f0000001440)={0x420}, 0x420}}, 0x0) 15:26:05 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 15:26:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5452, &(0x7f0000004c40)={0x0, @in={0x2, 0x0, @multicast1}, @can, @l2tp}) 15:26:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x18, 0x0, &(0x7f0000000240)) 15:26:05 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x20000050) 15:26:05 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/60) 15:26:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) 15:26:05 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0x9}) 15:26:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x3e7}, 0x40) 15:26:05 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @remote, @link_local, @private=0xa010101}}}}, 0x0) 15:26:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) [ 968.505052][ T9635] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 968.795084][ T9635] usb 5-1: Using ep0 maxpacket: 8 [ 969.025215][ T9635] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 969.033681][ T9635] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.045122][ T9635] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 969.054339][ T9635] usb 5-1: config 1 has no interface number 1 [ 969.063843][ T9635] usb 5-1: config 1 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 969.265136][ T9635] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 969.275465][ T9635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.284186][ T9635] usb 5-1: Product: syz [ 969.289482][ T9635] usb 5-1: Manufacturer: syz [ 969.294221][ T9635] usb 5-1: SerialNumber: syz [ 969.635042][ T9635] usb 5-1: 0:2 : does not exist [ 969.650096][ T9635] usb 5-1: USB disconnect, device number 27 [ 970.315023][T11464] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 970.555071][T11464] usb 5-1: Using ep0 maxpacket: 8 [ 970.775118][T11464] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 970.783436][T11464] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.795066][T11464] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 970.804661][T11464] usb 5-1: config 1 has no interface number 1 [ 970.811566][T11464] usb 5-1: config 1 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 971.025002][T11464] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 971.034408][T11464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.042861][T11464] usb 5-1: Product: syz [ 971.047241][T11464] usb 5-1: Manufacturer: syz [ 971.052094][T11464] usb 5-1: SerialNumber: syz 15:26:08 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x5, [@ext_cap={0x7}, @ptm_cap={0x3}, @ss_cap={0xa}, @ext_cap={0x7, 0x10, 0x2, 0x16}, @ss_cap={0xa}]}}) 15:26:08 executing program 3: r0 = openat$vnet(0xffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x541b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:26:08 executing program 0: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:26:08 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f0000000140)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 15:26:08 executing program 5: syz_io_uring_setup(0x668b, &(0x7f0000000080)={0x0, 0x894b, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3c50, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:26:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) 15:26:08 executing program 5: syz_io_uring_setup(0x668b, &(0x7f0000000080)={0x0, 0x894b, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3c50, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:26:08 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe14, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:26:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) 15:26:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, r1) [ 971.294909][T11464] usb 5-1: 0:2 : does not exist 15:26:08 executing program 1: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) [ 971.340666][T11464] usb 5-1: USB disconnect, device number 28 15:26:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000200)={'tunl0\x00', @ifru_ivalue}}) [ 971.744887][T11464] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 972.004878][T11464] usb 5-1: Using ep0 maxpacket: 8 [ 972.265114][T11464] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 972.273341][T11464] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.284710][T11464] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 972.294328][T11464] usb 5-1: config 1 has no interface number 1 [ 972.300790][T11464] usb 5-1: config 1 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 972.465072][T11464] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 972.474418][T11464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.483490][T11464] usb 5-1: Product: syz [ 972.488032][T11464] usb 5-1: Manufacturer: syz [ 972.493773][T11464] usb 5-1: SerialNumber: syz [ 972.814910][T11464] usb 5-1: 0:2 : does not exist [ 972.832143][T11464] usb 5-1: USB disconnect, device number 29 15:26:10 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x5, [@ext_cap={0x7}, @ptm_cap={0x3}, @ss_cap={0xa}, @ext_cap={0x7, 0x10, 0x2, 0x16}, @ss_cap={0xa}]}}) 15:26:10 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x71c9a76e1a1342f1, 0xffffffffffffffff, 0x0) 15:26:10 executing program 2: socket$inet(0x2, 0xa, 0x30) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 15:26:10 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000040c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 15:26:10 executing program 5: syz_io_uring_setup(0x668b, &(0x7f0000000080)={0x0, 0x894b, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3c50, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:26:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic) 15:26:10 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_macvtap\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10}}) 15:26:10 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3c010000) 15:26:10 executing program 2: socket$inet(0x2, 0xa, 0x30) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 15:26:10 executing program 3: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, r0) 15:26:10 executing program 1: r0 = epoll_create(0x4) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 15:26:10 executing program 5: syz_io_uring_setup(0x668b, &(0x7f0000000080)={0x0, 0x894b, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3c50, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 973.604811][T11464] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 973.875414][T11464] usb 5-1: Using ep0 maxpacket: 8 [ 974.124951][T11464] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 974.133583][T11464] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.144763][T11464] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 974.154563][T11464] usb 5-1: config 1 has no interface number 1 [ 974.161902][T11464] usb 5-1: config 1 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 974.344746][T11464] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 974.355210][T11464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.363619][T11464] usb 5-1: Product: syz [ 974.369197][T11464] usb 5-1: Manufacturer: syz [ 974.374582][T11464] usb 5-1: SerialNumber: syz [ 974.724698][T11464] usb 5-1: 0:2 : does not exist [ 974.740666][T11464] usb 5-1: USB disconnect, device number 30 15:26:12 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x5, [@ext_cap={0x7}, @ptm_cap={0x3}, @ss_cap={0xa}, @ext_cap={0x7, 0x10, 0x2, 0x16}, @ss_cap={0xa}]}}) 15:26:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)={0x44, r1, 0x50b, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0xfffc}}]}, 0x44}}, 0x0) 15:26:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') read$FUSE(r0, 0x0, 0x0) 15:26:12 executing program 2: socket$inet(0x2, 0xa, 0x30) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 15:26:12 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8004700b, 0x0) 15:26:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000c40)={&(0x7f0000000740)={0xa, 0x4e23, 0x0, @mcast2, 0x4bd}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@rthdr={{0x14}}, @rthdr={{0x14}}], 0x28}, 0x0) 15:26:12 executing program 2: socket$inet(0x2, 0xa, 0x30) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 15:26:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00000000c0)=@tipc, 0x80) 15:26:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(r0) 15:26:12 executing program 5: bpf$MAP_CREATE(0x1e, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 15:26:12 executing program 1: bpf$MAP_CREATE(0x1d, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 15:26:12 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 975.524583][ T9634] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 975.764542][ T9634] usb 5-1: Using ep0 maxpacket: 8 [ 975.964730][ T9634] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 975.973015][ T9634] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.983920][ T9634] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 975.993439][ T9634] usb 5-1: config 1 has no interface number 1 [ 975.999882][ T9634] usb 5-1: config 1 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 976.185921][ T9634] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 976.195264][ T9634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.203454][ T9634] usb 5-1: Product: syz [ 976.209180][ T9634] usb 5-1: Manufacturer: syz [ 976.215098][ T9634] usb 5-1: SerialNumber: syz [ 976.544563][ T9634] usb 5-1: 0:2 : does not exist [ 976.557138][ T9634] usb 5-1: USB disconnect, device number 31 15:26:14 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001180)="b2", 0x1}], 0x1, &(0x7f00000014c0)=ANY=[], 0x1b0}, 0x0) sendmsg$inet(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000016c0)='C', 0x1}], 0x1}, 0x0) 15:26:14 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x10}, 0x10) 15:26:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x18, 0x4, &(0x7f0000001b40)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x7, 0xab, &(0x7f0000001c00)=""/171, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:26:14 executing program 1: bpf$PROG_BIND_MAP(0x23, 0x0, 0xf0ffffff7f0000) 15:26:14 executing program 0: socketpair(0x10, 0x3, 0x9, &(0x7f0000002080)) 15:26:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x248203, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 15:26:14 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 15:26:14 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) 15:26:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 15:26:14 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001180)="b2", 0x1}], 0x1, &(0x7f00000014c0)=ANY=[], 0x1b0}, 0x0) sendmsg$inet(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000016c0)='C', 0x1}], 0x1}, 0x0) 15:26:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{&(0x7f0000000dc0)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x41, 0x0) 15:26:14 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5451, 0x0) 15:26:14 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) 15:26:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000007640)) 15:26:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 15:26:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) 15:26:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x40800) 15:26:14 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_0\x00', 0x10) 15:26:14 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 15:26:14 executing program 2: socketpair(0x22c400b20a8dce2f, 0x0, 0x0, &(0x7f00000002c0)) 15:26:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000004840)='/dev/vcs#\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) 15:26:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000380)) 15:26:14 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0) 15:26:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003600)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000036c0)) 15:26:14 executing program 4: clone(0x76fe71d9e7803137, 0x0, 0x0, 0x0, 0x0) clone(0x0, &(0x7f0000001340)="14676de9f014d0", &(0x7f0000001380), 0x0, &(0x7f0000001400)) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x10, 0x3f6, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002640), 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x20, 0x3fa, 0x8, 0x70bd28, 0x0, {0x1, 0x1}, ["", "", "", "", ""]}, 0x20}}, 0x20000000) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{r0}, 0x0, 0x1e, @unused=[0xe, 0x10001, 0x1b, 0x6], @devid}) 15:26:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:26:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000007540)={0x77359400}) 15:26:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003600)) 15:26:14 executing program 3: getsockname$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000035c0)={0x2, 'dummy0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003600)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, &(0x7f0000003640)=@alg, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto$unix(r0, &(0x7f0000006a80)="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", 0xec1, 0x0, &(0x7f0000007a80)=@file={0x1, './file0\x00'}, 0x6e) [ 977.502975][T31747] IPVS: ftp: loaded support on port[0] = 21 15:26:15 executing program 2: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/188) 15:26:15 executing program 1: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 977.584564][T31747] IPVS: ftp: loaded support on port[0] = 21 15:26:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 15:26:15 executing program 1: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15:26:15 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x80108906, 0x0) 15:26:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000004b00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000003800)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0xea0, 0x8, 0x0, 0x1, [{0x4e8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0a21e89f46bc37472970c5197ffb7f27d55187fd4c7179706cc56d024bf8e951"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}]}, {0x4}, {0x94c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x88, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @private}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x204, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x40c, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x29c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 15:26:15 executing program 4: syz_open_dev$vcsn(&(0x7f0000004840)='/dev/vcs#\x00', 0x2, 0x0) 15:26:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007680)={'team0\x00'}) 15:26:15 executing program 1: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15:26:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 15:26:15 executing program 3: syz_usb_connect$cdc_ecm(0x7, 0x7b, &(0x7f0000000540)=ANY=[@ANYBLOB="12015002020000082505a1a45e0006030206001f0724060000871305240004000d240f01010000800300090003082407010400030007240a991f3f0807240a3cff0010052401017d08241c080076400009058103ff030440dd09058202240000020609050302200086cd6b0009072cf03d12a23cb86c71278af3b1a2ab"], &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x0, 0x2e, 0x20, 0x6}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x0, 0x101}, @ptm_cap={0x3}]}, 0x5, [{0x81, &(0x7f0000000100)=@string={0x81, 0x3, "614b6aea0e62e02fda9347afce9adb98346e37205f15a4bfae28f351243526088570be02ce13386a563d810c3c4794c04ea4c74d9635680027eb745dd6f553b644c5932034550ad62f495bf8cf8accec759ecfd2ca98b6e05145af449a68baa933c0bfc0f01c97dcb90468159f6679a51c060fbace9ab29da24184dd48cead"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1809}}, {0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="2e031dc715549bb3fc6f45f9420473097c9e7beb01d7e2e62072523f015c043ba5a4b11b83cd6f83e162d6f9c23e"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) 15:26:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00', r0) 15:26:15 executing program 1: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15:26:15 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 15:26:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 15:26:15 executing program 4: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 15:26:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsu\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000580)='gtp\x00', 0xffffffffffffffff) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 15:26:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 15:26:15 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x0) 15:26:15 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x200000, 0x0) 15:26:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x62, &(0x7f00000006c0)=""/98, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:26:16 executing program 5: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x250000) 15:26:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x800) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 15:26:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) 15:26:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 15:26:16 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000580)={0x0, 0x0, 0x0, [], 0x0}) 15:26:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$kcm(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000001900)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a000a845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c49761aff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:26:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0d05640, &(0x7f0000000580)={0x0, 0x0, 0x0, [], 0x0}) 15:26:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480)='ethtool\x00', r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00', 0xffffffffffffffff) 15:26:16 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 15:26:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:26:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000180)) 15:26:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$kcm(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000001900)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a000a845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c49761aff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:26:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$kcm(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000001900)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a000a845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c49761aff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:26:16 executing program 2: read$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000600)=@framed={{}, [@map_val]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:26:16 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63b66788a341cda555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8672522be18bd10a48b043d2c42646d25dfd73d06d7535f7866970e9f03d124cecabeeb01faa50761cb052c41cfb94d0293bfae5ca5c9f07dc6751df1394e757fa1bd904006271d065a0e3ccae6603173a649c1cfd2114dc4b95fbbf0f8b6587d452d64e7cc957d77578f4c35235138d5521f9453559bea8a860e8efbc6f2b2a3e3173d5de1b5e64a6ec7ae0dab5d91cec3da386621441ecda46c4b8ac49a510ce03cf02a76d33ad825bc8f83ab944422a9cee74bfee13454d6b821e0513a808c80597086be95e63a8dd3e9af8d4c5755ce3c2fce8cb8dc1576f07571d31a77a454943b2f1af914bd087ed1835f230d4ba77aced55f58843593a22c52d6fb77163cc04545ebda294dad9067593b2881adf24012cf0695327f7d68c894ac45c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:26:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 15:26:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e00010000005f8e6ecfbbbe3a6e00008d"], 0x1c}}, 0x0) 15:26:16 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) 15:26:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) 15:26:16 executing program 2: read$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsu\x00', 0x8140, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)) 15:26:16 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63b66788a341cda555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8672522be18bd10a48b043d2c42646d25dfd73d06d7535f7866970e9f03d124cecabeeb01faa50761cb052c41cfb94d0293bfae5ca5c9f07dc6751df1394e757fa1bd904006271d065a0e3ccae6603173a649c1cfd2114dc4b95fbbf0f8b6587d452d64e7cc957d77578f4c35235138d5521f9453559bea8a860e8efbc6f2b2a3e3173d5de1b5e64a6ec7ae0dab5d91cec3da386621441ecda46c4b8ac49a510ce03cf02a76d33ad825bc8f83ab944422a9cee74bfee13454d6b821e0513a808c80597086be95e63a8dd3e9af8d4c5755ce3c2fce8cb8dc1576f07571d31a77a454943b2f1af914bd087ed1835f230d4ba77aced55f58843593a22c52d6fb77163cc04545ebda294dad9067593b2881adf24012cf0695327f7d68c894ac45c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:26:16 executing program 5: perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:16 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000500)=@framed={{}, [@func]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:26:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) 15:26:16 executing program 3: perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:16 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:26:16 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) close(r0) 15:26:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 15:26:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0205647, &(0x7f0000000580)={0x0, 0x0, 0x0, [], 0x0}) 15:26:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0505609, 0x0) 15:26:17 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) gettid() 15:26:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9af3f238"}, 0x0, 0x0, @planes=0x0}) 15:26:17 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x1800) 15:26:17 executing program 5: syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 15:26:17 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1000}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) 15:26:17 executing program 1: syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 15:26:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=ANY=[@ANYBLOB="6c0000001000010400000014d300000000000000", @ANYRES32=0x0, @ANYBLOB="5d080300000000001c001a8018"], 0x6c}}, 0x0) 15:26:17 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xf9, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x81}}}}]}}]}}, 0x0) 15:26:17 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x2, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2f16fe47, 0x0, @perf_config_ext={0x51, 0x8}, 0x2000, 0x5, 0x1, 0x6, 0x0, 0x80000001, 0x782}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x3, 0x70, 0x8, 0x0, 0x3e, 0x99, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x8, 0x2, 0x2}) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000001c0)) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x101002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x2}) syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, @map_val]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 979.809589][T31952] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 15:26:17 executing program 0: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vim2m\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 15:26:17 executing program 3: openat$vcsu(0xffffffffffffff9c, 0x0, 0x2a040, 0x0) 15:26:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f468d1461c654217e498c4339f400caffdfd5aece75298da0017f3649568e2fdd38a1acf3ed5d3b35841b82088ca3e511b9213fd062aa2c754f0eb5eed659ef1c621f734e5b0c54972db1eb6b292fbc2d"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 15:26:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7a5824ac"}, 0x0, 0x0, @fd}) 15:26:17 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fgetxattr(r0, &(0x7f00000003c0)=@known='system.advise\x00', 0x0, 0x0) 15:26:17 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 15:26:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) [ 980.113947][T12495] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 980.173961][ T8899] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 980.343947][T11464] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 980.353940][T12495] usb 3-1: Using ep0 maxpacket: 8 [ 980.413958][ T8899] usb 5-1: Using ep0 maxpacket: 8 [ 980.495230][T12495] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 980.534195][ T8899] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 980.584330][T11464] usb 6-1: Using ep0 maxpacket: 8 [ 980.704172][ T8899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.704182][T12495] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.704207][T12495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.714599][T11464] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 980.724817][T12495] usb 3-1: Product: syz [ 980.732967][ T8899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.740839][T12495] usb 3-1: Manufacturer: syz [ 980.745590][T11464] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 980.753402][T12495] usb 3-1: SerialNumber: syz [ 980.757644][ T8899] usb 5-1: Product: syz [ 980.777374][T11464] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 980.787919][T11464] usb 6-1: config 5 has no interface number 0 [ 980.796125][ T8899] usb 5-1: Manufacturer: syz [ 980.801374][ T8899] usb 5-1: SerialNumber: syz [ 980.806587][T11464] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 980.814312][T12495] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 980.820011][T11464] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 980.837124][T11464] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1647, setting to 1024 [ 980.850357][T11464] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 980.862494][T11464] usb 6-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 980.877925][T11464] usb 6-1: config 5 interface 228 has no altsetting 0 [ 980.964920][T11464] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 980.974925][T11464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 980.983252][T11464] usb 6-1: SerialNumber: syz [ 981.006531][T31975] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 981.014887][T31975] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 981.024457][T11464] hub 6-1:5.228: bad descriptor, ignoring hub [ 981.031365][T11464] hub: probe of 6-1:5.228 failed with error -5 [ 981.032930][T12495] usb 3-1: USB disconnect, device number 50 [ 981.114388][ T8899] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 981.124461][ T8899] usb 5-1: USB disconnect, device number 32 [ 981.235657][T11464] usblp 6-1:5.228: usblp0: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 981.833742][ T9634] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 981.843834][T11464] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 981.864414][T31975] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 982.083732][T11464] usb 5-1: Using ep0 maxpacket: 8 [ 982.093737][ T9634] usb 3-1: Using ep0 maxpacket: 8 [ 982.103774][T31975] usb 6-1: Using ep0 maxpacket: 8 [ 982.204353][T11464] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 982.224312][ T9634] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 982.264289][T32016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 982.271908][T32016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 982.373710][T11464] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.383766][T11464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.392277][T11464] usb 5-1: Product: syz [ 982.396964][T11464] usb 5-1: Manufacturer: syz [ 982.401908][T11464] usb 5-1: SerialNumber: syz [ 982.413820][ T9634] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.425992][ T9634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.435758][ T9634] usb 3-1: Product: syz [ 982.440226][ T9634] usb 3-1: Manufacturer: syz [ 982.447309][ T9634] usb 3-1: SerialNumber: syz [ 982.484619][T32016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 982.492204][T32016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 982.496152][ T9634] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 982.563648][ C0] usblp0: nonzero read bulk status received: -71 15:26:20 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1000}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) 15:26:20 executing program 1: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2001, 0x9, 0x0, 0x8, 0x2}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x8140, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x101002, 0x0) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x2}) 15:26:20 executing program 3: perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:20 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:20 executing program 4: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) [ 982.684201][T11464] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 982.698940][T11464] usb 5-1: USB disconnect, device number 33 [ 982.703744][ T9634] usb 3-1: USB disconnect, device number 51 15:26:20 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x2a040, 0x0) 15:26:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x8001) [ 982.754265][ T9746] usb 6-1: USB disconnect, device number 22 [ 982.767483][ T9746] usblp0: removed [ 983.213614][ T9634] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 983.473542][ T9634] usb 3-1: Using ep0 maxpacket: 8 [ 983.493546][ T9746] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 983.623955][ T9634] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 983.733547][ T9746] usb 6-1: Using ep0 maxpacket: 8 [ 983.824836][ T9634] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 983.837024][ T9634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.848679][ T9634] usb 3-1: Product: syz [ 983.853039][ T9634] usb 3-1: Manufacturer: syz [ 983.855195][ T9746] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 983.858605][ T9634] usb 3-1: SerialNumber: syz [ 983.869484][ T9746] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 983.885742][ T9746] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 983.897141][ T9746] usb 6-1: config 5 has no interface number 0 [ 983.904148][ T9746] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 983.905051][ T9634] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 983.917419][ T9746] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 983.934200][ T9746] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1647, setting to 1024 [ 983.947116][ T9746] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 983.957918][ T9746] usb 6-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 983.972374][ T9746] usb 6-1: config 5 interface 228 has no altsetting 0 15:26:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f468d1461c654217e498c4339f400caffdfd5aece75298da0017f3649568e2fdd38a1acf3ed5d3b35841b82088ca3e511b9213fd062aa2c754f0eb5eed659ef1c621f734e5b0c54972db1eb6b292fbc2d"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 15:26:21 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00', 0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x200000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vim2m\x00', 0x2, 0x0) r1 = socket(0x9, 0xa, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000700)='team\x00', 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000740)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b80)='wireguard\x00', r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3f) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) 15:26:21 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 15:26:21 executing program 0: perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x5, "cd2f2f05a7b9878ac87a7739793871b25b4a269c3cfe7bcf0c1fa0b76c595f26"}) [ 984.073510][ T9746] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 984.082748][ T9746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 984.128674][T11464] usb 3-1: USB disconnect, device number 52 [ 984.134927][ T9746] usb 6-1: can't set config #5, error -71 [ 984.150821][ T9746] usb 6-1: USB disconnect, device number 23 [ 984.513442][ T9746] usb 6-1: new high-speed USB device number 24 using dummy_hcd 15:26:22 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) 15:26:22 executing program 0: syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) 15:26:22 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00', 0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x200000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vim2m\x00', 0x2, 0x0) r1 = socket(0x9, 0xa, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000700)='team\x00', 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000740)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b80)='wireguard\x00', r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3f) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) 15:26:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0d05605, &(0x7f0000000580)={0x0, 0x0, 0x0, [], 0x0}) 15:26:22 executing program 1: perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vim2m\x00', 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0x0) 15:26:22 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100), 0x10) [ 984.754072][ T9746] usb 6-1: Using ep0 maxpacket: 8 [ 984.873402][ T9746] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 984.882292][ T9746] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 984.893152][ T9746] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 984.904986][ T9746] usb 6-1: config 5 has no interface number 0 [ 984.911129][ T9746] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 984.923760][ T9746] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 984.935150][ T9746] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1647, setting to 1024 [ 984.947443][ T9746] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 984.958458][ T9746] usb 6-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 984.972249][ T9746] usb 6-1: config 5 interface 228 has no altsetting 0 [ 985.053450][ T9746] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 985.063373][ T9746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 985.071533][ T9746] usb 6-1: SerialNumber: syz [ 985.094255][T32093] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 985.101585][T32093] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 985.113696][ T9746] hub 6-1:5.228: bad descriptor, ignoring hub [ 985.120181][ T9746] hub: probe of 6-1:5.228 failed with error -5 [ 985.344914][ T9746] usblp 6-1:5.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 985.964083][T32093] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 986.223315][T32093] usb 6-1: Using ep0 maxpacket: 8 [ 986.393708][T32137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.401074][T32137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.615704][T32137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.622715][T32137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.683250][ C1] usblp0: nonzero read bulk status received: -71 [ 986.845760][ T9635] usb 6-1: USB disconnect, device number 24 [ 986.884410][ T9635] usblp0: removed 15:26:24 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) 15:26:24 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:24 executing program 0: syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) 15:26:24 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002240)={0x420}, 0x420}}, 0x0) 15:26:24 executing program 2: perf_event_open$cgroup(&(0x7f0000000780)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:24 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsu\x00', 0x8140, 0x0) 15:26:24 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, 0x0) 15:26:24 executing program 4: perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:24 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00', 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:24 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5aaa1bcb"}, 0x0, 0x0, @fd}) 15:26:24 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:24 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 15:26:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000002c0)) 15:26:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 15:26:24 executing program 2: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) perf_event_open$cgroup(&(0x7f000000bb00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5746ae33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:25 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) 15:26:25 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) 15:26:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x5f020000) 15:26:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:25 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:25 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 15:26:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x5f020000) 15:26:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x5f020000) 15:26:25 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:26:25 executing program 5: perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:25 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:25 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6d259093"}, 0x0, 0x0, @userptr}) 15:26:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @log={{0x8, 0x1, 'log\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x2}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 987.973136][ T9634] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 988.063027][ T9635] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 988.223005][ T9634] usb 1-1: Using ep0 maxpacket: 8 [ 988.303169][ T9635] usb 3-1: Using ep0 maxpacket: 8 [ 988.384475][ T9634] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 988.443004][ T9635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 988.452978][ T9635] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 988.463277][ T9635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 988.474242][ T9635] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 988.583126][ T9634] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 988.592623][ T9634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.603835][ T9634] usb 1-1: Product: syz [ 988.608468][ T9634] usb 1-1: Manufacturer: syz [ 988.613675][ T9634] usb 1-1: SerialNumber: syz [ 988.673588][ T9634] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 988.694413][ T9635] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 988.704431][ T9635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.712752][ T9635] usb 3-1: Product: syz [ 988.717529][ T9635] usb 3-1: Manufacturer: syz [ 988.722421][ T9635] usb 3-1: SerialNumber: syz [ 988.773807][ T9635] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 988.874808][ T9635] usb 1-1: USB disconnect, device number 108 [ 988.974683][ T8899] usb 3-1: USB disconnect, device number 53 [ 989.643286][ T8899] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 989.742775][ T9746] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 989.882749][ T8899] usb 1-1: Using ep0 maxpacket: 8 [ 989.982753][ T9746] usb 3-1: Using ep0 maxpacket: 8 [ 990.003173][ T8899] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 990.102951][ T9746] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 990.114443][ T9746] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 990.124988][ T9746] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 990.135432][ T9746] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 990.172904][ T8899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 990.183013][ T8899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.191429][ T8899] usb 1-1: Product: syz [ 990.195986][ T8899] usb 1-1: Manufacturer: syz [ 990.201073][ T8899] usb 1-1: SerialNumber: syz [ 990.243416][ T8899] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 990.302727][ T9746] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 990.312240][ T9746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.322300][ T9746] usb 3-1: Product: syz [ 990.327307][ T9746] usb 3-1: Manufacturer: syz [ 990.332219][ T9746] usb 3-1: SerialNumber: syz [ 990.373276][ T9746] cdc_ether: probe of 3-1:1.0 failed with error -22 15:26:27 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 15:26:27 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) [ 990.453446][ T9635] usb 1-1: USB disconnect, device number 109 [ 990.574799][ T8899] usb 3-1: USB disconnect, device number 54 15:26:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:28 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00', 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x200000, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vim2m\x00', 0x2, 0x0) 15:26:28 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 15:26:28 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000580)={0x0, 0x0, 0x1, [], 0x0}) 15:26:28 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 15:26:28 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x0, 0xc}, 0xc) 15:26:28 executing program 1: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:26:28 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x101002, 0x0) 15:26:28 executing program 2: clock_getres(0xdd7bc460de6c8c36, 0x0) 15:26:28 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 15:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) 15:26:28 executing program 1: r0 = socket(0x2, 0x3, 0x5) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x60, {0x2, 0x0, @multicast2}, 'veth1_macvtap\x00'}) [ 991.563016][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.569443][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 15:26:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:31 executing program 5: clock_nanosleep(0x0, 0x0, 0xffffffffffffffff, 0x0) 15:26:31 executing program 0: r0 = socket(0x18, 0x0, 0x3) getsockname(r0, 0x0, 0x0) 15:26:31 executing program 2: pselect6(0x53, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) 15:26:31 executing program 1: r0 = socket(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:26:31 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000880), 0x0, &(0x7f0000000540)={0x9}, 0x0, 0x0) 15:26:31 executing program 5: r0 = socket(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f00000013c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x1, 0x0) 15:26:31 executing program 2: socketpair$unix(0x1, 0xfac5efce4f695425, 0x0, 0x0) 15:26:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000009740)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000094c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000009780)={0x0, r2+60000000}) 15:26:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) 15:26:31 executing program 5: bpf$ITER_CREATE(0x21, 0x0, 0x75) 15:26:34 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000880), 0x0, &(0x7f0000000540)={0x9}, &(0x7f00000007c0), 0x0) 15:26:34 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x52000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0xa19c) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 15:26:34 executing program 2: r0 = epoll_create(0x9e26) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000003cc0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 15:26:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/189, 0xbd}, 0x40) 15:26:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:34 executing program 1: r0 = socket(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) recvfrom(r0, &(0x7f0000000600)=""/60, 0x3c, 0x20, &(0x7f0000000800)=@ax25={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x80) 15:26:34 executing program 2: r0 = socket(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, 0x0, 0x3f}}], 0x2, 0x0) 15:26:34 executing program 5: r0 = socket(0x2, 0x3, 0x5) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000e00)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast1}}) 15:26:34 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth0_vlan\x00', @ifru_names}) 15:26:34 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000), 0x4) 15:26:34 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x52000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0xa19c) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 15:26:34 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000002a00)) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:26:37 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000003c0)={{0x1}}) 15:26:37 executing program 2: r0 = socket(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x2, 0x0) 15:26:37 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x52000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0xa19c) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 15:26:37 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:37 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x802, 0x0) write$tun(r0, 0x0, 0x0) 15:26:37 executing program 1: r0 = socket(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f00000013c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002000)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 15:26:37 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8980, 0x0) 15:26:37 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 15:26:37 executing program 1: r0 = socket(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev}}}], 0x20}}], 0x2, 0x0) 15:26:37 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:40 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/null\x00', 0x0, 0x0) getresgid(&(0x7f00000009c0), &(0x7f0000005a80), &(0x7f0000005ac0)) 15:26:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) 15:26:40 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:40 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x52000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0xa19c) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 15:26:40 executing program 1: r0 = epoll_create(0xff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) [ 1002.914514][T32427] input input21: cannot allocate more than FF_MAX_EFFECTS effects 15:26:40 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') 15:26:40 executing program 5: r0 = socket(0x2, 0x3, 0x9) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x0) [ 1002.968192][T32435] input input22: cannot allocate more than FF_MAX_EFFECTS effects 15:26:40 executing program 2: syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xffffffffffffffff, 0x0) 15:26:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) 15:26:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x20}, 0x0) 15:26:40 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000001600)={'rose0\x00', @ifru_data=0x0}) 15:26:43 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 15:26:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10}], 0x10}}], 0x1, 0x0) 15:26:43 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') write$nbd(r0, 0x0, 0xb8) 15:26:43 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') 15:26:43 executing program 2: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) 15:26:43 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x0, 0x1000000}, 0xc) 15:26:43 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 15:26:43 executing program 1: request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0x0) 15:26:43 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') 15:26:43 executing program 3: connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:46 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) 15:26:46 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x20000, 0x0) 15:26:46 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 15:26:46 executing program 3: connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:46 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x4472864}, 0x0) 15:26:46 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x200000, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 15:26:46 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x80000001}, 0x8) 15:26:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003200)='nl80211\x00', r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={0x0}}, 0x0) 15:26:46 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 15:26:46 executing program 1: syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') 15:26:46 executing program 3: connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:49 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) 15:26:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:49 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 15:26:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8970, &(0x7f00000010c0)={'ipvlan1\x00', @ifru_data=0x0}) 15:26:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x2c, 0x2a, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private2}]}, 0x2c}], 0x1}, 0x0) 15:26:49 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80), 0x1000000000000266}, 0x0) 15:26:49 executing program 5: modify_ldt$write2(0x11, &(0x7f0000000000)={0x200}, 0x10) 15:26:49 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:49 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002280)={0x14}, 0x14}}, 0x2400800d) [ 1012.051886][T32533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:49 executing program 1: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x1, 0x40000002, 0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00') 15:26:49 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:49 executing program 2: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000040)={'lo\x00', @ifru_ivalue}) 15:26:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000006c0)=0x9a, 0x4) 15:26:52 executing program 5: mount$fuseblk(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='fuseblk\x00', 0x0, 0x0) 15:26:52 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:52 executing program 1: r0 = socket(0x2, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 15:26:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000006c0), 0x4) 15:26:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 15:26:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 15:26:52 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000180)={'lo\x00'}) 15:26:52 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0xb, r0) 15:26:52 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x1, 0x0) 15:26:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:55 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000002400)={&(0x7f0000002240), 0xc, &(0x7f00000023c0)={0x0}}, 0x2400800d) 15:26:55 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x5, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, 0x0) 15:26:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e1, 0x0) 15:26:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:55 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) accept4(r0, 0x0, 0x0, 0x0) 15:26:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5451, 0x0) 15:26:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:55 executing program 5: r0 = socket(0x2, 0x3, 0x4) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000000)={'vcan0\x00', @ifru_mtu}) 15:26:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@dev, @empty}, &(0x7f00000001c0)=0xc) 15:26:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:55 executing program 0: r0 = socket(0x2, 0x3, 0x9) bind$unix(r0, 0x0, 0xf00) 15:26:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:26:58 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:26:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x14, 0x4) 15:26:58 executing program 2: add_key$user(&(0x7f0000000240)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0xee00, 0x0, 0xee01) 15:26:58 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000000)) 15:26:58 executing program 0: syz_mount_image$btrfs(&(0x7f0000000b00)='btrfs\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'B\x0e)*'}}]}) 15:26:58 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:26:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1021.137063][ T37] audit: type=1804 audit(1618154818.518:20): pid=32622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir021787344/syzkaller.CLhtww/1516/bus" dev="sda1" ino=14370 res=1 errno=0 15:26:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0xfd88, 0x0, 0x0, 0x0, 0xfffffffffffffc85}, 0x40000042) 15:26:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x7) 15:26:58 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002500)='/dev/hwrng\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000700), 0x0) 15:27:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:01 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 15:27:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 15:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) 15:27:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x20040140, 0x0, 0x0) 15:27:01 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/thread-self\x00', 0x10800, 0x0) 15:27:01 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) 15:27:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@phonet, 0x80) 15:27:01 executing program 2: r0 = socket(0x18, 0x0, 0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 15:27:01 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4, 0x3, 0x0, 0x0}]}, 0x18}}, 0x0) 15:27:04 executing program 5: add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = request_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000000440)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000340)=')\x00\xe5\xe7\x92(\xa8\xb8\xb9\xf4gh\x8b\xb3\xa8R\x87\xd7\x1d\xf9\xfd\xab]zu\xa8\xa0[h\xe8\x92\xf3\x92\x19\xec\xdd\x83]\xfd\xcf}Q*s\x88\xa8\xac\xdaXHu\xe9 U\xffl\x8b\x1d\xfd\xa0L\x1dK\xbe\x8d w\x81\x88$8\xb4\x1dx\xcc\xb4\x1d\xde\x12\xcf^\x7f[\x91\xce\xd5\x89\x0e\x9f\x9a\n\xea\x9cy\xb3\xf9\xc2\x10\xb6\f\xd9\xac\xf3=\xec\xf8\x0e\xad\x8f\nK0`Z\xd4\xfa5>RqL32\xed\xaf', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)={0x0, 0x0, @auto=[0x0]}, 0x9, 0x0) 15:27:04 executing program 1: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000003540)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 15:27:04 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') 15:27:04 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:04 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:04 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) 15:27:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:04 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1027.364028][T32708] device geneve2 entered promiscuous mode 15:27:07 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:07 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1030.282686][T32729] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1030.295495][T32729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1030.309213][T32729] device geneve2 entered promiscuous mode [ 1030.324480][T32733] device geneve2 entered promiscuous mode 15:27:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:07 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:07 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1030.412408][T32732] device geneve2 entered promiscuous mode 15:27:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 15:27:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1030.515066][T32757] device geneve3 entered promiscuous mode [ 1030.635903][ T302] device geneve2 entered promiscuous mode 15:27:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 15:27:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:10 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:10 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:10 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) 15:27:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1033.369213][ T323] loop5: detected capacity change from 0 to 184 [ 1033.400593][ T330] device geneve2 entered promiscuous mode [ 1033.408353][ T323] ISOFS: Unable to identify CD-ROM format. 15:27:10 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1033.460675][ T338] device geneve3 entered promiscuous mode 15:27:10 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) 15:27:11 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) [ 1033.578176][ T353] loop5: detected capacity change from 0 to 184 15:27:11 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:11 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) 15:27:11 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) [ 1033.659745][ T353] ISOFS: Unable to identify CD-ROM format. 15:27:11 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 15:27:11 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) [ 1033.762479][ T375] device geneve3 entered promiscuous mode [ 1033.805244][ T380] loop5: detected capacity change from 0 to 184 [ 1033.838481][ T380] ISOFS: Unable to identify CD-ROM format. 15:27:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:13 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a46", 0x24, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:13 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:13 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) 15:27:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 15:27:13 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a46", 0x24, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:13 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101", 0x21, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:13 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a009622c2bacaef2a43a5924757cd44683c2b6350039e18acf6f01c5dda719520e81a3b47f6701edeaecd91156224ef707aa853d893e2a3ff9367538af59b50d75585089d03c86079bce019b51993469abd402ab0e178e2d774000000dacd0a91e7ce0a4166fcc4e246ed5eff60def6eca80f0f9782cd241cbd05edb092f3d0eb4506e27e0896e7c02ee4654db5364ab3895999e89b64b18fbd65693132d81ff2c1b1bb7e3cd94c61414d642ce1c21ef9d618672df615b0b23a707007d971ab2e4190ad60bdc9256b"], 0x60}}, 0x0) [ 1036.521670][ T401] loop5: detected capacity change from 0 to 184 15:27:14 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a46", 0x24, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:14 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1036.737286][ T421] loop5: detected capacity change from 0 to 184 15:27:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101", 0x21, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:16 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a08020000", 0x1c, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:27:16 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:16 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:16 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a08020000", 0x1c, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1039.537500][ T435] loop5: detected capacity change from 0 to 184 15:27:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:27:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101", 0x21, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:17 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a08020000", 0x1c, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:17 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:17 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1039.724425][ T454] loop5: detected capacity change from 0 to 184 15:27:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:19 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0), 0x0, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:27:19 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:19 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:19 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1042.558300][ T474] loop5: detected capacity change from 0 to 184 15:27:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 15:27:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 15:27:20 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 15:27:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 15:27:20 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1042.675339][ T487] loop5: detected capacity change from 0 to 184 15:27:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:22 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) 15:27:22 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 15:27:22 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:23 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) 15:27:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) 15:27:23 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 15:27:23 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 15:27:23 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:23 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) 15:27:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) 15:27:25 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000000c0)="8800170000000000001700080000000008007809140b2a3a080200000100000101005a4607", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:25 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 15:27:25 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:27:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x7c0, {{0xa, 0x4e23, 0x7f, @local, 0x5}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, {{0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, [], 0x27}, 0x7c7f}}, {{0xa, 0x4e21, 0xad, @empty, 0x1}}, {{0xa, 0x4e22, 0x1f, @private1={0xfc, 0x1, [], 0x1}, 0xffffff00}}]}, 0x290) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x5, 0x6, {{0x15, 0x4, 0x2, 0x3, 0x54, 0x64, 0x0, 0xfe, 0x2d, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0xb, 0x33, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x6d, 0x3, 0x6, [{@multicast2, 0x2}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010100, 0x4}, {@multicast1, 0xfffffff9}, {@multicast2, 0xfffffffc}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', r6, 0x0, 0x4, 0x6, 0x20, 0x1, @empty, @ipv4={[], [], @multicast2}, 0x40, 0x0, 0x0, 0x8000}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) [ 1048.632978][ T558] loop5: detected capacity change from 0 to 136 [ 1048.662773][ T558] ISOFS: Unable to identify CD-ROM format. 15:27:26 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) 15:27:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0], 0x60}}, 0x0) 15:27:26 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) [ 1048.810925][ T589] loop5: detected capacity change from 0 to 128 [ 1048.820792][ T590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1048.830927][ T589] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 15:27:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 15:27:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000500"], 0x60}}, 0x0) 15:27:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:29 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) 15:27:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x7c0, {{0xa, 0x4e23, 0x7f, @local, 0x5}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, {{0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, [], 0x27}, 0x7c7f}}, {{0xa, 0x4e21, 0xad, @empty, 0x1}}, {{0xa, 0x4e22, 0x1f, @private1={0xfc, 0x1, [], 0x1}, 0xffffff00}}]}, 0x290) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x5, 0x6, {{0x15, 0x4, 0x2, 0x3, 0x54, 0x64, 0x0, 0xfe, 0x2d, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0xb, 0x33, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x6d, 0x3, 0x6, [{@multicast2, 0x2}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010100, 0x4}, {@multicast1, 0xfffffff9}, {@multicast2, 0xfffffffc}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', r6, 0x0, 0x4, 0x6, 0x20, 0x1, @empty, @ipv4={[], [], @multicast2}, 0x40, 0x0, 0x0, 0x8000}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1051.652872][ T612] loop5: detected capacity change from 0 to 128 [ 1051.671270][ T612] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 15:27:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {0x0, 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {0x0, 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1051.707732][ T621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {0x0, 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 15:27:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0], 0x60}}, 0x0) 15:27:29 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) 15:27:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$sock(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="f4bc3fbfc3da2552427653", 0xb}, {&(0x7f0000000040)="475978cedadcef28352672bcbbef8aaf155924e21d978b9c0dd4843874d467691597cdcf101bf744eec9b867d90e7152a7a5b559f9e200b94f86a6bea08fea8fc9aab044dd3abc1b0eba3aae3d6a7b8b46e9c5737c7b6a70f42177448e88bb15762dc94993d2ff142d394eaf167d558bf6bcf00327c97ddfbcb6ae1572de1be58c6668bf40a235c2fd57c97f52afbab75fada46f634607819ea30b64d8744faa8c4d572dfa7a09f12bb77dfe64691aa946a46b4053a38ffe97", 0xb9}, {&(0x7f0000000240)="afc8fb5fffb24bfbd3f8fd2f149ebbca9f79eb360063ad7be4b53e223095b14222a39dc1643126bd9e3dbaa0f4a1da1bb7762c4cfe35134816acdaf54e5209d1e0e17119bbeb40a98fd35a8533c1b6b770fe38d896b3ba7a68307ba2cf207140c9b9194ead8a9ba38fd455467796e52785f08990491a371294ccce668c54fc3f98a2ee3f23f81994b63432a9a92d2c17b3b841a260d1a9a6a4e1ba6212bddeb61c350967bb557d13daea2627aa658e79c08090d3195afc8a1fb87ed23ca51609", 0xc0}, {&(0x7f0000000340)="13ed5aad9d46703c84d8a7b8565111fc2ee4fb312aa869c8fbaded63f522d30a215776f4ebd57304a99ef17b6be135f83cc0db7a790eac13322eb9826447680436233d762226322cec6b42d920678fc64fc2b7c2bdc2c90cdf04ee17d64055c356925627ce8f61b4d188f50138acecc3d7edcfecffc88416bccfc02d56a69d33d1fe717e254d00c121af8d07709c3d84dc1807353e17cd273cc868b2d7fcfa81df038573c0630e738c34ba4b56d7f6b911517d914c0590ba", 0xb8}, {&(0x7f0000000100)='0z', 0x2}, {&(0x7f00000004c0)="58583c20d7be6b48517d9843f2ba0a4a5e4b18b45853790e57fbeca47f144a7289fcd89f84829309f089857999a5a6e41fc1df389aaa668633fb2e9e034e27e9a66ae7290da617fd6c9cf40def181bcb5fb8a2b4a77f47298b0b7e6558e53ba1c5d9943f0e646484d6b6e79ca15f9d5f500b1ce971663fe3f9cb153609f49c4a6f6a89250e4b0dc1416b7d6899e29df4fbf214409deca311e8a31a574cff827453b52a76025ff88c0937cd6d6986fa0c230336c68b1596e25375945adaacfc964f2545fce77ad27642734cbe91bfc1477a756ab1d1c8dcfe591e714db739979c838e6302093614fd3cda83325151e8308243b0015875a130a422e6fd6df974b71d42773b3089bf31ae39281ee7f19e7f488d6c853783986096a3876a23d32b24064a8cc2442cadff4219b1a3147d4d23093cb65308b4fe36d910fac54352bef592a95d83c76e00acfec9e05623f3d7b833c1a2f9bdd9757d8ac19834a591065bef58d1376adbb2f0d3b93796191127de0197833ae3ef1fc79794949eb8d669051aa68830c45b8d678d5e5a8ff68a847063c9661445c7c9dffee6828713119bb0e156a0b1870d2828e98f5c70a95efbb1584ee6551f6b28f339f79bc2903d901c6499f8229bfe1a408144f0ff3b0fa539562ba0be0a948d04a5fbf6b106fac4f76ab7ec8cd804f4c96a9bf892b546ffe75e3a5121c5d242f4012bf25a72a7153ec2d96b7f91b92a72b999231eaa59bd4ba5ec2f7703b4a07c006e677ec48524707dba0b91d23745ba1024abf8066057073d0d7fcad91254eac7aacc89a00eff2d268fb076b616288a6a945c519c390bd0470f3aa988582897fa00fa5bc9563d2f116fe279b72922c6fb22058beeb0dc64a6070d2a8ae4ea09ecbf5eb6aa6483b0dada3707bd77f90f501c0d2d435fbb89c7fade23da2be2c162bcfc5ddd1e732bdb4bf373bb5cc5367bf2f3719f2eddfb68840a4730ce37b43368f5b556e5ffc18bed8ef5b984f0ffa920933c222e9de12781836a89dbe1130c967afaf3d85915a3e051ae091856ce7023638f93a3efbfe97ff789797c15dd6d84f3449238ba539d89b15380bd5e4c2bce985be06db43841f99ff694289c7de84df4fdcba7f00d70eae917f1d62be2ef4d2df83e85cc9ee6e76cdd5aaf359ed9827163329efddb96a00f8900ed0f90c54add1eda883f8271d79008ec5847ccac5091c94a11f12912bf4b6b334889d7d1231fe14c68d686bc7df419fd508ab86a838c285e19d5e2af32c9525638e32d239e627234f8878ded912e3fbcbbadd2204ae2518002544d32257ea691dad7e08a43132051b4d6a6ed7d44b14d30da4ff714279803a68acc533abb7523e2bf0a6d6afe0ec67dc401590f2872e5d84b87933dbf4b138c33b787b0b148c516426f72662571847848bddf0af59676d2f754b5f2ab76a12f53d1168a307e97a2a4ff6cc9f59ca28de913a284ded1bfa9b19843c6912999718a18d23a1b3af5ae681dc1d84d2f0c71e0463810a8f4ac7fdbd1dee6fe33f3027d3755d37445e14f79a039d11527a932865c15e7c1d55c43e110bbb7a44fc5efc6025bdc5721c216cb0066d06f3c23085c961642364f1fd3c4894638a2e36671d85441c80ec750420a9add167c9389b62112ef2ffda364aa23abd8f02702813325ae1c9e07e456e54617667c9c7e8a8cd39c5d6dcf07feba72d2e1859fdc778fe3e716cff7fcdb6ff6d672fd9f1549e00b30d36164465a0decaccacc21a9734a2d9edb9017e5e9dee89ca4a16b03aace15fbb265d38c73a8d7a52c6fc4028ff7a42308d27eb0f33b087347a8644ba57e2abc5520d1614dcf57d867627e4b82a14f7501307a9855b0a95ab9d603b4573652b19956a4a415d6c274b33cd241076686832789bfb10c024e4bf4417692d6e3c267b64d5deec1f72ce6252c15a75f648523e5c73b4293bb8f0ddf541385bd7a2708fbfad3eb495e93b34d5acd3ae31315cd80ff5928254bb6b4d67331e0693310bf3bada5687786e1e31d4f79ae328791b7b2ffb8fd90743be9f5b50e018ac1b59685aca7f43c9db2f367f746e7907bb5e55ba8d8024f889243f50066eb444e16a0640be8f44c65286159fe26fe2f1ec2ba639db3bb7f3e3a104a2c3f55a1fad71b300ad0d3a196b009e786f2eb06ff1b4820300b65674a8862e83f9015b7669e91a14d84cbe0ce8a00886f4168f12f4b7df61196f4440cd9c542667145c946a2a88429a25f71a1373c98782217408aeed9624b9e6abb584634dbd9ad56b95023658d1c2035840357033ea0b817c12ab4d8f1e6ccf59066f699af1ac9b734497827a7c498faec4453d3d4717eadf64792fa421735c89ab27b558b9a8adaacc35a4ede29f305a7001d949ad5a625e3e76a6693b0f287b7f0271ab5327622e0b8e3a79e74d414407285f7a09a05d4f051c31173dcce690a079d19c3d7346aefec11cc2891f7f8d61312d87c97e3cd5d1da2576873d2393757000577d592afb45030b2e960401866a2e91200712fc089c6a8f4b938ee26b9e7ad168583047d78d99c78b5ef370a20d91c6ae7881b08a59b4db560984a5f3ad7a4fcfd28848a48fc601fdf5b57f00231b8a3916310e48ff7e57e399b0f8b3e593ddbde037bcde55586a03e36d7111392fd72a39fdc3d4e5e742b380ccd13718c779faca3eb5e96ebe609f9c34819c4e73e5dfb2d664c5984bf7957225ceeab959f0caad725d5e348f92c50e7bc4b9f5c272f925ddb9140324782d79edaff08f64c11d611677d08a54e20b3f09fb47ee4d64c47cad9d58765dbc96ed9b768cfd080644cb420c24e1859be0c46c818c79ebbeb749112177d04ba92cb81ba1c448dc8e94cad784d006dddde050edb49bf183b1e54f083c4364607e3b1a25ed18ca28bdfc70f73ba823f5d2da0602c2bc36bda150ecc6a94f82dbef7218ef28793b21d126a4e735f56bb3bb2c0498d97c56239fdfb2426b4a90bb6c3bc9216d72f3c4102d0d0b9b1de67121588096fb022ef622561d1ef81cd019da7d14a9c3e5c9bf5e6b133b593a3ecef1579bcd7aee1fb8dff0eee0cdc8ee169dc1b8fb78c259ead80c46c722f92fb2c43a3fa81cd90e2d23884ccee6660d2225b77ee5277a3e59002083fb395e26397d59ff8d45e0360f98ab28f2928a7bc7d400780e5301a747d866711820e1f008d838d07d4a3ac23a354d6ca61170ae1139cd6410f62cb43f34685fe6bbedbd85399bbbf87621d612163bef3d25b346bd3708ff8969339e633f050ca13637c1aeda65786b79f4411992c7acce4640b4550d00a6fca373361849eed433659810af9e7891887c99aa58b99a94e1cd17df813a4259282c4eec667b0d38ed3db04d9bda024fdaa7d79194f427400914378865bcc4d77302897d006e8a8664e675a697a53970855bc187906dd6ecd3c5a2ff1a250adc31b118685f88b27937955d8ee0048377380babdde423ee4d4500227777a66dfb286c027cebeb03c009ad4bce67361924f00650aa15734a2e57d02f3568fcfe16c0b45eb7bffa62e9dedbf148dc576035099a91858d278b4cd5ddb92de7ae5a5eaf67f394c2f4d2bfb9f4560030e6384928daebff27285a36190acf0225a2b3796be90586973f8742670da00828c87602eac147810337bbb29a09bc958e35c800fee876fc475e6e19b8f337d64045d16d38891d5ee4cf82fff5ab45e3c9dc5684335cb56628fd846219b1c3e5ad718b301dc42dd2ae4bca156520a210cbc6f4382cf361f05f81752e7ba1382d6b4fc2d7aa3f49372e515b512fb469519609be2898fe86f358b702be22d92166ba3629a3a5be174bf83f4af4e4722608fb2bddb4e4aaff7ffe1120e9e862e6a398d036f4f63a8af8af320822b8267d6598d44ab2e8e5c01ff870968577920eee36b098cb81aed41797b0e943a7a7ba17d6ae006bbdcbf48c5d996e527fdf0d6bf221ddf27b886620b84b41a1a610017825f8552d60930934ff57bc557f6721088f7f9230cf5c2f051f425879d4f18967ec29407465ec789f5979a8c3d38c09b56db716354b39baa13194bb143b299159000da9e253653d4c934d1f79bbd358db1d65884f0a5522d78c64dcb197dd08812ca661049951529101b3487b4bacf250fb314f6fa211348b93273e4374cc558d3a6bf6cf7b1d6551810d358ec6c7d518f00e9b469522a8efbce35bf47b3aa8b290fc9f41cff49a7dc6f5682832a4cfb1e30d7bb86cbc4c8464156129fe1ffb5c606db7aa077fa78b5739b86d093ddd151ad244d01eaa6d607ddf5d7a4b2a811903419cda8caa0723a05a3a20d8f536aa2c6a15486759a9d8a03be6b352a2468512501d065e7e05421bcc0b4b4ef1de68ae3f1d5533c14d2ea8497604259eac8a058d8662e51e13df0f722c3745d63a65cf5c6e4a1f076205b6e4b67ea18ca9e153b815c59d4ece8da6144475188129c23f4856d2cd3f546474fd8328748ae58e7dc0eef4380fdbca0703a733cf37d53149a2b94bd5e0d265c8cd65e284f8328086b3323e58191d8be9f140e736ac92a5c30bd92f48986c5a11040d2b2a0cabaee55692de935a98d1dd315575b64f2046241c3cad05edc748c9910add58e4b59b88e73598abdeacac15e943ecdb363d569c233551d940b6d5eca28ae821729f631ec90aeddea5adb617808d80437c913b4f3ce5328893f5ff62eb4f1ea30efe31c60a1f09e356c997f9d115cf164945ef5549550330d976a48413eec371cc57774cf8f1f63b03e1459f4ecefd96348ce34a9e491801b935ab9ff8c5d3df0fee0103dfb81c160383bfaf2547265daef89c0331aa815e037f86d8e7b5fa951a095fba9475b775d67453bc2153029fa58374fe1ff1ae406714fb0c6f7d7c2558afc16a8a271f284e703bdf6191496e8ebd9047acf88d6812ca5f10a5057c10d80592b37cfe3c9475e4ff97307dc90e82d7c9047d95ad23c6321536b9f2ed42bec05cfc8520c5fe687ed8fc020c567a5b35b0ccc846e7b9d05a3fd3542cb8a920b377b292f2b06f4e9237d3123141aff68b8f71ba1fa01077855aa9737508cafc2f2237ee8ea5372311bcf4cb1381b362c0e13f31b27bb62feb3dbd5afb13df0195a64d0cf35c82e864ddde4c80f7f14ed1625991c910a098646f14fcb91a28174d9024d768d5c218ecd5f5ca19aec905aa1a6b29181f75bfec23eb85d899d8a4240aec2048090f53558b42e432f4fc7372b78ed7e9a988b2f51c9d322578913c3f89028482e6cc5446147d3896c3426fbe6f1dc8c436169a54372095e032d6086001485d6295cc36906063651a1dfd3a9a34eb0a4fbb7be8da59fd2a68f243e4015599e361ddbd0f804918ddfdb22527f009ffa5d0f6b6d0de379661f4815eacdbcc73ff069f00d76c3431144b63653bd686839bc23b48db98b34bd04d5b5e5ba570d61488b30aa959628c0ee92b47eb32534e648b9492fe6bdb4e0fa87c6678fe49c874da5e4a62cc01270137d65a1c5831d9826ecc9d39be41706924a26a90b1e03b548f97b64e5e7befa28cfc86b9429ccd0a19f169b8185fc144d8bcadc73760148a22fb763f57d5f50154eee31e838954412378e275f7d99f31a7a4c153facfa080de24ad69f8846b6c2fbbbd2e1f7a275bac94aff1ffd60d330c75c33070b24ec5e4da39aa49f35c67cc3de1cea47342f2eeb0993bbd7948196fbf38068a54c950c1b581e04c968b402d0897d7690f759b91a234c1fa9cb8865a230ac4e95a8426c50945271cada927bb63000c4d13696c7c6eb1cb267cd946805c3b6ade8a0371c", 0x1000}], 0x6}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) [ 1051.873453][ T648] loop5: detected capacity change from 0 to 136 [ 1051.900073][ T648] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 [ 1051.903843][ T656] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:29 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) 15:27:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$sock(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="f4bc3fbfc3da2552427653", 0xb}, {&(0x7f0000000040)="475978cedadcef28352672bcbbef8aaf155924e21d978b9c0dd4843874d467691597cdcf101bf744eec9b867d90e7152a7a5b559f9e200b94f86a6bea08fea8fc9aab044dd3abc1b0eba3aae3d6a7b8b46e9c5737c7b6a70f42177448e88bb15762dc94993d2ff142d394eaf167d558bf6bcf00327c97ddfbcb6ae1572de1be58c6668bf40a235c2fd57c97f52afbab75fada46f634607819ea30b64d8744faa8c4d572dfa7a09f12bb77dfe64691aa946a46b4053a38ffe97", 0xb9}, {&(0x7f0000000240)="afc8fb5fffb24bfbd3f8fd2f149ebbca9f79eb360063ad7be4b53e223095b14222a39dc1643126bd9e3dbaa0f4a1da1bb7762c4cfe35134816acdaf54e5209d1e0e17119bbeb40a98fd35a8533c1b6b770fe38d896b3ba7a68307ba2cf207140c9b9194ead8a9ba38fd455467796e52785f08990491a371294ccce668c54fc3f98a2ee3f23f81994b63432a9a92d2c17b3b841a260d1a9a6a4e1ba6212bddeb61c350967bb557d13daea2627aa658e79c08090d3195afc8a1fb87ed23ca51609", 0xc0}, {&(0x7f0000000340)="13ed5aad9d46703c84d8a7b8565111fc2ee4fb312aa869c8fbaded63f522d30a215776f4ebd57304a99ef17b6be135f83cc0db7a790eac13322eb9826447680436233d762226322cec6b42d920678fc64fc2b7c2bdc2c90cdf04ee17d64055c356925627ce8f61b4d188f50138acecc3d7edcfecffc88416bccfc02d56a69d33d1fe717e254d00c121af8d07709c3d84dc1807353e17cd273cc868b2d7fcfa81df038573c0630e738c34ba4b56d7f6b911517d914c0590ba", 0xb8}, {&(0x7f0000000100)='0z', 0x2}, {&(0x7f00000004c0)="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", 0x1000}], 0x6}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) 15:27:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0], 0x60}}, 0x0) [ 1052.062996][ T664] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1052.112811][ T670] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:29 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1052.164232][ T705] loop5: detected capacity change from 0 to 136 [ 1052.196704][ T705] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$sock(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="f4bc3fbfc3da2552427653", 0xb}, {&(0x7f0000000040)="475978cedadcef28352672bcbbef8aaf155924e21d978b9c0dd4843874d467691597cdcf101bf744eec9b867d90e7152a7a5b559f9e200b94f86a6bea08fea8fc9aab044dd3abc1b0eba3aae3d6a7b8b46e9c5737c7b6a70f42177448e88bb15762dc94993d2ff142d394eaf167d558bf6bcf00327c97ddfbcb6ae1572de1be58c6668bf40a235c2fd57c97f52afbab75fada46f634607819ea30b64d8744faa8c4d572dfa7a09f12bb77dfe64691aa946a46b4053a38ffe97", 0xb9}, {&(0x7f0000000240)="afc8fb5fffb24bfbd3f8fd2f149ebbca9f79eb360063ad7be4b53e223095b14222a39dc1643126bd9e3dbaa0f4a1da1bb7762c4cfe35134816acdaf54e5209d1e0e17119bbeb40a98fd35a8533c1b6b770fe38d896b3ba7a68307ba2cf207140c9b9194ead8a9ba38fd455467796e52785f08990491a371294ccce668c54fc3f98a2ee3f23f81994b63432a9a92d2c17b3b841a260d1a9a6a4e1ba6212bddeb61c350967bb557d13daea2627aa658e79c08090d3195afc8a1fb87ed23ca51609", 0xc0}, {&(0x7f0000000340)="13ed5aad9d46703c84d8a7b8565111fc2ee4fb312aa869c8fbaded63f522d30a215776f4ebd57304a99ef17b6be135f83cc0db7a790eac13322eb9826447680436233d762226322cec6b42d920678fc64fc2b7c2bdc2c90cdf04ee17d64055c356925627ce8f61b4d188f50138acecc3d7edcfecffc88416bccfc02d56a69d33d1fe717e254d00c121af8d07709c3d84dc1807353e17cd273cc868b2d7fcfa81df038573c0630e738c34ba4b56d7f6b911517d914c0590ba", 0xb8}, {&(0x7f0000000100)='0z', 0x2}, {&(0x7f00000004c0)="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", 0x1000}], 0x6}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) 15:27:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0], 0x60}}, 0x0) 15:27:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:29 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1052.219309][ T713] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 15:27:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1052.307633][ T763] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1052.317254][ T760] loop5: detected capacity change from 0 to 136 [ 1052.327684][ T760] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 [ 1052.355985][ T769] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1052.458677][ T776] loop5: detected capacity change from 0 to 136 [ 1052.480038][ T776] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 [ 1052.995684][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.002569][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 15:27:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 15:27:32 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:32 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xb, @dev, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) 15:27:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000008280)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)="2b753076b0ef4ebb3659594351b5c60376bec52e5a316b38a5fc28c2b620eb0861b0d384c1338b920f112d5a32c7edb9c913df39b39962063aa014b10c72c189cc4c6d584ed96e698b1dd341200c39bd424f0c8e0dead25a3f17c0b997b2900377c6970ad97202ecb59ead30f0a9e2bf8726bbf3e530d589808f27ae6a51718acf8fa206b9a7fbc4d8dacf22bd33eb916ea07c248ce2c832c9daeb8d99779fc9672ef753ef0bba261a394067dcb0601f9635b39da116d4455ba6117b5d42609a204dfe18cead2d05a0312e9bac1313de58b6b46af1cbab3ff39319cdab4efd1f9ca78c48290557cf65f7f6f35fd4c627eb6348aafd17", 0xf6}, {&(0x7f00000004c0)="50e9f38010baeb6ba606adf800c82509bce8782724d68ded367df202e5047f0e6c47263146d14781e75133a02690d3e90a9e4ef80c242148454c0a79816610ea69aea736d4c7329a4c73d28d76a54a40147ec6fac5e92a2abd943a52b720104e6cc0cb4b20739ff69c2e78997e08b730f345c4d4006c65696aeba590f6f8a9c3e37a935bbbf8fb06ea8f4305f738f01d97adc404b4abffc1fb5242eb9318e593b5aa0555f23d1422685d290d613dfcaf81c9ef20e4406687d07e6d29e7506c7f80b91da8b38443aec244c8b7df00a5c99fa104b705df76fc92cd94474eadb89029126e295f34d356953f4596af246b0ef7f3cd45aaade6e7423802a12ca434527b6417f0bb66da9bc40304d476eb014acae42a3b28b2c74c7fb945bde3f33aedc6cfdad7d8f1c0076c147bffb35fa88513bfca1e1d6459bc1d180d2bb94b99c86c0162659bbd5e936e695996d1efe3c2b841cbf1fc297f2c0f5bd7f53814cc58a2a1ffa80ebc14a05b344429a172576aa8af12801223ea5ebccb88aa04b7adb359b6fbe5bf09cd163cefadd91b8907baf03dad5a4974c20ee52343dc68fe72903248ba37c53d774c2e53a01c59fda30267f6cb128faf80632ff76a14dfbb7c136f3a61a2b0e7b82c1edb57e02bd3050b2db1a9c68a730c6a6ab62af98d698135f04d0b55298faf059e98863b43128693604bcfa114f1a373d3bacc275fe1ee45fa848d44e4731514de95280d5c52bf6e92e240c850dbfd0f4e61a41ba8bb46a75b46426d9bc2d2154b9788f3ebe9946c1c627beeeab64977bcd60547abf3533b9fe06b181c3c0101496542138289b190be6060372bc2a9c1db18677092243b34ababc2dbabe7952532bc54d8bd5e1e89411bc9237f9caa4b1d4d372a2e2081c4b1cee1595259a4d2b0ef6baf3ad7a0b751a7ae0809e152136246682e402c737169977482217b0f0e82b7b0b982b33e860ff8428021f06834e069a6573d694c0fc33342eb852fa61c91a890e91c96ec7059330e610e16512218c46b4ed8d597e885c00c65be867af6faadbc21317e8618e3b552c0012850aa57e1841a5328a63b3d65a1c2df28140cd1fcc72d645b906f0eeaa572854afbe6924bbe0f5dc8d13f27af8af44c9489c0541719841c4e85e64960fe474c11bf64e2dfdfd6a0a479be7e8a8bdb22bd0ddfb6016cb46b17014a2f6c2615c60224433a4c076eb8b7db2cf5d6501c9e065e6dc5dfeddd5c946f0618d6e6ea8d733415df787a37ccf84ce4591cf2a1153fa4165f994dea8ad6a595837bedfebeac16c2eabe1a25fad39f0db9b40c49c56774c17dbbdc391e23ee2cb2348970aca0a71e6a5aace9ce4e0ce1280fa1503d3690c369259347ca94d4f4bfd5b3540e708d62e71a5294a0c94a45265418ce6bdc2c8d12c69d87d7df8f8726331b55da80955f193d8a241fa40fb8619ded17fd78747ffdf8fdde17f72a0e32097730715f8b43033b10a6e8e16fffaa708c565a3d7719c1ea2ce9e363d3fff0d176156858fff3777e10a6ed9d83763354b527d7fb175efd691b22e92737d9094e2b9fcdc631e0998229cc965a5cfbcebcb00a89dc1702d8625a63c077256d0f369ea1f79c15accf69fa9599a23bcb4c5a4382ad60887fad686b662060646846d50add575fb761ed65e0f9dedd114476ee94093abfae5f272dd19daeab645e6e19ec380c6f294fdae42c6f5e59579ad8740f355841c6dadbbe326a47ecd84dfcf13320ede781ae11a04fc1684c5885c2a02f06aeb3423e5153c98d6b41819becd55d21afbdf08ed47af4ddb34b50f81f9ab53dd1e98f1717c9f60cd85e2b1fb1a31e0e0766ad55e8a3503a486307ee4174f4fd5f177b1deb94252c3dd551c833b9d19b6cab5f8fde2d3904be7a4c59c0fc37359be24ef9a133a0422574b6662b8514b64f27a66f3f82836f4a9062753eaa100ac8e1d302dd60b08d2826c96be5742e355584c2aa4e9672b82b92b74d1d9a2aeb35815c6ac4e8ed16e31f89852b4aa290936cc56b5f8c3e0c0a9a1ee2f2d2b02d9b653e6d625a194c10df2740b09c045b0b5e02e8ab2e9b89558ad85934bf368b3e6adcee2fc7c28803ce607070be5e9ca98c56a65356f6fe6294d13169ee93496091fee0475f8bd9980de1dc01af9fedb2c4752dfc6c78c4610b4f3a50f91f2389247e6d4ab0b41301a277022da90b61dd7908f971c4b3c55be43f542e52f45b44982a167a7ceb1bcf1c57c7c4f4c9036ded7963383e28c6f6871a781d4b883d78983872567cb410e44e02728ddb5211b6304268362c58bfe6342c1704189d122fc4a7a3673d609b66759e957eb6db81695424d73eed07986e982674db72ca8872cd9e83957a7f561bff91a71e94b093443575d4e9d58fdab46795bcd9e071798caacac2d57aae2834427328311e727df3cc45d8f08c26afa66ddbf6fd61a68d372361da4a06925c017bf8e78fd2602d275417ab58295c5c2b3f99accbb4410bfc310c030ebebc165fc6fc180673cbeba817f2eb45285869b7a95257cb95b8daac60249d5acd092770c669bd533c322c92b37358517620136c583c4f773cde63a3a453e3b8a42ffbb134323b466273e142c5473cb6ca3e536727a11a68f3fb77b7af2bcab601cb94087723074d7a6d37fa68270ced4a59685c3447220d421824fb45485a322d39301d1254debb2227a579dc199047b777a9ff6e63df0a73b43a99e572106b641a446ec0605a2dad0d3634d25d7cb0ce7f3ed0675951a455c94c75932e17078917b44f6bcdc142ee97c1a13219094559eaf9b896b7b2d342283a5fc7cf2239a01a4ed670d8c16a2c97fc11f9ceb070bdbebeefb8c81581babe96ae84bedb944540407bb4c4c4f76d45d478c19d6b8f4dcbc7b17da9eeeab7a06750e78555455f746949dfea03f3cff1c439ae49d0ccf6575fb1481f9e7c8ac871976fa2a21f13ff24e1ccc9ad0ed6d987f0f94ba63aaea2918f82659b2ad9acd47241a68f9b41a4d6614804a2ca07e0ae3c2ddd28362fc52da057b173016d9df75c79d571bda15d5b0bd33774cb19a4f69d033fba1ee5f395145d668331af7d6b3da3f3940c32d247c5563528d3d37721271249aa4e932a11cb88387ea6b5eb85cf6c44b3f965df638cd3dae62df7677f7cb7fb65435f49fde97b83d1dadf00c68548d58146a6f4506f562c3669aec4928f849e0e10403988e6fde4b43435b40ac9af7d632af013d9be8160e7a9314d02cb2358a8b02320f5a710719ea569e6d17f428472e63e76ff0924a6db0c5c35943395c075e16b0f1ad624d5e8659a5c28e89a8894d65e5359daa930af71dcb7f0c5ae1afacc7c6f2a637a7994614fe2d6b9fcfd5a65f6c501588b9b6b0ff6c454eb652cecb7f4ab5c80b4a0cf3882e18c0e61ca37f5405635f30a1405b0339930abcfd226e7deb5cab44723afb1aa7d479bf1e7f75e4ee0a4c94699ace5a591c03184e0a95f4a863a6f67719d1bcf4b2fd153dd00ac1a273288ee9086f913ede6eef67932fd52cd3b98d3f6e828451b62c4c5112d927d8f670f3e5a3ef3018479a39fd81d39be4ff3bed33536aa1de85d78019409722b84a74947571162416be8dd262c2e32aa2ee44117d3053d737ec395f93a6031c8d86f6075d2b38c3c2a8703994ccacbd0382e96c1d7791d3597945c03b8f915fbbae58aafe64014fc966e22b64af951941d4211a3beb26a2f736674848aaf3f0dbdebdf283f7101a7245a9856688da731be767f027a8522b05d143c70ba724c2b5df43b6ab7949e29471a3b5831962d4da0077e13a8908f78a4309f4d72f13ae70297977df532858b326d41e69721a601df70272ee2c38591790401d7147beb0420e783730a3ba4fb7d885cae7b142f7247c88a3a6291f3970b495fc36737d45baed80fcf48c201cd3cb866048030138612a4c476c18bee716cc21d9734e5500c06154af3fb090a213e106fc1ace29c9d3c4f3082c6fdc64dc73a5522d92593110dbbb71cfd00fca5f2fa7a915f7ec07ac6c2ebe347ac938c03b0d0d91a9371bf20a785c2f84027e1c82718fa11c8394f84a1e26e631a75c807601ea01975e9646edbc3728a68e4b7313f8acd2c3bd2600265fb50c6e4dae878a49d1dc94ecb1d31c79a25dd87e2574591aafce59bdd5b45331811531d2efb522fb5c4ec08f580a67ab0aec3196d47696adfba473e6eaa126612111157826761ec6a3e40fd186b0238fbc29af1ba49e664692ec4cb709660a19b234242be86888ce926e5715586a83bd29e3f12c48cc7b61831ea4f1689266220337ef96c7e15d7a94efcdf7ef42adcea5d22a6307f319d47fe41942fd646757cbc9116d8555010644dc258fcc4d0c43ec008bf11b433b531cf54d678614da58fae0426451807b7c08cbef2fb4fe1d60045223bad1806a750a8f75352c0b3df7abbf9a25d0f3e4029ac0384f3bdf6cde93980c55ce1b1e4864ace4c1f1848b0f29677c8dc627ac739c52d5e04abcf63dacd045321056f7c3deae8941e044cc789729efabc79eca19562f5fb979841d0e2ff51671ac56974e6ffbd3d9c12c3b81d6f602d48e0adddef6969874c2c95f18f518212fea7c2fa43d2cce82fd6e1823a7648bda2185e23d523a010f6cd8a9b0c53b7e16c06a0c3e41abd13bff58e264e7a2fcf8b69bd66038b2324361820bddf156604849fec56bd416fa2e05e64520bcd21a738a98333755b7a2c9850bec9e887f7351256ddadbedf61f2ca448c5afea051fc561cfd927898072832263a5c75d77005f381d16ebb41bdd2780ef4a64cc1d110ac19da243e858e475f58d6fed375c503c49b20ae02d58fa0212f0c2650af374713231c07065f70625e2dd300ccef97736dce5df5589843eed8ca6ebb47227a98e025b64055587e59543fabd18a81b2c5db84a1049ba62a2e4b1b3a243f4619c730212588150075a6a20bed872aa8d845e57a1f38ab1ca53ce74e91914256355dfa764b60170c209805609d7ca717fd2a15e7a9081fbbbf7e6c3c01a3ac5f70e6ddbe365587d022b294656f3ed511939c16f4d49c204aca92ce487f33cef06de86be68c5695fe3f870ee3966015a5bfdcf11f0eec623a26eac3f8f15aec2bcab6bb9be2c7d3a451b678727f5ff83eb216881dd316c462e81db158895b90f3d1dd8409597abcb7203cc6a2eadf036e68028fdeb722227f19bd1ea6ce53ba648c9e5915ac84fbc42d8b65f1f44be7586e48fb46d94dd75a36e9c3abd263afd115dd8c75861d82178a3f3ebaa06e01695d27b0e7cc06e84cacd019071f268c83240fd51ac5cab19f2a1eec42e9235ebf0c75a8e205abd3e34c94bfebbce01ea171b4a7604259fdd97aa9e7b7b26c5e47a956626af2894affa03e9c512827ee4611baa401893e6a15b65717ae0de4a2fec68aab47331c55450ebfc5581d8dae363fdc7dc4d2c3068ad216be633a0e8451036b902ee0cf2861e66f5eef66d1d65d6361f45042e310024b1db84e94fdada40d36bc5c5ec6e191b810ab0699ced9270d3e804584d6a1e7871e35d2166871f6f7567c705f16bc2c5a019a2bf5f5ac2516a1ab12122d7d9dacb10edc6fb6dab29a9ef437c26a645cb6f8d0f24bf3eb3854c564f8d952e6de836910fe08473a1fd7095e5de3415f3fea024d3260ec30d27909408b0b0b8c76940c29f005f29c5286e8abf6c8c79f40404b4df96839d395071f99c5ea0c0b4345aac292ec88d0b515de8304559bf141c753735572f98ed9df897c19aa48e2c858f47e4823b2a8a00ced3f450625e59544027251d24c2bbcc5f6", 0x1000}, {&(0x7f0000000100)="481ccaecb1cbb3df4836877b24569dfc7ddfabc6b96550f47c64baaefde2dc8ef8db48faeccffc6c0de8d38878499e59629ecf80b85abaf1405c1e8aeaf5f2b2e69704444c761b456ee06cc4243254e2a5216b795567b505e458dedf633c09c6f515fcb468e5318b0a9b6b0108c1baff7467a4876faa00365ce2a468563ad6fe960fb6132f6a505144319d4fdde2380e9db5cefc35c19959983b0cfc5b12b8d8a0f97f7bb0a53811645b98d409e8f8ad2e8ba534b2b2f743c05729f0e0fe577ac48bcdcca53d4244509242dd026673", 0xcf}, {&(0x7f0000000200)="422c095594f69b5ae592a2540922d8b27b80050d14c47363ec008f70482093958e9872fc9d6eb035ccb0e108040fb7c40fb330445c75300c37326ed8b27ca22c685fab9d8793fdeaa73b228499f6fa575955ae7017bd53c30e111168d465d8f87c87963ef7235b", 0x67}, {&(0x7f0000000340)="2c7ad2dcc47755269766679e943f23a93631290e072ca6c409a594a9f4a41f4941e80417e82ff38238b9a2c48a365b496f921dd8ef57fb6b12584b026167ffcdf659039d0f76b2c240be3efde401efdb24b3989ddf27c7c6be36041e2b6c3fdbcf23670eb0853ced3208d701ca8f336279cc72ce94cc548116db9a2ebe8a723a801cfa252bcb3756438f21ad1d72", 0x8e}, {&(0x7f00000014c0)="17c1c2df2042c59c9789352f89e70742fb40c5f9a0eaab3c075edc30bb31eff1ff384b81179d7ece376e01f445ddf6411a7c54ac0a299ac26201900b02bcb55bd7d0cbaff7045b0129ad9648c51357cc33c2be88e67213213e891063b20086bf26da34e73b1eadc904e2114c2ca2988d2b121d47a1507005de61aacbfc60e8cd7280f7c259bc5799e938b4c9510519550700712ad218588fbd84dcdf7b20439fdee582f793f5ade788ae1e2844e5592b4b2015b43751e83b0ec559eb35ef781694b2663bdff76a1cfab07f5a028bd9d016657f35e46b143dda7c72fe9830630e23050c30", 0xe4}, {&(0x7f00000015c0)="55e70dbc5aa86e979f829268e49180bc674867a4ca298c7afb3a1b6f8dd053a70043c67e90c2da4902bb1557d195347230ece9cd67cdd8c4ea7a09dd7ac79c206cd560f7183db78c02a9d7d84501934d230649d25c8d1ae6de39c8abdf513fdc4cb9a6c2e834f39cb3b25295577cc3aa99446dfd288aa215be3f468426ca137b69b634256a4945a2dac849b2e763bc24bbdd", 0x92}, {&(0x7f0000000280)="382c3208d64ba6b2d63ac36ca34d12df98ac41f0d28237bcd10dec9bf65e68c0018373f20783a39e9332c3f5165082c787b642c838d5e0d951e9a41dfe4601e23755f7c100b1f90d30bfe826323220aee6c31cf2e97176dd91068fd1849944be7dacc20af9256dabdba875b9d18370171de1724b", 0x74}], 0x8}, {0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="249a02e7d5208a3b864dbdede9059f0deb606c47a77989cc0817585fe403fc85e1ab5cd42c4a7e9034d19b4c95a755ca8af25b31e23573d05a33d4c6598eef4e4ae5d71e6715ad55", 0x48}, {&(0x7f0000002780)="3be5c7159f06c7f9cb7fa06ef57c5157289a4a425c14592ff5fe08cff81b6ff0b3e54c8cc62cb207b71827913a18cb3417098c924a9252fc6c5a4aafe14f618c2217c532ab37e167113a4735d70098c17350c307d61b7d61cd76f1343c60f4493c62689669d81433dc", 0x69}, {&(0x7f0000000400)="5fdb82edf88e3d78c257e9d4dd1ee99a2fc70db67da51e38442ea10644", 0x1d}, {&(0x7f0000002800)="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", 0x1000}], 0x5, &(0x7f0000003880)=[@op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x2bdf}, @op={0x18, 0x117, 0x3, 0x1}], 0x1060, 0x44004}, {0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000004900)="dadfeaf40b497d97c034a04e66d6632bb0c20314a268f147d65f80400b023e3485163c8bfcb737ea6a320c99ba581afd50e76497069f8676e4e0e40558103cb3307cdf5b2ce0a73ab5479610", 0x4c}, {&(0x7f0000004980)="cad5fff146c99dd311d2551c52752d65f4a993bdf54e7a29b6747ccabf97c527a6cc05554d4ab4627c404bf460270fa19573b15e56c14c59ec6d67c09e27a536a6913602b1fce2dab6f33dc1d596deab0df40c8d9277af1704860f9b44ffbf89d2c2bcc0386f63949242b1a5d5433db01094c33857e388b312cfe6fa3f2993320fa45b04a8c59963889a04ca4d49fdeeb1b8706a2721b8e5ca96cdb1d273df21", 0xa0}, {&(0x7f0000004a40)="8f70cd5f7af1cdd2de7ff6be133c90e57dba79a8ab85bebff0aef6ce4a7062ea05348f6366c7af8e9b2abb1ee9ac519bc6641a6fa9ebd1613c2a5c626937bfce7911062ca5ffc926030539bed602b37554ff5f3438e2a24557b37da8965267968aa50e8202f89eb02af07865c58eaf51d5ad99be69a5b9eb66f59f6aa72991256629f68cde970955e937bc2c7994d19fa370eca6f1b83965456e846281432276748b5e46f783dc709d075b8cda3f064a5c231e2e524fcac328b892a3e38ead01172cffee184eb09ebb6b4475e2a01a7e29bc6d6089b6a63fc96330e7536e3c02932414f830ec7a310d", 0xe9}, {&(0x7f0000004b40)="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", 0x1000}, {&(0x7f0000005b40)="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", 0x1000}], 0x5, 0x0, 0x0, 0x4004}, {0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006bc0)="f64b54f6", 0x4}, {&(0x7f0000006c00)="58748210c98e492c8aed7de98e98c5cf700441b4d7d03e62c73ed38e6d7b7aa6a30c679da7eee1628b78616ac191f5a6009bbd346d30400566abcf0b46b3d0199f564a48b5451eaedaa5cced955add29ac1007432b04f293818c7ce3813fd0d651e69e5200cb7df153b35db26d", 0x6d}, {&(0x7f0000006c80)="9da5276f545dd0baa7816de4906d4d2a80fdb24670f5efcf163d58119f4157d2efe8bc", 0x23}, {&(0x7f0000006cc0)}, {&(0x7f0000006d00)="a61b67ea3dfa72368e634544034f0a99b270d37b165d1990cb099cc717d461bdf81c2f8ed3b1edabf63f63519974baa2329b445fadd00392b92b7f1852c0c62fb819126f536bb053b654ebf1fbde2ddfa368bd5f06008825d735d7a232a6b69be3f3bd3a3fcf91c9fa71a450e7ddee0ac26c7732c931a8a43f9ba69c8d39499386f208380aeea46f26bd6e052b0ba3f68877700649cf9731bac00bd48eeede84c91ed710ea80fd541de9e09fde6c6d", 0xaf}, {&(0x7f0000006dc0)="a074a4fa0cb19ae9898620a0be4f90cedfa6e1b736aa1fe7896ede9aca562ef93f0408ad4d88d52bd9e6f9db9c0eccf8d7b39915455d30a1b29e27a2c4df688a0ffcc69068bb2cf4b04bfb3b870d22bd9cb84d11dd080b77ebe80d862d49d0dd9128d2b5cd139950a807bf1ea2a91b42ac5b5dd077e8c7538829b23db5874c660318bbb659b4a2eefecfa76e5b11332a8c5664f4a8598e4a86615575d324b1f2c84eb53b6afe6b6e4eee8eaf0f92525ccb9952", 0xb3}, {&(0x7f0000006e80)="9ce94c7dd0b586cda54def754d9c8437b117b4137f5a5d3b20fd0f0bea1f664c3872c05baaa9915d01b95102e38a6bcd97e4b0fe638e2bdcec3af9ea4dafa974e9c660c8b2fce14863f1fd1acce88102564c171ad3f87063b108aa2fee11528034aab318d04c2aaccc795c786bb1283bebd3bf5aad41620829bc67bb7fae505aef73d3c7c85c67156f37ba69a93f15e01b650ee2df2c096fae74d1c2cce030be0575a9f56aaa152dda0f53f79576bdee104fa2f0daa107bac6b45ed0f9a806b3b1ec507484b0715606ceaf8674806e1d0f36a7e5f96ce436f531f67165e6365766e85ef3", 0xe4}], 0x7, &(0x7f0000007000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x101}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x110, 0x117, 0x2, 0xf9, "61b0b3523d9949c10226d7e1f66c4524ed39b1645131737fead5dbc2263a487b7615684e8839fd8fd6655cbddceeb11f78b78b121b71d94a771328a46d94de212183d6abdd906ece44aa9affebd6d481a9c169936e6898c43b202c3dea5db17c73fb9cfff8c10233d0293a746097b5921cda4640511ae0b19fd5b2676610204ef859d9ea655037eb809ac2b08a17e00b1bfb4861b6a7e031334747a5e9a69433c9fb04ec4f4c92bd234fe875bcd892caa88efbca9628f9a5fcb9b534afcc21ddd699bd818aa4f735b306b9677e4630dcdf8ad2495021be3e4fdd81499cb9de9fbec2d4cf87bd4c4dc1042dbd02cda1634b17345a2e4784a657"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x188, 0x800}, {0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f00000071c0)="d041afba163b0b490ab77271e0426403af8135b26e550d78756263a106b9bfe5eeed977880efea6a75e510bce44a30b962bbc1b18547406afe19e188ee958b3c4062dee0d892498f7072655bec23c12b0f43edb443ba71", 0x57}, {&(0x7f0000007240)="3a48f5353e122a967ada6e946393280f1c5a56fc2230df352594c6e3ee05dc35f1eae378e16af0d795f2d1ddb833a8583d79912c24257985105f348bcad1", 0x3e}, {&(0x7f0000007280)="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", 0xfa}, {&(0x7f0000007380)}], 0x4, &(0x7f0000007400)=[@iv={0x78, 0x117, 0x2, 0x60, "71cec07970e634b5358b3b0f3262f65c2a64506e4b713fe71ce61de00f99e7f3806e0042de6e3da175a0bb9cf8e7f772749bd1c097310625ff668b8059bbf9d82ebab5ca4c50f6dabc1b9813094286e96975bcae30d11de664f509b9f3008d4e"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0xd8, 0x8080}, {0x0, 0x0, &(0x7f0000007540)=[{&(0x7f0000007500)="b4fdd3b094c04b2718efe3191dd3ffb31e9961201e12226d062398eb0be7d5bb729a0ff639831e", 0x27}], 0x1, &(0x7f0000007580)=[@iv={0xd8, 0x117, 0x2, 0xc4, "a4c0a5e6c900c2425d1afeb2b534904109b2d56938a4a8af07e01d0c7ffc97257b590d0084653da40c53805e0d337ba0879f36434f4e965b86515abf71783ff74f6a305871751dbc1a826fae6eaf23f1a98b8011ad2db4a0a61f2bc975572798356e55fbca48ba06a37b45f6393a6596092460a326d6a5512ba752d5ad87dc5fd8dd647367b3690fbf58a8bfc8faeae81dfea73fc52a80dbc0ac39df9271a131ca0c9bd6d03c9c7a0866450ce19eb4b1d2141ec8818f942bf77190dda0d6659cc309c949"}], 0xd8, 0x8050}, {0x0, 0x0, &(0x7f0000007740)=[{&(0x7f0000007680)="ed5bcb6589869310968f6edf86864a8ec518cccbea74461895927b183893adc6ea187ba427dc606a9e80b90528ab7089c1c9510005a8ad215077462020c18c2f55b47deed917c78a3c660c5feec535144b0078685082d5d46c356d53011514fadf1ce9029474f955fd2267ae48e3adb9cdb08b039f26a7ccf484760478c7eeb014c5325e6d54d117918e714b07281c48503b865ae1139cb8485c42b87e6ba3111c78bb8d8f924a6991", 0xa9}], 0x1, 0x0, 0x0, 0x4000050}, {0x0, 0x0, &(0x7f0000007900)=[{&(0x7f0000007780)="59ecbe20b0ac5e35114ce74811f568fd5b2f5c0922427b8397ef83261b7a86a731401560a7efcc35a1972d2dd587cdd8105fdb8ae1beccaa6622b6653721e8424a769daa71ed2bc9dfc5", 0x4a}, {&(0x7f0000007800)="a70f6ffd85533e9eb0a36cae84cfd2c0cc78c296623f9affea6990e2fcbfd81e6c24c7d182095f6664d725c073bdf5cd6fa09e7385b49566a2a95f36a81f984c4bbb384db1f163df0f8385803c63ef5b816d56d4888bcfce7420273768e63f81eea05ccf1070bc76a48167cb190412739f64cb6772da4d77c7ba2409aec67b67eeae5e84edfac716f4b72ffc655dbb83f1078ef5c649e0a8f52278f7927a86ef09301aeaa0d5014b4c96a2dd0791a9ba65079c758026e16ed54e9dde7ea9d1ac18878cd5dafd6c4e644c04553d155da0398e9d6c", 0xd4}], 0x2, &(0x7f0000007940)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x68, 0x117, 0x2, 0x4d, "41f7dcf36ddab5b2e7a6b574d3433d4ace8b030fe27e60220a0641f2b663d5f2c9eb7618a418e075d9da7c985c247a3a2aabd3f490b070747d4ad7b42bc02a9316600272d960ae8408e8d19bcc"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x51, "23e4378b5b8653aa52c956c4524c91738521d3dfcbcedc1fd0e9665a124b99082fd9d0c785ec6703a3086222e7124fe38b675e4e0bfa4fca75e522140a28956a04181c4d861cdfb9fa6e3854ea79bd2cb4"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x70, 0x117, 0x2, 0x5a, "b5db29cc7afddec60b05c6dcfa2b339de2bd091d57147b7d1b630385170c07834a2ffa50708e929549e10cd490f9f72a5a35c4ffb2a4b0073e00ea9e1e644b49747680955591c3703fb3d546e6c8f3e2a5bd805a3b7898734cf3"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x1d0, 0x4040891}, {0x0, 0x0, &(0x7f0000007e00)=[{&(0x7f0000007b40)="385e60b60d4873350ad8a27e66f6bec29b571bac2bf61caf8aec14d2b0f6c9b7f830a0aee87c5c1848ac25ae56f19532b6060b8945cd7ad6d124fe1b3ff420a417d200472d3143dc50221abe808dd309961a6bc8fb52935ee82b01038e71f204e3d12702f78b25208d04af30dabc48d57ee68b3874b8bbc00cd0741f9d18978a92995578000fb603eb8b4ed96a3961aa08deec3a48785c9b6585fb021203e441853d54fd6bbbbfd29687c97e27cb96c56974a00635aead74466a476ef2145acdae781f18f6ed5e6e8c192b613e2ba67dfab34c46614741cb0c2f", 0xda}, {&(0x7f0000007c40)="c83577ecb6fe877c7c0eb51bf680dbe70cf6b7f65abef1f8f29d31b79a07dd61245e855a3037b7f09ccf423df06c62ca5b387d174dbb01ef9ce6e0e634fef45bae15be9e80147c2c3c86e8416e284c1ff1eea6ab650b5661cf22118d1cf062f8247d984198856cab4fd3bbc98887d30d08e096bcbceae1bd060cbf75ac4695f9ab38a6fe27cadb3c799c6a1213ec2c96a4d1f577bc31d686ff74f6bb599bd41ba550987bcf0a6f6f00134114b6233e75616ae41c061f774ce0db85e00b5b383fc54bac43100dc60a0ffe48026829036434eaf79168c9bb5b", 0xd8}, {&(0x7f0000007d40)="2260fdaea03cd6bf5bd379b9238234c953ff65b6a646ffd48bda2d7496ac26f9598674e13d67f8217ad879574c28233cf740cc8c58e1e58d8b683319ea7f0126c22279ca0ae15c674589ef07d305c62d2baec56113262410290b3875b8da3beea7893ae1d84bf18e0edbbefbb4c5e3cca9d917a4b1db08513636f36070f8b7a867d1099ea0f9dfb8bae1f9f5571e069637fca8c6239f0104fe4c7099af18b3c6bbdcee960735e318f41d72f82a313b1698172bac8bb76ed4fd", 0xb9}], 0x3, &(0x7f0000007e40)=[@iv={0x40, 0x117, 0x2, 0x28, "275727e59c23605cc925176b1952e318bda3e008f1c5b0d8079f87594f3cead6e56612d262339506"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xd8, 0x117, 0x2, 0xbd, "2ba7fac9dcc512cee2c6aed808189d6ee674046bb7745738cec8b96ac04781da54bdd191d76be91154a5e60ced71de43409ac81f02ce3ed1916ee1532e844db01184a85fde1a9e1200ff6713c1d0a9c388c2f242df903d236acae0659fd5aa5298ad8ca1a195a1a7c6dce68f25b5807a0d98731db7756df4d28949232e621749c707d2eb780c7fc9eb415a211f42f690f0fc5375ef6ce753f50735bd70dc7fadd29ee7adf0ab97b0d61378d2f2e8f54fbe313ed909eb82245c35350460"}, @assoc={0x18, 0x117, 0x4, 0x66}, @op={0x18}], 0x160, 0x4000000}, {0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f0000007fc0)="865ba0750c541296003359", 0xb}, {&(0x7f0000008000)="7f73058e1206072f306dcce975f4a6d9944300154248199f24f3049f10a5a06dede5e06b142cc23fa0fe0b52b54e32d8ee8fc288feb9cd0a918a1582b50780f96130025c464caf8afa8ff1c0bb7895ae58a5ac7dbc818c24af557ced852057f7bd0695643923ed988d599f0e5fd3901ce0e09fa4664b56100c2e1dd1cff2c6f1ebf6a7137b34b4d3939bc1599c6374f9ab3b41dd6b60", 0x96}], 0x2, &(0x7f0000008100)=[@assoc={0x18, 0x117, 0x4, 0x200}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xd1, "5174df5d3b4fa8f0dea570f518b1b8d108fef65f0380a6f7ae237b6df79fec300f934e676daabc3a716d017bf1081704e3cec1d524acd32777ddbbfb623abd6264f1ac43487207f8eb01a73c9f1e13ff6ecac1e92826c5eaf00c2ba2815a67a0164746660fbea21c53d7607c5c84ed164f2c21e0b299283d8dcbe649049b1b7af6d2b7e6de885d6daadc5ea7dffe5462b81072c7f514e2d4d9791b76b6496a5c55c321137dff9266c46b8669c920392b6abbd90be6d9022ecb8b7b8be6bda5b273491104e91547ba3fb566ca5da36bfe4b"}], 0x160, 0x40014}], 0xa, 0x20040000) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x45, &(0x7f0000000000)=""/104, &(0x7f0000000100)=0x68) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000100040000000000040007000000000008000300", @ANYRES32=r4, @ANYBLOB="dd030000", @ANYRES32=0xee01, @ANYBLOB="10000100000000002000050000000000"], 0x34, 0x2) [ 1054.908421][ T821] loop5: detected capacity change from 0 to 136 [ 1054.936380][ T824] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1054.949125][ T821] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 15:27:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x45, &(0x7f0000000000)=""/104, &(0x7f0000000100)=0x68) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000100040000000000040007000000000008000300", @ANYRES32=r4, @ANYBLOB="dd030000", @ANYRES32=0xee01, @ANYBLOB="10000100000000002000050000000000"], 0x34, 0x2) 15:27:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/18, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c000400080000000f000000140001"], 0x18c}}, 0x0) 15:27:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1055.068374][ T849] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1055.096028][ T850] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c000400080000000f000000140001"], 0x18c}}, 0x0) [ 1055.121175][ T855] loop5: detected capacity change from 0 to 136 [ 1055.154195][ T855] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x30}}, 0x0) 15:27:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 15:27:35 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c000400080000000f0000"], 0x18c}}, 0x0) 15:27:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@private0={0xfc, 0x0, [], 0x1}, @empty, @mcast1, 0x5, 0xc5e, 0xcc3, 0x400, 0x0, 0x40000000, r3}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800"], 0x60}}, 0x0) 15:27:35 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1057.931038][ T876] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1057.942716][ T877] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1057.962594][ T878] loop5: detected capacity change from 0 to 136 15:27:35 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400"], 0x18c}}, 0x0) 15:27:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800"], 0x60}}, 0x0) [ 1057.993830][ T878] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 [ 1058.013467][ T891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1058.033082][ T891] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:35 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:35 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1058.084124][ T898] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1058.103937][ T900] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1058.118973][ T900] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1058.143848][ T901] loop5: detected capacity change from 0 to 136 [ 1058.185128][ T901] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0xffffffffffffff58}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fd6494b672"}, @NL80211_KEY_DEFAULT]}]}, 0x40}}, 0x0) 15:27:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800"], 0x60}}, 0x0) 15:27:38 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:38 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1060.980896][ T918] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1060.993541][ T918] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1061.003209][ T925] ptrace attach of "/root/syz-executor.4"[924] was attempted by "/root/syz-executor.4"[925] [ 1061.007451][ T923] loop5: detected capacity change from 0 to 136 15:27:38 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000"], 0x60}}, 0x0) [ 1061.038747][ T923] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:38 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:38 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1061.108595][ T939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1061.141005][ T939] device geneve6 entered promiscuous mode [ 1061.142967][ T944] loop5: detected capacity change from 0 to 136 15:27:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 1061.192416][ T944] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000"], 0x60}}, 0x0) 15:27:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:41 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4000000}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 1064.027812][ T970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1064.040104][ T973] loop5: detected capacity change from 0 to 128 [ 1064.055696][ T979] ptrace attach of "/root/syz-executor.4"[976] was attempted by "/root/syz-executor.4"[979] 15:27:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:41 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1064.072289][ T973] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 15:27:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800"], 0x60}}, 0x0) 15:27:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:41 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:41 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c000400080000000f000000140001"], 0x18c}}, 0x0) 15:27:41 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1064.200784][ T992] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1064.212343][ T992] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1064.212385][ T1001] loop5: detected capacity change from 0 to 128 [ 1064.290543][ T1001] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 15:27:44 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00e90b8a0e20c900001300290a0000000000000000402000004793ececb26862e8f7a1f13bad80a85ea94008c9b06e3a633d949518932799d0184427d49938f165c24030193ef7722cfe9dcb39668ec9416fab014401a0ed48f789b3c857c4a10a0000000000000009b091bcd6350c02d536fc892d0400e2b82a6162f3883b86", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800048004000980"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x29, 0x1, 0xff, 0x1, 0x20, @private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x7, 0xef0, 0x80000000}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:27:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800"], 0x60}}, 0x0) 15:27:44 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_mount_image$jffs2(&(0x7f0000000000)='jffs2\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x6, &(0x7f0000000540)=[{&(0x7f0000000080)="ff3ee6e8cc6177c9957a8b15218b9c353ad24f1a1792e2f5b20a186f8aa364586a76d4f1d8bdb6cb2f9f2551844f1ad555a6e4056a2b546a64fb354e571074cc19543894014fe457f5c91df5ae737f7bc4757205539b2e090b85aef930251cbda29514bc06182a7c3a855ffeefe9889508584c45e671553218a479581d77bd899f20754de07133da3d34795cd171949a6e22", 0x92, 0x9}, {&(0x7f0000000140)="e71dcd5a4bb6fe73d6a6c723c590ed853b2ee1", 0x13, 0x2}, {&(0x7f0000000180)="d793d97c2174168e8afb3dbc00b51bd8af132ddd3bdbb511b29fe173621e33b56378e84c", 0x24, 0x81}, {&(0x7f00000001c0)="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", 0xff, 0x4}, {&(0x7f0000000340)="d3882b7f75c3ddab7e5bcc9208633370571baf4affa6631203b89e1314a0a906c60acde4ad2bfd21aae8316248c108f9f62a61d1000df72d1d7baffb37bfd55706d2ab2d77085f8754572b604fa0daeb8e99a7c5c6fd2671db901b62ec8198a4de0d67e5232e1c5abf78de3c541a9b8c2ddae9405a8b497c8c1afa34ef7ddba4cb413a86c1bb77f7175bf10cb675570e5156cce812b50fe3d2ff09399b53440cbf24fd9e306e5103f1fb569c139c942224900abdde905174102f5a83fa70b148f1fc973875b185f459eb771304a24bd7b7ec3e749b1a93071a056c75769af165", 0xe0, 0x10000}, {&(0x7f0000000700)="523280b523d394b5343f56e50449963a808b1ca8547202cb505319b402481dc73d262a5748c993f5e66f484dd00e93aaf131735a2c28c45edc57de2bb199573b2f99c3eaa87925283b205b6fa968ba225f040a115ceee634d1e07283a0ef6b903caf645eafa7228e9935be203d9aa8865067ceb0835b21b845ea", 0x7a, 0x58}], 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='compr=zlib,smackfstransmute=,fsname=^-%,appraise_type=imasig,permit_directio,audit,smackfsfloor=$-/},context=system_u,euid>', @ANYRESDEC=0xee01, @ANYBLOB="2c666f7e6e65723e86d5d831ffef99888f69df1a94289a7fafe7fbcc8ee6c29b0cdffefe05d6b1326065e983f3b23dddffa33dc47897e5495f9c86e6fa7e0bee79e1e6cf562a2ae16f1f683c75da01f7aa4bba8959b7392d706a0aabc54c95d11a34fbf35325a496e3316e9fd625292b94d005c8082d48594a25c8ba780be04e0105d42a11490ccebe7a0ca90661b4907baaba0ff3dabc3199f974", @ANYRESDEC, @ANYBLOB=',obj_user=:,\x00', @ANYRES16]) fsetxattr$security_evm(r1, &(0x7f00000002c0)='security.evm\x00', &(0x7f00000006c0)=@ng={0x4, 0xd, "90095f4fd101"}, 0x8, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000600)={{0xa, 0x4e23, 0x7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}, 0xed}, {0xa, 0x4e21, 0x44, @private1={0xfc, 0x1, [], 0x9}, 0x2}, 0x0, [0x1, 0x0, 0x101, 0x1, 0x3fff8, 0xffff1c63, 0x8, 0x40]}, 0x5c) 15:27:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1067.079576][ T1019] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1067.089644][ T1024] loop5: detected capacity change from 0 to 128 [ 1067.089659][ T1019] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1067.101929][ T1024] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 15:27:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800"], 0x60}}, 0x0) 15:27:44 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:44 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00e90b8a0e20c900001300290a0000000000000000402000004793ececb26862e8f7a1f13bad80a85ea94008c9b06e3a633d949518932799d0184427d49938f165c24030193ef7722cfe9dcb39668ec9416fab014401a0ed48f789b3c857c4a10a0000000000000009b091bcd6350c02d536fc892d0400e2b82a6162f3883b86", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800048004000980"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x29, 0x1, 0xff, 0x1, 0x20, @private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x7, 0xef0, 0x80000000}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 1067.180112][ T1034] loop5: detected capacity change from 0 to 136 [ 1067.195418][ T1034] ISOFS: Unable to identify CD-ROM format. 15:27:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1067.241031][ T1045] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1067.251856][ T1045] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1067.337788][ T1052] loop5: detected capacity change from 0 to 136 [ 1067.355472][ T1052] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100010000001400"], 0x60}}, 0x0) 15:27:47 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000004c0)={0x0, 0x9, 0x2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00e90b8a0e20c900001300290a0000000000000000402000004793ececb26862e8f7a1f13bad80a85ea94008c9b06e3a633d949518932799d0184427d49938f165c24030193ef7722cfe9dcb39668ec9416fab014401a0ed48f789b3c857c4a10a0000000000000009b091bcd6350c02d536fc892d0400e2b82a6162f3883b86", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800048004000980"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x29, 0x1, 0xff, 0x1, 0x20, @private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x7, 0xef0, 0x80000000}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:27:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:47 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r0, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e657665000020000280080001"], 0x60}}, 0x0) 15:27:47 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1070.091096][ T1063] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1070.102219][ T1064] loop5: detected capacity change from 0 to 136 [ 1070.119664][ T1064] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:47 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r0, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1070.165567][ T1077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1070.175516][ T1077] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e657665000020000280080001"], 0x60}}, 0x0) 15:27:47 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r0, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffdfd}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xff000000}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1070.248840][ T1087] loop5: detected capacity change from 0 to 136 [ 1070.257696][ T1090] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1070.270273][ T1090] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1070.306730][ T1087] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:50 executing program 3: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e657665000020000280080001"], 0x60}}, 0x0) 15:27:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600), 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6c000000}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xc000000}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600), 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100010000"], 0x60}}, 0x0) 15:27:50 executing program 3: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1073.148418][ T1121] loop5: detected capacity change from 0 to 136 [ 1073.160797][ T1121] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 [ 1073.175724][ T1119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1073.187281][ T1119] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:50 executing program 3: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1073.260831][ T1138] loop5: detected capacity change from 0 to 136 [ 1073.268323][ T1137] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1073.278573][ T1137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1073.290466][ T1138] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) read(r1, &(0x7f00000000c0)=""/123, 0x7b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)) 15:27:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100"], 0x60}}, 0x0) 15:27:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000019c0)={{r1}, "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"}) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001600)={0x0, 0x64, "3dc63e20b678f47d5f1f2d4107b69f61e243262fc3fb42c3492ffcfd9e4bb08450f680fb4698ae5871e672247f83eebab8304924f4a80f4d20bb6dfcb4f866f3d1c1c63ef1f7a38fa2890518da51267a557ebb8230be6d7d8d8c2791758cd696b497df8b"}, &(0x7f00000016c0)=0x6c) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001580)=0x1) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000015c0)=0x13) tee(0xffffffffffffffff, r1, 0x10001, 0x2) sendmsg$kcm(r1, &(0x7f0000001680)={&(0x7f0000000140)=@llc={0x1a, 0x312, 0x0, 0x8, 0xdb, 0x9, @local}, 0x80, &(0x7f0000001500)=[{&(0x7f00000001c0)="380f4580071465bb319bbe6930b2e22475e63aebc696c0c23c4082a008a12673d55acab07d63ad67bc2eb2464205d0b56af114a16866c45f4ef555dc035ec39311d527c55b8ccfdf9115b2928e5d2666ad1c83", 0x53}, {&(0x7f00000000c0)="e1ae005700b4b48a3343019fe504dc398ecaaba8337dd416aec852ecff2ebaeb37a88fa376b0503a7b07b2989a602e2b382fd0e1a193e2f1", 0x38}, {&(0x7f0000000240)="358895a516a965625efabf5d96d1be0e3972eab8da90008a7cb741374b1372ef5b4c76aa6218feff1c18e696c3f28d54f5a9", 0x32}, {&(0x7f00000002c0)="8e500ff4d9e4f9ab1cc9c1cf9647ffa1bcb438d0e7540b94e16a033f765a8acfe4ca39eeca7ca1ecfeff2fdb8197185f4494b18b32", 0x35}, {&(0x7f0000000300)="c70b16a0ad9724e036065e41f140308ef30559d0e1c39988b9caafc5e4b8f8ee140f92ee65d595b9f49ce3a54c27de4f0232f83977e03b6082a905", 0x3b}, {&(0x7f0000000340)="31b4c16dd2ff01c4d305a2b9f16c09d78656efbd7336c799009487c420254eb65d277f6a912d10a1db1b4beb8893746f28bdc1e6d40b7ffea9ff46dc20ef42b13e142b8d3cd472911ccb7250d9c4f044ee2cedd1e6e064825d78177252cccebec5ddc6944d23292397b0d8664269f178c247e844756ced6bbb87636a4f238031fa766b23454c792dbafa5435e8d1cf4d0c534894201ab559e523f4e9258c64b9ad93", 0xa2}, {&(0x7f0000000400)="6923cfce1f39c91e1b2b2f52ea341d01eba344c0bcf1af2aa2190091034ce40f56661132259ef836066c09f9fa6ffb3bb7a6b7bf0127bf8c0ca81a18a17217031b55d8b81d4f2b2c2565cd29bd79b82e8a8db5a8e9e9469aa2d7b04fd9c9a765ad60ff4267bcbd1912217131e84758143b423bd6d202c73223c57909daa927cdb8b6cead6550b85fde8e7e69404bf451cb18d7379bdd872c0a347d114e3196409ebcfd615666020ad33684b60ec9957f5076daf7e02bc1462fa0f3a3b2c0ffa70ea5bf0f2c58a887055f5c1cec4473b0d15c015b795fd8be", 0xd8}, {&(0x7f0000000500)="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", 0x1000}], 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB="6800000000000000110100000000001809acc12c568a8088cd7b4c1dd22b0000b521f8a70964f1a5619c2b9e9f94a192f2b1c31fc7904c5ab83d5d7d6eda16160adba032e4160dd23cea64bd3e13616fff54bf9683f8c8f34b2cb6d373217ed6d5da970000000000780000000000000013010000ff000000620e2069301848b380d35889eeeb8c61f58f0e9989e1e2dab357384730bffa357221f6293022719881976bb9fe5d228c77d1b42897581189cfa5fa9792369b8047bd5116f84c4d25526bb146b5806d5dd5968c41392fc40a90000e6b3ea0f9623f56d601e3af94851b2a1c5036fc665c544f4d0f171fd439606eb27c9b41e086a10f0b1e5ea8fedced93a411198ddf987fea6b7e01947ee4b52b9598dea15e6c3226fad9c4c1420beffbdf70426483210cc67c91aec665dd269bc05a78ce3c495cc59d6be8b5549457ed1530"], 0xe0}, 0x4000000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001700)={0x15, 0x65, 0xffff, 0xb859, 0x8, '9P2000.L'}, 0x15) [ 1073.388872][ T1158] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1073.407845][ T1158] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600), 0x0, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100"], 0x60}}, 0x0) 15:27:53 executing program 3: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:53 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x303000, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f00000000c0)}, {&(0x7f0000000380)=""/47, 0x2f}], 0x6, 0x7fffffff, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x4}]}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r6 = signalfd(r3, &(0x7f00000000c0)={[0x1]}, 0x8) read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)) 15:27:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) [ 1076.178589][ T1184] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1076.227131][ T1189] loop5: detected capacity change from 0 to 136 [ 1076.258701][ T1189] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:53 executing program 3: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100"], 0x60}}, 0x0) [ 1076.274461][ T1184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344", 0x3, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e657665000020000280080001000100"], 0x60}}, 0x0) [ 1076.363863][ T1286] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1076.392695][ T1286] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:53 executing program 3: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1076.460479][ T1325] loop5: detected capacity change from 0 to 136 [ 1076.472316][ T1325] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:56 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344", 0x3, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:56 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100"], 0x60}}, 0x0) 15:27:56 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344", 0x3, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x303000, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f00000000c0)}, {&(0x7f0000000380)=""/47, 0x2f}], 0x6, 0x7fffffff, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x4}]}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r6 = signalfd(r3, &(0x7f00000000c0)={[0x1]}, 0x8) read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)) 15:27:56 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1079.245017][ T1362] loop5: detected capacity change from 0 to 136 [ 1079.245283][ T1365] __nla_validate_parse: 4 callbacks suppressed [ 1079.245294][ T1365] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1079.262574][ T1362] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 [ 1079.276631][ T1365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xa00}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:27:56 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344", 0x3, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100"], 0x60}}, 0x0) 15:27:56 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1079.400999][ T1380] loop5: detected capacity change from 0 to 136 [ 1079.415067][ T1380] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 [ 1079.429158][ T1378] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:56 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff43443030", 0x5, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1079.443981][ T1378] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1079.509392][ T1392] loop5: detected capacity change from 0 to 136 [ 1079.521004][ T1392] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:27:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100"], 0x60}}, 0x0) 15:27:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xb8, 0x7, 0xc34, 0x9, 0x1a, "468106635414715909867024b4e793b9d6bfdf"}) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2800004, 0x12, r1, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0xfffff000, 0x8, 0x3, 0x7f, "a9d78b2206c3f2e4ecaed25ceb021200014497", 0xc0b, 0x2}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 15:27:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x8) 15:27:59 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:27:59 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff43443030", 0x5, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:27:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:27:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000000), 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000180)={0x7a}) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) close(r7) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r7, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x300d}, {r2, 0x2}, {r3, 0x2080}, {r7, 0x3801}, {r8, 0x81e4}], 0x5, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8) 15:27:59 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1082.278350][ T1406] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1082.291386][ T1405] loop5: detected capacity change from 0 to 136 [ 1082.292054][ T1406] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1082.321982][ T1404] mkiss: ax0: crc mode is auto. 15:27:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:27:59 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1082.354323][ T1405] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 [ 1082.391153][ T1424] mkiss: ax0: crc mode is auto. 15:27:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x16) 15:27:59 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff43443030", 0x5, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1082.423902][ T1432] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1082.539242][ T1447] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1082.573429][ T1450] loop5: detected capacity change from 0 to 136 [ 1082.591130][ T1450] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 15:28:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:02 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff43443030", 0x5, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:28:02 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x5, 0x1, 0x6, 0x8, 0x0, 0x8, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x7ff, 0xfff}, 0x400, 0x8000, 0x8a2c, 0x9, 0x8001, 0x8}, 0x0, 0x10, r2, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1a) 15:28:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:02 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6}], 0x0, &(0x7f0000000040)=ANY=[]) 15:28:02 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff43443030", 0x5, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1085.298021][ T1472] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:02 executing program 0: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, 0x0, 0x103, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x425}, {0x6, 0x11, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x1) syncfs(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000080)={r4, r5+10000000}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200044) wait4(0x0, 0x0, 0x1, 0x0) mq_notify(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="f9110d248a16072ff50c17b943c33c5bfa6027ff6498e46c1fbc8fe8ba18da7a63473db0e71c489841091100fc28b35ac8ba317ec418", @ANYRES32=r6, @ANYBLOB="000000008011000004001a80"], 0x24}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffff0a, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2008041}, 0x8084) dup2(r1, r0) 15:28:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1085.384661][ T1478] ISOFS: Unable to identify CD-ROM format. [ 1085.421738][ T1494] ptrace attach of "/root/syz-executor.0"[1493] was attempted by "/root/syz-executor.0"[1494] 15:28:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:05 executing program 0: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, 0x0, 0x103, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x425}, {0x6, 0x11, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x1) syncfs(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000080)={r4, r5+10000000}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200044) wait4(0x0, 0x0, 0x1, 0x0) mq_notify(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="f9110d248a16072ff50c17b943c33c5bfa6027ff6498e46c1fbc8fe8ba18da7a63473db0e71c489841091100fc28b35ac8ba317ec418", @ANYRES32=r6, @ANYBLOB="000000008011000004001a80"], 0x24}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffff0a, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2008041}, 0x8084) dup2(r1, r0) 15:28:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6}], 0x0, &(0x7f0000000040)=ANY=[]) 15:28:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:05 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:05 executing program 0: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, 0x0, 0x103, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x425}, {0x6, 0x11, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x1) syncfs(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000080)={r4, r5+10000000}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200044) wait4(0x0, 0x0, 0x1, 0x0) mq_notify(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="f9110d248a16072ff50c17b943c33c5bfa6027ff6498e46c1fbc8fe8ba18da7a63473db0e71c489841091100fc28b35ac8ba317ec418", @ANYRES32=r6, @ANYBLOB="000000008011000004001a80"], 0x24}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffff0a, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2008041}, 0x8084) dup2(r1, r0) 15:28:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1088.399861][ T1522] ptrace attach of "/root/syz-executor.0"[1516] was attempted by "/root/syz-executor.0"[1522] [ 1088.445718][ T1514] ISOFS: Unable to identify CD-ROM format. [ 1088.479849][ T1534] ptrace attach of "/root/syz-executor.0"[1533] was attempted by "/root/syz-executor.0"[1534] 15:28:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xb}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x9}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6}], 0x0, &(0x7f0000000040)=ANY=[]) 15:28:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000100001040000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, 0x0) 15:28:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000100001040000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1091.394998][ T1550] ISOFS: Unable to identify CD-ROM format. [ 1091.419339][ T1558] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, 0x0) [ 1091.484075][ T1564] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1091.515560][ T1566] loop5: detected capacity change from 0 to 136 15:28:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000100001040000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:11 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, 0x0) 15:28:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x278021e6, 0x13, "1845d12339872b1f843e77a63e91b4e3726fdb"}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x26440) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xc) fcntl$notify(r2, 0x402, 0x2) dup2(r1, r0) 15:28:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x2}) dup2(r1, r0) 15:28:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1094.421538][ T1590] loop5: detected capacity change from 0 to 136 [ 1094.432342][ T1591] mkiss: ax0: crc mode is auto. [ 1094.439163][ T1595] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000100001040000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004", 0x4d}], 0x1) 15:28:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1094.555331][ T1612] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1094.598645][ T1619] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 15:28:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004", 0x4d}], 0x1) 15:28:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x101042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)={'syz1', "14df3d9485b9ef64fe2c8d2c9b6a4b70e1779b289e8d413c34721bba2a9e2a2268407fdd0a8c6c05ce199f9f82092f5423c705c4dfff6972a80834945e03efbe0f695a8cdaba9122ef45bd8991c050801e661533517b7100a7f2722ffcc84f044adbbff6892e6eef2cde"}, 0x6e) dup2(r1, r0) 15:28:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1) 15:28:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) dup2(r1, r0) 15:28:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) dup2(r1, r0) [ 1097.455305][ T1640] mkiss: ax0: crc mode is auto. [ 1097.467879][ T1644] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000000) 15:28:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1097.625538][ T1682] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) syz_open_pts(r1, 0x42) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) syncfs(r3) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x8, 0x8, 0x2a, 0x1, 0x7, "f2639d850841138fb1792c1db26029ab79da5b", 0x5, 0x80000001}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r5, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000080)) 15:28:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) dup2(r1, r0) 15:28:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) dup2(r3, r0) r4 = accept4(r3, &(0x7f0000000140)=@rc={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x800) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x17}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="1fa65947156d4c0d342fccc9e68a13864a3bf096fa58a94c", 0x18}, {&(0x7f00000002c0)="bd2f487d61546b6745b4144b9c1c6ad49168fd282c162e0142e2f5d3c1d816c3a7833a6abdaca4189884dd2e55f044779a293865cc1ec6af62c51bf9c775d0b874d655bb5f72d77c488285e9ba34acfdb6e786eb1529046e410faacbaea251d984ca97cfbfa5bd6e947044d9b86fae8b10d2dd2fa91a2412b7ed98a876f3c7693cd57cb9c8dad6e581", 0x89}, {&(0x7f0000000380)="a522a5f09c5d3909f9582ab6697eec3fafec691b5235c71c08b0389b5fd86cff4a8cbf4f9b9792eb1d365d8f6896257698ae2f685208467a204ab07443bca7933140e73af7ac496365530f088e16c9739375b44154716fb0db672f8a46cbec52379c4cbf685094f715eb80e447ec13300148", 0x72}, {&(0x7f0000000400)="f614b470972b593687f1681511bf78598538c12491bddd35e6ae21", 0x1b}, {&(0x7f0000000440)="79fa7b814b7fb135918c0621244dde71e3975e839701776bf7272c2559c658cc482960fa0bb10c8f4fe64e4698352e7846d9c0d1e1a14275a83735501b74a592789d3ef58f55c79ef5828839a285864176253a987f21a51e6638ee3976ed75ed", 0x60}, {&(0x7f00000004c0)="6695247dcf639ecc9cc72498dfe5495dbbac89b431f4873102b2320c3df036641923018753474efd361b9f1b6a6b2c2e907634ca75fd353a6ebdbffe716cdbdd7f793a63128aa9d76312c133f0e90f26662f49f5144b568f9dce48219b204ebdae0fc84138bf524203e75e41b43a203d65883a24b59737f4ac06dd9c169ebd9617658079941fed1e4f9ad55398aede895ae714ffe92467ba4c6b11b5e007794f42f5445500462cdf49b3904b143d8240217e0115ee6df7c4446c2559b53ec238139cb7a7d0b20d9578338ef525952fb4738056ecfc25493ff7928d2eb73675223d33360da9ba5c4c80ec38de7a23e09b67", 0xf1}], 0x6, &(0x7f0000000640)=[{0x70, 0x101, 0x95, "a5552cc5beb7eb151d8e6731ed88bf365632b4ea2c3229b9c6643df55154bb9e181b1e613179770c1bbce7de09f4d8bd4f2e4c06f59556f8c8e5bef0f5ee35c3fe4f1cf238096d7a14272c6e89823eb90c29945f75ca784180da06889c2cbe"}, {0x18, 0x10b, 0x9, "42f0"}, {0x108, 0x10e, 0x0, "a23e3f81b3d3c85c066fe8596d3873c0156fa3f4f6939cecb1364f81359cdd09fcb51294e84805bbeab624047a31c4732ce00f4d7dacf9f0d8b3c3b3a849545d8f5df652dc28448d69aff2f1fce5309f3438e3167b0972181d8f56302887388c179e21c67a7b544c408c4468e418814633ac3ba70da44da710bbaee361c5f4eadea10b6ef3729958749f62e7e6d3db1655e7f99da8d9ec7fe0467cf7a6cc97bde5e3106ee3e7337a17e8ba42073f443a13806f51fb92b63c2a148d80ba5d940969aec7288f627a57a732ce4da5f6ebfb781d8f9a4e6bff671a29cd431ff43b5871f8a6f1029c19048873a44e31a763c213971508a573e6"}, {0xa0, 0x11, 0x7f, "ba344e2ddd489c97abc82fbb39469f755a20cf3e338835ff5f8e38ad70f650de60b4f50508c78fb5c9bc98ae68b2d41925551c38eeca101d544d70460fc9bc7ddd959f481a3e9662d27be98214b0d160ddb11edd7eaea7147a2b219bc7d629e5eaf4181f11d6b3a6bbb0a21b577936eebb9ccd13022acae72b7de301a6adedf9a7b8c284542060fea428b7c53a17beea"}, {0xf8, 0x112, 0x3, "fcc2480d1a2b66c3028e2b42195a19af4e9d4acb7b5c43fdd90cc9a9cc5c3a98f43c6984527802df2a4aecb24c52c0b6c8064f66b62fb3606edc9d384299f0f32ac0ccd3f0788916eab5e7607ace2370e5b2f24386153458338aa2c4bfcad7031cd495ebcd5d79469bc43a2a84a39656c916b48b6fe34da2125821b606ecc6f8ce25508f3f675a1911c42c694c334e7c8071b7dd7065058d227f8847809cdf5d1b0e79e0f354f32bdeb865ad56f04d5e6d4adc9ed2bec0cd82b18098c75d0b3a6de12453f05314b1797ae4ee970082b39ee1b0377a1ddc7e9004d0472535db588dab180d8bcad604"}], 0x328}, 0x20004000) 15:28:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) dup2(r3, r0) r4 = accept4(r3, &(0x7f0000000140)=@rc={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x800) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x17}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="1fa65947156d4c0d342fccc9e68a13864a3bf096fa58a94c", 0x18}, {&(0x7f00000002c0)="bd2f487d61546b6745b4144b9c1c6ad49168fd282c162e0142e2f5d3c1d816c3a7833a6abdaca4189884dd2e55f044779a293865cc1ec6af62c51bf9c775d0b874d655bb5f72d77c488285e9ba34acfdb6e786eb1529046e410faacbaea251d984ca97cfbfa5bd6e947044d9b86fae8b10d2dd2fa91a2412b7ed98a876f3c7693cd57cb9c8dad6e581", 0x89}, {&(0x7f0000000380)="a522a5f09c5d3909f9582ab6697eec3fafec691b5235c71c08b0389b5fd86cff4a8cbf4f9b9792eb1d365d8f6896257698ae2f685208467a204ab07443bca7933140e73af7ac496365530f088e16c9739375b44154716fb0db672f8a46cbec52379c4cbf685094f715eb80e447ec13300148", 0x72}, {&(0x7f0000000400)="f614b470972b593687f1681511bf78598538c12491bddd35e6ae21", 0x1b}, {&(0x7f0000000440)="79fa7b814b7fb135918c0621244dde71e3975e839701776bf7272c2559c658cc482960fa0bb10c8f4fe64e4698352e7846d9c0d1e1a14275a83735501b74a592789d3ef58f55c79ef5828839a285864176253a987f21a51e6638ee3976ed75ed", 0x60}, {&(0x7f00000004c0)="6695247dcf639ecc9cc72498dfe5495dbbac89b431f4873102b2320c3df036641923018753474efd361b9f1b6a6b2c2e907634ca75fd353a6ebdbffe716cdbdd7f793a63128aa9d76312c133f0e90f26662f49f5144b568f9dce48219b204ebdae0fc84138bf524203e75e41b43a203d65883a24b59737f4ac06dd9c169ebd9617658079941fed1e4f9ad55398aede895ae714ffe92467ba4c6b11b5e007794f42f5445500462cdf49b3904b143d8240217e0115ee6df7c4446c2559b53ec238139cb7a7d0b20d9578338ef525952fb4738056ecfc25493ff7928d2eb73675223d33360da9ba5c4c80ec38de7a23e09b67", 0xf1}], 0x6, &(0x7f0000000640)=[{0x70, 0x101, 0x95, "a5552cc5beb7eb151d8e6731ed88bf365632b4ea2c3229b9c6643df55154bb9e181b1e613179770c1bbce7de09f4d8bd4f2e4c06f59556f8c8e5bef0f5ee35c3fe4f1cf238096d7a14272c6e89823eb90c29945f75ca784180da06889c2cbe"}, {0x18, 0x10b, 0x9, "42f0"}, {0x108, 0x10e, 0x0, "a23e3f81b3d3c85c066fe8596d3873c0156fa3f4f6939cecb1364f81359cdd09fcb51294e84805bbeab624047a31c4732ce00f4d7dacf9f0d8b3c3b3a849545d8f5df652dc28448d69aff2f1fce5309f3438e3167b0972181d8f56302887388c179e21c67a7b544c408c4468e418814633ac3ba70da44da710bbaee361c5f4eadea10b6ef3729958749f62e7e6d3db1655e7f99da8d9ec7fe0467cf7a6cc97bde5e3106ee3e7337a17e8ba42073f443a13806f51fb92b63c2a148d80ba5d940969aec7288f627a57a732ce4da5f6ebfb781d8f9a4e6bff671a29cd431ff43b5871f8a6f1029c19048873a44e31a763c213971508a573e6"}, {0xa0, 0x11, 0x7f, "ba344e2ddd489c97abc82fbb39469f755a20cf3e338835ff5f8e38ad70f650de60b4f50508c78fb5c9bc98ae68b2d41925551c38eeca101d544d70460fc9bc7ddd959f481a3e9662d27be98214b0d160ddb11edd7eaea7147a2b219bc7d629e5eaf4181f11d6b3a6bbb0a21b577936eebb9ccd13022acae72b7de301a6adedf9a7b8c284542060fea428b7c53a17beea"}, {0xf8, 0x112, 0x3, "fcc2480d1a2b66c3028e2b42195a19af4e9d4acb7b5c43fdd90cc9a9cc5c3a98f43c6984527802df2a4aecb24c52c0b6c8064f66b62fb3606edc9d384299f0f32ac0ccd3f0788916eab5e7607ace2370e5b2f24386153458338aa2c4bfcad7031cd495ebcd5d79469bc43a2a84a39656c916b48b6fe34da2125821b606ecc6f8ce25508f3f675a1911c42c694c334e7c8071b7dd7065058d227f8847809cdf5d1b0e79e0f354f32bdeb865ad56f04d5e6d4adc9ed2bec0cd82b18098c75d0b3a6de12453f05314b1797ae4ee970082b39ee1b0377a1ddc7e9004d0472535db588dab180d8bcad604"}], 0x328}, 0x20004000) 15:28:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1100.482585][ T1721] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) dup2(r3, r0) r4 = accept4(r3, &(0x7f0000000140)=@rc={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x800) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x17}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="1fa65947156d4c0d342fccc9e68a13864a3bf096fa58a94c", 0x18}, {&(0x7f00000002c0)="bd2f487d61546b6745b4144b9c1c6ad49168fd282c162e0142e2f5d3c1d816c3a7833a6abdaca4189884dd2e55f044779a293865cc1ec6af62c51bf9c775d0b874d655bb5f72d77c488285e9ba34acfdb6e786eb1529046e410faacbaea251d984ca97cfbfa5bd6e947044d9b86fae8b10d2dd2fa91a2412b7ed98a876f3c7693cd57cb9c8dad6e581", 0x89}, {&(0x7f0000000380)="a522a5f09c5d3909f9582ab6697eec3fafec691b5235c71c08b0389b5fd86cff4a8cbf4f9b9792eb1d365d8f6896257698ae2f685208467a204ab07443bca7933140e73af7ac496365530f088e16c9739375b44154716fb0db672f8a46cbec52379c4cbf685094f715eb80e447ec13300148", 0x72}, {&(0x7f0000000400)="f614b470972b593687f1681511bf78598538c12491bddd35e6ae21", 0x1b}, {&(0x7f0000000440)="79fa7b814b7fb135918c0621244dde71e3975e839701776bf7272c2559c658cc482960fa0bb10c8f4fe64e4698352e7846d9c0d1e1a14275a83735501b74a592789d3ef58f55c79ef5828839a285864176253a987f21a51e6638ee3976ed75ed", 0x60}, {&(0x7f00000004c0)="6695247dcf639ecc9cc72498dfe5495dbbac89b431f4873102b2320c3df036641923018753474efd361b9f1b6a6b2c2e907634ca75fd353a6ebdbffe716cdbdd7f793a63128aa9d76312c133f0e90f26662f49f5144b568f9dce48219b204ebdae0fc84138bf524203e75e41b43a203d65883a24b59737f4ac06dd9c169ebd9617658079941fed1e4f9ad55398aede895ae714ffe92467ba4c6b11b5e007794f42f5445500462cdf49b3904b143d8240217e0115ee6df7c4446c2559b53ec238139cb7a7d0b20d9578338ef525952fb4738056ecfc25493ff7928d2eb73675223d33360da9ba5c4c80ec38de7a23e09b67", 0xf1}], 0x6, &(0x7f0000000640)=[{0x70, 0x101, 0x95, "a5552cc5beb7eb151d8e6731ed88bf365632b4ea2c3229b9c6643df55154bb9e181b1e613179770c1bbce7de09f4d8bd4f2e4c06f59556f8c8e5bef0f5ee35c3fe4f1cf238096d7a14272c6e89823eb90c29945f75ca784180da06889c2cbe"}, {0x18, 0x10b, 0x9, "42f0"}, {0x108, 0x10e, 0x0, "a23e3f81b3d3c85c066fe8596d3873c0156fa3f4f6939cecb1364f81359cdd09fcb51294e84805bbeab624047a31c4732ce00f4d7dacf9f0d8b3c3b3a849545d8f5df652dc28448d69aff2f1fce5309f3438e3167b0972181d8f56302887388c179e21c67a7b544c408c4468e418814633ac3ba70da44da710bbaee361c5f4eadea10b6ef3729958749f62e7e6d3db1655e7f99da8d9ec7fe0467cf7a6cc97bde5e3106ee3e7337a17e8ba42073f443a13806f51fb92b63c2a148d80ba5d940969aec7288f627a57a732ce4da5f6ebfb781d8f9a4e6bff671a29cd431ff43b5871f8a6f1029c19048873a44e31a763c213971508a573e6"}, {0xa0, 0x11, 0x7f, "ba344e2ddd489c97abc82fbb39469f755a20cf3e338835ff5f8e38ad70f650de60b4f50508c78fb5c9bc98ae68b2d41925551c38eeca101d544d70460fc9bc7ddd959f481a3e9662d27be98214b0d160ddb11edd7eaea7147a2b219bc7d629e5eaf4181f11d6b3a6bbb0a21b577936eebb9ccd13022acae72b7de301a6adedf9a7b8c284542060fea428b7c53a17beea"}, {0xf8, 0x112, 0x3, "fcc2480d1a2b66c3028e2b42195a19af4e9d4acb7b5c43fdd90cc9a9cc5c3a98f43c6984527802df2a4aecb24c52c0b6c8064f66b62fb3606edc9d384299f0f32ac0ccd3f0788916eab5e7607ace2370e5b2f24386153458338aa2c4bfcad7031cd495ebcd5d79469bc43a2a84a39656c916b48b6fe34da2125821b606ecc6f8ce25508f3f675a1911c42c694c334e7c8071b7dd7065058d227f8847809cdf5d1b0e79e0f354f32bdeb865ad56f04d5e6d4adc9ed2bec0cd82b18098c75d0b3a6de12453f05314b1797ae4ee970082b39ee1b0377a1ddc7e9004d0472535db588dab180d8bcad604"}], 0x328}, 0x20004000) 15:28:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) dup2(r1, r0) 15:28:18 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1100.646362][ T1751] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x200003) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x200, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 15:28:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) [ 1103.521753][ T1797] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5c) 15:28:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) dup2(0xffffffffffffffff, r0) 15:28:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x2, 0x6}) dup2(r1, r0) [ 1103.698682][ T1819] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:23 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004000800"], 0x18c}}, 0x0) 15:28:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0xfffffffffffffd3a, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$kcm(0xa, 0x2, 0x0) close(r4) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r4, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) close(r5) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000000), 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:28:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) dup2(0xffffffffffffffff, r0) 15:28:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) [ 1106.559491][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1106.573727][ T1862] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:28:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) 15:28:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:24 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:28:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) dup2(0xffffffffffffffff, r0) 15:28:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) [ 1106.733899][ T1899] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1106.748874][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:28:24 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:28:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0), 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:26 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:28:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x8140, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:27 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 1109.642921][ T1949] sp0: Synchronizing with TNC 15:28:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x8140, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:27 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 15:28:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x8140, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) [ 1109.795453][ T1983] sp0: Synchronizing with TNC [ 1109.808801][ T1984] sp1: Synchronizing with TNC 15:28:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 15:28:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) preadv(r3, &(0x7f0000000080)=[{0x0}], 0x10000000000002e4, 0x9, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) dup2(r1, r0) 15:28:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 15:28:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x18c}}, 0x0) [ 1112.674678][ T2052] mkiss: ax0: crc mode is auto. 15:28:30 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, 0xffffffffffffffff) 15:28:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x18c}}, 0x0) 15:28:30 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, 0xffffffffffffffff) 15:28:30 executing program 1: ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x9, 0x6}) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1200015) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x107, 0x7, 0x27, 0xc6, 0x1, 0x7, 0x236, 0x9}, "dc12c8ef01ab2d517bf58e13a7d369268c8e461f319d8f439569aa5b4e2cb2763414925d0df1d1e67f6617cc7b8aaa0f0e49c46c88805ae622e79c78959cb517387363bd070532b65e9046bf35b33517f048086660d16e34b6ea4006f10ccedc7236fdbad2cad9757237a6b261eadb1f88ca860cc3f9f7e559dd0b2f139fecbd8031d214af4a93bc3c9f9bfea2816fa47c4d1621e6905e904b2fdc22738887b78eea52aebd20c58512864e3b8b1102e08acca2cc512f732a1f79ca1346d5a21e6254946667df3f6daeae23a76b2249580a6bd07442bcfc32fd8c3f912091ebaab278f62fa5d96aaf740908596ed6f71ad6382843530d9d", [[], [], [], [], [], [], []]}, 0x817) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x11, 0x800, 0xc00, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r2) [ 1112.949229][ T9635] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1113.189185][ T9635] usb 3-1: Using ep0 maxpacket: 32 [ 1113.309439][ T9635] usb 3-1: config index 0 descriptor too short (expected 48011, got 18) [ 1113.318666][ T9635] usb 3-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1113.328697][ T9635] usb 3-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1113.340303][ T9635] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1113.469925][ T9635] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1113.480652][ T9635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1113.488789][ T9635] usb 3-1: Product: syz [ 1113.493861][ T9635] usb 3-1: Manufacturer: syz [ 1113.500435][ T9635] usb 3-1: config 0 descriptor?? [ 1113.743351][ T9635] usb 3-1: USB disconnect, device number 55 15:28:31 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) [ 1114.429447][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.436704][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 15:28:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:33 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, 0xffffffffffffffff) 15:28:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x18c}}, 0x0) 15:28:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 15:28:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x1d]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) fchmod(r1, 0x102) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) 15:28:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1], 0x18c}}, 0x0) 15:28:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1], 0x18c}}, 0x0) [ 1115.776704][ T2136] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) [ 1115.925503][ T2239] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1115.970427][T11464] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1116.209349][T11464] usb 2-1: Using ep0 maxpacket: 32 [ 1116.328914][T11464] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1116.337925][T11464] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1116.347069][T11464] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1116.357701][T11464] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1116.479096][T11464] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1116.489009][T11464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1116.497713][T11464] usb 2-1: Product: syz [ 1116.503089][T11464] usb 2-1: Manufacturer: syz [ 1116.508730][T11464] usb 2-1: config 0 descriptor?? [ 1116.762526][T11464] usb 2-1: USB disconnect, device number 102 15:28:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:36 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1], 0x18c}}, 0x0) 15:28:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x109601, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2800, 0x20) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x36) syz_open_pts(r1, 0x620800) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1, 0x9, 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00', r3) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40) 15:28:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x400448c9, &(0x7f0000000040)) 15:28:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x16]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) [ 1118.729845][ T2314] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1118.760966][ T2316] mkiss: ax0: crc mode is auto. 15:28:36 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB], 0x18c}}, 0x0) 15:28:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x1ff, 0x81, 0xfff, 0x7, 0x7, "8504d956bae8f406"}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockname(r3, &(0x7f0000000200)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x8, 0x3, 0x9, 0x1, 0x14, "b1473c15afed46f8122de77b547c12f43d2464"}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @le_set_cig_params={{0x2062, 0x3c}, {0x7f, "a30156", 'L;|', 0xff, 0x3b, 0x80, 0x7, 0x9, 0x5, [{0x2, 0x8, 0xbaaa, 0x3f, 0x3f, 0x9, 0x1}, {0x8, 0x3, 0x8, 0x3f, 0x9, 0xff, 0x3}, {0x2, 0x5, 0x43, 0x7, 0x6, 0x80, 0x1}, {0x0, 0x7, 0x7, 0x3, 0x71, 0x8, 0xd2}, {0x0, 0x3ff, 0x7f, 0xf4, 0x1, 0xfc, 0xff}]}}}, 0x40) preadv(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000300)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xfffd, 0x2005205, 0x1b3, 0x7928, 0x3f, "855738610bcc294eba2b5f86df3ec2815c2511", 0xfffff000, 0x2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6) [ 1118.859740][ T2340] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x1ff, 0x81, 0xfff, 0x7, 0x7, "8504d956bae8f406"}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockname(r3, &(0x7f0000000200)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x8, 0x3, 0x9, 0x1, 0x14, "b1473c15afed46f8122de77b547c12f43d2464"}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @le_set_cig_params={{0x2062, 0x3c}, {0x7f, "a30156", 'L;|', 0xff, 0x3b, 0x80, 0x7, 0x9, 0x5, [{0x2, 0x8, 0xbaaa, 0x3f, 0x3f, 0x9, 0x1}, {0x8, 0x3, 0x8, 0x3f, 0x9, 0xff, 0x3}, {0x2, 0x5, 0x43, 0x7, 0x6, 0x80, 0x1}, {0x0, 0x7, 0x7, 0x3, 0x71, 0x8, 0xd2}, {0x0, 0x3ff, 0x7f, 0xf4, 0x1, 0xfc, 0xff}]}}}, 0x40) preadv(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000300)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xfffd, 0x2005205, 0x1b3, 0x7928, 0x3f, "855738610bcc294eba2b5f86df3ec2815c2511", 0xfffff000, 0x2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6) 15:28:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x1ff, 0x81, 0xfff, 0x7, 0x7, "8504d956bae8f406"}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockname(r3, &(0x7f0000000200)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x8, 0x3, 0x9, 0x1, 0x14, "b1473c15afed46f8122de77b547c12f43d2464"}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @le_set_cig_params={{0x2062, 0x3c}, {0x7f, "a30156", 'L;|', 0xff, 0x3b, 0x80, 0x7, 0x9, 0x5, [{0x2, 0x8, 0xbaaa, 0x3f, 0x3f, 0x9, 0x1}, {0x8, 0x3, 0x8, 0x3f, 0x9, 0xff, 0x3}, {0x2, 0x5, 0x43, 0x7, 0x6, 0x80, 0x1}, {0x0, 0x7, 0x7, 0x3, 0x71, 0x8, 0xd2}, {0x0, 0x3ff, 0x7f, 0xf4, 0x1, 0xfc, 0xff}]}}}, 0x40) preadv(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000300)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xfffd, 0x2005205, 0x1b3, 0x7928, 0x3f, "855738610bcc294eba2b5f86df3ec2815c2511", 0xfffff000, 0x2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6) 15:28:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB], 0x18c}}, 0x0) 15:28:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 15:28:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) [ 1121.786940][ T2364] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x1ff, 0x81, 0xfff, 0x7, 0x7, "8504d956bae8f406"}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockname(r3, &(0x7f0000000200)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x8, 0x3, 0x9, 0x1, 0x14, "b1473c15afed46f8122de77b547c12f43d2464"}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @le_set_cig_params={{0x2062, 0x3c}, {0x7f, "a30156", 'L;|', 0xff, 0x3b, 0x80, 0x7, 0x9, 0x5, [{0x2, 0x8, 0xbaaa, 0x3f, 0x3f, 0x9, 0x1}, {0x8, 0x3, 0x8, 0x3f, 0x9, 0xff, 0x3}, {0x2, 0x5, 0x43, 0x7, 0x6, 0x80, 0x1}, {0x0, 0x7, 0x7, 0x3, 0x71, 0x8, 0xd2}, {0x0, 0x3ff, 0x7f, 0xf4, 0x1, 0xfc, 0xff}]}}}, 0x40) preadv(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000300)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xfffd, 0x2005205, 0x1b3, 0x7928, 0x3f, "855738610bcc294eba2b5f86df3ec2815c2511", 0xfffff000, 0x2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6) 15:28:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB], 0x18c}}, 0x0) 15:28:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7ff, @loopback, 0x5}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x40000, 0x0) dup2(0xffffffffffffffff, r3) 15:28:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) [ 1121.881524][ T2376] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:42 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001"], 0x18c}}, 0x0) 15:28:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) readahead(r2, 0x1f, 0x7fff) 15:28:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) readahead(r2, 0x1f, 0x7fff) 15:28:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000040)) 15:28:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000200)={0x10001, 0x7, 0x7, 0x16d6, 0x4, "af2c7e28eb247a500f1441450fdeadd91adfaa"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000300)=""/163) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x2, 0x4, 0x1, 0x4, 0xcee7, 0x8, 0x3], 0x7, 0x80000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2bc55175d133bc, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x11c002, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000240)={0x10001, 0x6, 0x1000, 0x0, 0x1, "459571257c95bf5e712364c4015fc9e421c2dd"}) dup(r1) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="501ab8f54cfe0e040027d0f7"]) 15:28:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x183101, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x12) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x7) 15:28:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x183101, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x12) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x7) [ 1124.841743][ T2396] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:42 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001"], 0x18c}}, 0x0) 15:28:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x40, 0x75, 0x7}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) [ 1124.938206][ T2406] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1125.003769][ T2412] mkiss: ax0: crc mode is auto. 15:28:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001"], 0x18c}}, 0x0) 15:28:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x6, 0x8, 0x3, 0x6df, 0x15, "73a935f58a5cb388981e3fc25881dca33ceef8"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00', r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="00001000", @ANYRES16=r3, @ANYBLOB="02002dbd7000fedbdf2501000000000000000141000000180017000000130000006769623a626f6e643000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x200000d5) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) dup2(r2, r0) 15:28:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc4800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f00000011c0)=""/92, 0x5c}, {&(0x7f0000001240)=""/252, 0xfc}, {&(0x7f0000001340)=""/176, 0xb0}], 0x5, &(0x7f0000001480)=""/4096, 0x1000}, 0x141) dup2(0xffffffffffffffff, r2) 15:28:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x40, 0x75, 0x7}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) 15:28:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x10]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) [ 1127.868540][ T2434] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1127.897843][ T2439] mkiss: ax0: crc mode is auto. 15:28:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102"], 0x18c}}, 0x0) 15:28:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 15:28:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r0) 15:28:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) [ 1128.048450][ T2466] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x10]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102"], 0x18c}}, 0x0) 15:28:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r0) 15:28:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = socket$caif_seqpacket(0x25, 0x5, 0x4) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000100)="e4cfc651c80638a8f393e91ff479bc94f02a8c1605b0b22fb049ec8b9665dba28a232290f1f97965cb6ff9f7b7dfe028d2a04c639b68c1d1853fb1784511e3bacf0d2c0a4d09035c0b6bd0c4d8cd", 0x4e}, {&(0x7f0000000000)="971b7c85089628bdfdf0264f5e73d8f970c2427b1533b49066901650a24c984d5e36fb6b5a8b7ff0f3fe1081f49311b541b9ec15", 0x34}, {&(0x7f0000000180)="07c6c8a97e774ec182268c4b5731f03f93397b489dffb99ce0e305a59bde93fd5af27901e48fe8ef45115251f46c9a80d839bcc5a115aa55c18615b7cf90d4ae05dc0a4f4e6a7d4cbe6a781f32bb20f3e0c2df37713cabbc2a239f20bdfbdfdc9c6288f24e1a349f067f141a", 0x6c}], 0x4}, 0x8000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) 15:28:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0xd]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102"], 0x18c}}, 0x0) [ 1130.923408][ T2519] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004"], 0x18c}}, 0x0) [ 1130.980877][ T2522] mkiss: ax0: crc mode is auto. [ 1130.987719][ T2530] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r0) 15:28:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x4, 0x3, 0x1, 0x100, 0x18, "498096d66bb2d04ea5fd6c712ab5c0593a3ae6"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r0) [ 1131.108262][ T2556] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004"], 0x18c}}, 0x0) 15:28:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x2}, 0x38) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x10, &(0x7f0000001a00)={&(0x7f0000000a00)=""/4096, 0x1000, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x14, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="15980800ffffffff0f5bfeffffffffffdb97fffff0ffffff017b040005000000000000000000850000003a326fb500"/56], &(0x7f00000008c0)='syzkaller\x00', 0xff, 0x6a, &(0x7f0000000900)=""/106, 0x40f00, 0x2, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0xe, 0x6, 0x3}, 0x10, r5, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa88}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x4, 0x2, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xe2, &(0x7f00000000c0)=""/226, 0x41100, 0x10, [], 0x0, 0x1c, r3, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x5, 0x3}, 0x10, r5}, 0x78) [ 1131.251703][ T2583] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1131.266055][ T2582] mkiss: ax0: crc mode is auto. 15:28:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, 0xffffffffffffffff) 15:28:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c1401020001090212"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:28:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c0004"], 0x18c}}, 0x0) 15:28:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0xb]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:28:51 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1133.942361][ T2634] FAULT_INJECTION: forcing a failure. [ 1133.942361][ T2634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.965135][ T2634] CPU: 0 PID: 2634 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1133.974040][ T2634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.984492][ T2634] Call Trace: [ 1133.987994][ T2634] dump_stack+0x137/0x19d [ 1133.992691][ T2634] should_fail+0x23c/0x250 [ 1133.997110][ T2634] should_fail_usercopy+0x16/0x20 [ 1134.002326][ T2634] _copy_from_user+0x1c/0xd0 [ 1134.007032][ T2634] __copy_msghdr_from_user+0x44/0x350 [ 1134.012426][ T2634] ? __fget_light+0x219/0x260 [ 1134.017200][ T2634] __sys_sendmsg+0x135/0x270 [ 1134.022017][ T2634] ? kstrtouint_from_user+0x104/0x130 [ 1134.027691][ T2634] ? __rcu_read_unlock+0x5c/0x250 [ 1134.032895][ T2634] ? fsnotify_perm+0x59/0x2e0 [ 1134.037655][ T2634] ? __fsnotify_parent+0x32f/0x430 [ 1134.042758][ T2634] ? get_pid_task+0x90/0xc0 [ 1134.047473][ T2634] ? vfs_write+0x572/0x7e0 [ 1134.051880][ T2634] ? __fget_light+0x219/0x260 [ 1134.056688][ T2634] ? fput+0x2d/0x130 [ 1134.060684][ T2634] ? ksys_write+0x157/0x180 [ 1134.065345][ T2634] __x64_sys_sendmsg+0x42/0x50 [ 1134.070210][ T2634] do_syscall_64+0x39/0x80 [ 1134.074921][ T2634] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1134.080899][ T2634] RIP: 0033:0x466459 [ 1134.084780][ T2634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.105535][ T2634] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.114215][ T2634] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1134.122532][ T2634] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1134.130952][ T2634] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 15:28:51 executing program 5 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1134.139085][ T2634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.147516][ T2634] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1134.180240][ T2637] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:51 executing program 2 (fault-call:0 fault-nth:0): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1134.236468][ T2658] FAULT_INJECTION: forcing a failure. [ 1134.236468][ T2658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.238466][ T9635] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1134.271460][ T2658] CPU: 0 PID: 2658 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 15:28:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, 0xffffffffffffffff) [ 1134.280256][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.290944][ T2658] Call Trace: [ 1134.294233][ T2658] dump_stack+0x137/0x19d [ 1134.298659][ T2658] should_fail+0x23c/0x250 [ 1134.303175][ T2658] should_fail_usercopy+0x16/0x20 [ 1134.308218][ T2658] _copy_from_user+0x1c/0xd0 [ 1134.312962][ T2658] iovec_from_user+0xc4/0x2d0 [ 1134.317662][ T2658] ? __alloc_pages_nodemask+0x1a8/0x350 [ 1134.323393][ T2658] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 1134.329110][ T2658] ? should_fail+0xd6/0x250 [ 1134.333642][ T2658] __import_iovec+0x49/0x270 [ 1134.338250][ T2667] FAULT_INJECTION: forcing a failure. [ 1134.338250][ T2667] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.338347][ T2658] import_iovec+0xb8/0xd0 [ 1134.356144][ T2658] __sys_sendmsg+0x1ab/0x270 [ 1134.360856][ T2658] ? __rcu_read_unlock+0x5c/0x250 [ 1134.366166][ T2658] ? fsnotify_perm+0x59/0x2e0 [ 1134.371603][ T2658] ? __fsnotify_parent+0x32f/0x430 [ 1134.377874][ T2658] ? get_pid_task+0x90/0xc0 [ 1134.382663][ T2658] ? vfs_write+0x572/0x7e0 [ 1134.387570][ T2658] ? __fget_light+0x219/0x260 [ 1134.393049][ T2658] ? fput+0x2d/0x130 [ 1134.396930][ T2658] ? ksys_write+0x157/0x180 [ 1134.401877][ T2658] __x64_sys_sendmsg+0x42/0x50 [ 1134.406634][ T2658] do_syscall_64+0x39/0x80 [ 1134.411222][ T2658] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1134.417611][ T2658] RIP: 0033:0x466459 [ 1134.421505][ T2658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.441542][ T2658] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.450131][ T2658] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1134.458362][ T2658] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1134.466336][ T2658] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.474500][ T2658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.482639][ T2658] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1134.490782][ T2667] CPU: 1 PID: 2667 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1134.499791][ T2667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.510281][ T2667] Call Trace: [ 1134.513578][ T2667] dump_stack+0x137/0x19d [ 1134.517930][ T2667] should_fail+0x23c/0x250 [ 1134.522382][ T2667] __should_failslab+0x81/0x90 [ 1134.527327][ T2667] ? __se_sys_memfd_create+0xfb/0x390 [ 1134.532698][ T2667] should_failslab+0x5/0x20 [ 1134.537235][ T2667] __kmalloc+0x66/0x380 [ 1134.541574][ T2667] ? strnlen_user+0x137/0x1c0 [ 1134.546378][ T2667] __se_sys_memfd_create+0xfb/0x390 [ 1134.551681][ T2667] __x64_sys_memfd_create+0x2d/0x40 [ 1134.557104][ T2667] do_syscall_64+0x39/0x80 [ 1134.561785][ T2667] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1134.567850][ T2667] RIP: 0033:0x466459 [ 1134.571754][ T2667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.593796][ T2667] RSP: 002b:00007f8df7957f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1134.602311][ T2667] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466459 [ 1134.610507][ T2667] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 1134.618561][ T2667] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1134.626963][ T2667] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 15:28:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:28:52 executing program 2 (fault-call:0 fault-nth:1): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1134.635291][ T2667] R13: 0000000020000080 R14: 0000000000011000 R15: 0000000020000040 15:28:52 executing program 5 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1134.678624][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1134.733231][ T2691] FAULT_INJECTION: forcing a failure. [ 1134.733231][ T2691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.743632][ T2692] FAULT_INJECTION: forcing a failure. [ 1134.743632][ T2692] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.757946][ T2691] CPU: 0 PID: 2691 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1134.769604][ T2691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.780009][ T2691] Call Trace: [ 1134.783283][ T2691] dump_stack+0x137/0x19d [ 1134.787709][ T2691] should_fail+0x23c/0x250 [ 1134.792144][ T2691] should_fail_usercopy+0x16/0x20 [ 1134.797364][ T2691] _copy_from_user+0x1c/0xd0 [ 1134.802086][ T2691] __se_sys_memfd_create+0x137/0x390 [ 1134.807700][ T2691] __x64_sys_memfd_create+0x2d/0x40 [ 1134.813338][ T2691] do_syscall_64+0x39/0x80 [ 1134.817843][ T2691] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1134.823832][ T2691] RIP: 0033:0x466459 [ 1134.827737][ T2691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.838542][ T9635] usb 2-1: config index 0 descriptor too short (expected 47890, got 18) [ 1134.850335][ T2691] RSP: 002b:00007f8df7957f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1134.850360][ T2691] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466459 [ 1134.850371][ T2691] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 1134.850382][ T2691] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1134.876682][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1134.884375][ T2691] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1134.910051][ T2691] R13: 0000000020000080 R14: 0000000000011000 R15: 0000000020000040 [ 1134.915505][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1134.926910][ T2692] CPU: 0 PID: 2692 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1134.932505][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1134.937552][ T2692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.937564][ T2692] Call Trace: [ 1134.937573][ T2692] dump_stack+0x137/0x19d [ 1134.965441][ T2692] should_fail+0x23c/0x250 [ 1134.970036][ T2692] __should_failslab+0x81/0x90 [ 1134.974848][ T2692] should_failslab+0x5/0x20 [ 1134.979654][ T2692] kmem_cache_alloc_node+0x56/0x310 [ 1134.984927][ T2692] ? __alloc_skb+0xed/0x420 [ 1134.989529][ T2692] __alloc_skb+0xed/0x420 [ 1134.994403][ T2692] netlink_sendmsg+0x4c7/0x7c0 [ 1134.999385][ T2692] ? netlink_getsockopt+0x720/0x720 [ 1135.005320][ T2692] ____sys_sendmsg+0x360/0x4d0 [ 1135.010632][ T2692] ? import_iovec+0xb8/0xd0 [ 1135.015826][ T2692] __sys_sendmsg+0x1ed/0x270 [ 1135.020579][ T2692] ? __fsnotify_parent+0x32f/0x430 [ 1135.025777][ T2692] ? get_pid_task+0x90/0xc0 [ 1135.030388][ T2692] ? vfs_write+0x572/0x7e0 [ 1135.034981][ T2692] ? __fget_light+0x219/0x260 [ 1135.039846][ T2692] ? fput+0x2d/0x130 [ 1135.043879][ T2692] ? ksys_write+0x157/0x180 [ 1135.048806][ T2692] __x64_sys_sendmsg+0x42/0x50 [ 1135.053670][ T2692] do_syscall_64+0x39/0x80 [ 1135.058540][ T2692] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1135.064747][ T2692] RIP: 0033:0x466459 [ 1135.067294][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1135.068959][ T2692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1135.068984][ T2692] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 [ 1135.080093][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1135.098571][ T2692] ORIG_RAX: 000000000000002e [ 1135.098580][ T2692] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1135.098592][ T2692] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1135.098602][ T2692] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.098613][ T2692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.098623][ T2692] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1135.162334][ T9635] usb 2-1: Product: syz [ 1135.167582][ T9635] usb 2-1: Manufacturer: syz [ 1135.173401][ T9635] usb 2-1: config 0 descriptor?? [ 1135.423480][ T2638] udc-core: couldn't find an available UDC or it's busy [ 1135.431151][ T2638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1135.441513][ T8899] usb 2-1: USB disconnect, device number 103 15:28:53 executing program 1 (fault-call:5 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1136.236992][ T8899] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1136.476977][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1136.597169][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1136.605828][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1136.616516][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1136.628911][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1136.757051][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1136.766729][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1136.776898][ T8899] usb 2-1: Product: syz [ 1136.781306][ T8899] usb 2-1: Manufacturer: syz [ 1136.788504][ T8899] usb 2-1: config 0 descriptor?? 15:28:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, 0xffffffffffffffff) 15:28:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c000400"], 0x18c}}, 0x0) 15:28:54 executing program 2 (fault-call:0 fault-nth:2): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:28:54 executing program 5 (fault-call:1 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1136.997848][ T2726] FAULT_INJECTION: forcing a failure. [ 1136.997848][ T2726] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.998514][ T2718] FAULT_INJECTION: forcing a failure. [ 1136.998514][ T2718] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.012459][ T2726] CPU: 1 PID: 2726 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1137.033070][ T2726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.043580][ T2726] Call Trace: [ 1137.046970][ T2726] dump_stack+0x137/0x19d [ 1137.051647][ T2726] should_fail+0x23c/0x250 [ 1137.056063][ T2726] __should_failslab+0x81/0x90 [ 1137.061163][ T2726] should_failslab+0x5/0x20 [ 1137.065867][ T2726] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1137.072018][ T2726] ? __kmalloc_node_track_caller+0x30/0x40 [ 1137.077928][ T2726] __kmalloc_node_track_caller+0x30/0x40 [ 1137.083888][ T2726] ? netlink_sendmsg+0x4c7/0x7c0 [ 1137.088852][ T2726] __alloc_skb+0x187/0x420 [ 1137.093262][ T2726] netlink_sendmsg+0x4c7/0x7c0 [ 1137.098109][ T2726] ? netlink_getsockopt+0x720/0x720 [ 1137.103405][ T2726] ____sys_sendmsg+0x360/0x4d0 [ 1137.108335][ T2726] ? import_iovec+0xb8/0xd0 [ 1137.113166][ T2726] __sys_sendmsg+0x1ed/0x270 [ 1137.117792][ T2726] ? __fsnotify_parent+0x32f/0x430 [ 1137.123340][ T2726] ? get_pid_task+0x90/0xc0 [ 1137.127923][ T2726] ? vfs_write+0x572/0x7e0 [ 1137.132665][ T2726] ? __fget_light+0x219/0x260 [ 1137.137476][ T2726] ? fput+0x2d/0x130 [ 1137.141408][ T2726] ? ksys_write+0x157/0x180 [ 1137.146168][ T2726] __x64_sys_sendmsg+0x42/0x50 [ 1137.151126][ T2726] do_syscall_64+0x39/0x80 [ 1137.155566][ T2726] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1137.161708][ T2726] RIP: 0033:0x466459 [ 1137.165825][ T2726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.185752][ T2726] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.194244][ T2726] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1137.202398][ T2726] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1137.210458][ T2726] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.218971][ T2726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.227911][ T2726] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1137.235932][ T2718] CPU: 0 PID: 2718 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1137.244902][ T2718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.255443][ T2718] Call Trace: [ 1137.258986][ T2718] dump_stack+0x137/0x19d [ 1137.263534][ T2718] should_fail+0x23c/0x250 [ 1137.264366][ T2706] FAULT_INJECTION: forcing a failure. [ 1137.264366][ T2706] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.268330][ T2718] ? shmem_alloc_inode+0x22/0x30 [ 1137.268357][ T2718] __should_failslab+0x81/0x90 [ 1137.291571][ T2718] ? shmem_match+0xa0/0xa0 15:28:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1137.296091][ T2718] should_failslab+0x5/0x20 [ 1137.300782][ T2718] kmem_cache_alloc+0x46/0x320 [ 1137.305567][ T2718] ? __rcu_read_unlock+0x5c/0x250 [ 1137.310843][ T2718] ? fsnotify_perm+0x59/0x2e0 [ 1137.315818][ T2718] ? shmem_match+0xa0/0xa0 [ 1137.320256][ T2718] shmem_alloc_inode+0x22/0x30 [ 1137.325537][ T2718] new_inode_pseudo+0x38/0x190 [ 1137.330485][ T2718] new_inode+0x21/0x100 [ 1137.334723][ T2718] shmem_get_inode+0xa1/0x440 [ 1137.339480][ T2718] __shmem_file_setup+0xf1/0x1d0 [ 1137.344809][ T2718] shmem_file_setup+0x37/0x40 [ 1137.349738][ T2718] __se_sys_memfd_create+0x1eb/0x390 [ 1137.355141][ T2718] __x64_sys_memfd_create+0x2d/0x40 [ 1137.360434][ T2718] do_syscall_64+0x39/0x80 [ 1137.365084][ T2718] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1137.371064][ T2718] RIP: 0033:0x466459 [ 1137.375129][ T2718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.391040][ T2738] ptrace attach of "/root/syz-executor.0"[2737] was attempted by "/root/syz-executor.0"[2738] [ 1137.396757][ T2718] RSP: 002b:00007f8df7957f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1137.396779][ T2718] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466459 [ 1137.396808][ T2718] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 1137.396819][ T2718] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1137.440336][ T2718] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 15:28:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c000400"], 0x18c}}, 0x0) 15:28:54 executing program 5 (fault-call:1 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1137.448293][ T2718] R13: 0000000020000080 R14: 0000000000011000 R15: 0000000020000040 [ 1137.457058][ T2706] CPU: 1 PID: 2706 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1137.466009][ T2706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.476606][ T2706] Call Trace: [ 1137.479983][ T2706] dump_stack+0x137/0x19d [ 1137.484397][ T2706] should_fail+0x23c/0x250 [ 1137.488975][ T2706] ? getname_flags+0x84/0x3d0 [ 1137.493772][ T2706] __should_failslab+0x81/0x90 [ 1137.498756][ T2706] should_failslab+0x5/0x20 [ 1137.503478][ T2706] kmem_cache_alloc+0x46/0x320 [ 1137.505494][ T2742] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1137.508290][ T2706] getname_flags+0x84/0x3d0 [ 1137.508318][ T2706] getname+0x15/0x20 [ 1137.508332][ T2706] do_sys_openat2+0x5b/0x250 [ 1137.533065][ T2706] __x64_sys_openat+0xef/0x110 [ 1137.539060][ T2706] do_syscall_64+0x39/0x80 [ 1137.543825][ T2706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1137.550126][ T2706] RIP: 0033:0x419544 [ 1137.554030][ T2706] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1137.573991][ T2706] RSP: 002b:00007f770a9c3040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1137.583016][ T2706] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544 [ 1137.596294][ T2706] RDX: 0000000000000002 RSI: 00000000004be78a RDI: 00000000ffffff9c [ 1137.604382][ T2706] RBP: 00000000004be78a R08: 0000000000000000 R09: 0000000000000000 [ 1137.612964][ T2706] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1137.621395][ T2706] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000022000 15:28:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c000400"], 0x18c}}, 0x0) 15:28:55 executing program 2 (fault-call:0 fault-nth:3): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1137.650375][T12495] usb 2-1: USB disconnect, device number 104 [ 1137.657451][ T2747] FAULT_INJECTION: forcing a failure. [ 1137.657451][ T2747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.680740][ T2747] CPU: 1 PID: 2747 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1137.689943][ T2747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.700822][ T2747] Call Trace: [ 1137.704459][ T2747] dump_stack+0x137/0x19d [ 1137.709241][ T2747] should_fail+0x23c/0x250 [ 1137.712865][ T2756] FAULT_INJECTION: forcing a failure. [ 1137.712865][ T2756] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.713670][ T2747] should_fail_usercopy+0x16/0x20 [ 1137.731666][ T2747] _copy_from_iter_full+0x11f/0x5f0 [ 1137.736980][ T2747] ? __virt_addr_valid+0x15a/0x1a0 [ 1137.742583][ T2747] ? __check_object_size+0x253/0x310 [ 1137.748311][ T2747] netlink_sendmsg+0x579/0x7c0 [ 1137.753167][ T2747] ? netlink_getsockopt+0x720/0x720 [ 1137.758843][ T2747] ____sys_sendmsg+0x360/0x4d0 [ 1137.763881][ T2747] ? import_iovec+0xb8/0xd0 [ 1137.768485][ T2747] __sys_sendmsg+0x1ed/0x270 [ 1137.773148][ T2747] ? __fsnotify_parent+0x32f/0x430 [ 1137.778547][ T2747] ? get_pid_task+0x90/0xc0 [ 1137.783353][ T2747] ? vfs_write+0x572/0x7e0 [ 1137.787885][ T2747] ? __fget_light+0x219/0x260 [ 1137.792933][ T2747] ? fput+0x2d/0x130 [ 1137.797171][ T2747] ? ksys_write+0x157/0x180 [ 1137.801746][ T2747] __x64_sys_sendmsg+0x42/0x50 [ 1137.806508][ T2747] do_syscall_64+0x39/0x80 [ 1137.810963][ T2747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1137.816952][ T2747] RIP: 0033:0x466459 [ 1137.822083][ T2747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.843226][ T2747] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.852518][ T2747] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1137.860605][ T2747] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1137.869630][ T2747] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.878178][ T2747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.886186][ T2747] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1137.895417][ T2756] CPU: 0 PID: 2756 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1137.904623][ T2756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.915430][ T2756] Call Trace: [ 1137.918796][ T2756] dump_stack+0x137/0x19d [ 1137.923664][ T2756] should_fail+0x23c/0x250 [ 1137.928512][ T2756] ? security_inode_alloc+0x30/0x180 [ 1137.934075][ T2756] __should_failslab+0x81/0x90 [ 1137.939047][ T2756] should_failslab+0x5/0x20 [ 1137.943842][ T2756] kmem_cache_alloc+0x46/0x320 [ 1137.949526][ T2756] security_inode_alloc+0x30/0x180 [ 1137.954656][ T2756] inode_init_always+0x222/0x440 [ 1137.959866][ T2756] ? shmem_match+0xa0/0xa0 [ 1137.964481][ T2756] new_inode_pseudo+0x6f/0x190 [ 1137.970672][ T2756] new_inode+0x21/0x100 [ 1137.975007][ T2756] shmem_get_inode+0xa1/0x440 [ 1137.979837][ T2756] __shmem_file_setup+0xf1/0x1d0 [ 1137.985108][ T2756] shmem_file_setup+0x37/0x40 [ 1137.989971][ T2756] __se_sys_memfd_create+0x1eb/0x390 [ 1137.995428][ T2756] __x64_sys_memfd_create+0x2d/0x40 [ 1138.000829][ T2756] do_syscall_64+0x39/0x80 [ 1138.005366][ T2756] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1138.011685][ T2756] RIP: 0033:0x466459 [ 1138.015683][ T2756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1138.036120][ T2756] RSP: 002b:00007f8df7957f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 15:28:55 executing program 5 (fault-call:1 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1138.045053][ T2756] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466459 [ 1138.053806][ T2756] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 1138.062291][ T2756] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1138.070447][ T2756] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1138.078918][ T2756] R13: 0000000020000080 R14: 0000000000011000 R15: 0000000020000040 [ 1138.113546][ T2761] FAULT_INJECTION: forcing a failure. [ 1138.113546][ T2761] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.126720][ T2761] CPU: 0 PID: 2761 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1138.135599][ T2761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.145946][ T2761] Call Trace: [ 1138.149228][ T2761] dump_stack+0x137/0x19d [ 1138.153565][ T2761] should_fail+0x23c/0x250 [ 1138.158173][ T2761] ? skb_clone+0x12c/0x1f0 [ 1138.162605][ T2761] __should_failslab+0x81/0x90 [ 1138.167844][ T2761] should_failslab+0x5/0x20 [ 1138.172599][ T2761] kmem_cache_alloc+0x46/0x320 [ 1138.177595][ T2761] ? rhashtable_jhash2+0x13a/0x1a0 [ 1138.182929][ T2761] skb_clone+0x12c/0x1f0 [ 1138.187287][ T2761] netlink_deliver_tap+0x2a0/0x470 [ 1138.193127][ T2761] ? __rcu_read_unlock+0x5c/0x250 [ 1138.198546][ T2761] netlink_unicast+0x5de/0x6c0 [ 1138.203806][ T2761] netlink_sendmsg+0x6f8/0x7c0 [ 1138.208798][ T2761] ? netlink_getsockopt+0x720/0x720 [ 1138.214501][ T2761] ____sys_sendmsg+0x360/0x4d0 [ 1138.219350][ T2761] ? import_iovec+0xb8/0xd0 [ 1138.223936][ T2761] __sys_sendmsg+0x1ed/0x270 [ 1138.228717][ T2761] ? __fsnotify_parent+0x32f/0x430 [ 1138.233907][ T2761] ? get_pid_task+0x90/0xc0 [ 1138.238773][ T2761] ? vfs_write+0x572/0x7e0 [ 1138.243190][ T2761] ? __fget_light+0x219/0x260 [ 1138.248272][ T2761] ? fput+0x2d/0x130 [ 1138.252266][ T2761] ? ksys_write+0x157/0x180 [ 1138.257470][ T2761] __x64_sys_sendmsg+0x42/0x50 [ 1138.262333][ T2761] do_syscall_64+0x39/0x80 [ 1138.266929][ T2761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1138.272907][ T2761] RIP: 0033:0x466459 [ 1138.276794][ T2761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1138.298348][ T2761] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.307735][ T2761] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1138.316903][ T2761] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1138.325379][ T2761] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1138.333582][ T2761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.341843][ T2761] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 15:28:55 executing program 1 (fault-call:5 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1138.357548][ T2761] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1138.367418][ T2761] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1138.380163][ T2761] device geneve2 entered promiscuous mode [ 1138.776739][T12495] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1139.037608][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1139.186939][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1139.186961][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1139.186981][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1139.216940][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1139.387877][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1139.399209][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1139.410006][T12495] usb 2-1: Product: syz [ 1139.414680][T12495] usb 2-1: Manufacturer: syz [ 1139.420791][T12495] usb 2-1: config 0 descriptor?? [ 1139.658795][ T2765] FAULT_INJECTION: forcing a failure. [ 1139.658795][ T2765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.673637][ T2765] CPU: 1 PID: 2765 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1139.683342][ T2765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.695150][ T2765] Call Trace: [ 1139.698651][ T2765] dump_stack+0x137/0x19d [ 1139.703937][ T2765] should_fail+0x23c/0x250 [ 1139.708490][ T2765] should_fail_usercopy+0x16/0x20 [ 1139.714191][ T2765] strncpy_from_user+0x21/0x250 [ 1139.719202][ T2765] getname_flags+0xb8/0x3d0 [ 1139.724230][ T2765] getname+0x15/0x20 [ 1139.728393][ T2765] do_sys_openat2+0x5b/0x250 [ 1139.733199][ T2765] __x64_sys_openat+0xef/0x110 [ 1139.738084][ T2765] do_syscall_64+0x39/0x80 [ 1139.742806][ T2765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1139.748692][ T2765] RIP: 0033:0x419544 [ 1139.753077][ T2765] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1139.773468][ T2765] RSP: 002b:00007f770a9c3040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1139.782378][ T2765] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544 [ 1139.790536][ T2765] RDX: 0000000000000002 RSI: 00000000004be78a RDI: 00000000ffffff9c [ 1139.798701][ T2765] RBP: 00000000004be78a R08: 0000000000000000 R09: 0000000000000000 [ 1139.806824][ T2765] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1139.815394][ T2765] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000022000 [ 1139.827895][ T9746] usb 2-1: USB disconnect, device number 105 15:28:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:57 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:28:57 executing program 2 (fault-call:0 fault-nth:4): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:28:57 executing program 5 (fault-call:1 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1140.003941][ T2785] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1140.016625][ T2783] FAULT_INJECTION: forcing a failure. [ 1140.016625][ T2783] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.017476][ T2787] FAULT_INJECTION: forcing a failure. [ 1140.017476][ T2787] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.035956][ T2783] CPU: 1 PID: 2783 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1140.051684][ T2783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.061971][ T2783] Call Trace: [ 1140.065877][ T2783] dump_stack+0x137/0x19d [ 1140.070718][ T2783] should_fail+0x23c/0x250 [ 1140.075538][ T2783] __should_failslab+0x81/0x90 [ 1140.080383][ T2783] ? rtnl_newlink+0x59/0x1310 [ 1140.085225][ T2783] should_failslab+0x5/0x20 [ 1140.090188][ T2783] kmem_cache_alloc_trace+0x49/0x340 [ 1140.095591][ T2783] rtnl_newlink+0x59/0x1310 [ 1140.100626][ T2783] ? __cgroup_account_cputime+0x1f0/0x210 [ 1140.106631][ T2783] ? __perf_event_task_sched_in+0x4c1/0x500 [ 1140.112740][ T2783] ? kvm_sched_clock_read+0x15/0x40 [ 1140.118408][ T2783] ? __rcu_read_unlock+0x5c/0x250 [ 1140.123805][ T2783] ? sched_clock_cpu+0x11/0x1a0 [ 1140.128654][ T2783] ? _raw_spin_unlock_irq+0x22/0x40 [ 1140.133953][ T2783] ? finish_task_switch+0xc0/0x2a0 [ 1140.139273][ T2783] ? __schedule+0x3c1/0x580 [ 1140.143868][ T2783] ? widen_string+0x3a/0x280 [ 1140.148475][ T2783] ? _raw_spin_unlock+0x22/0x40 [ 1140.153578][ T2783] ? __mutex_lock+0x5ae/0x670 [ 1140.158712][ T2783] ? rtnl_setlink+0x280/0x280 [ 1140.163701][ T2783] rtnetlink_rcv_msg+0x728/0x7c0 [ 1140.168759][ T2783] ? ___cache_free+0x3c/0x2f0 [ 1140.173610][ T2783] ? skb_network_protocol+0x144/0x340 [ 1140.179167][ T2783] ? __kfree_skb+0xfe/0x150 [ 1140.183713][ T2783] ? kmem_cache_free+0x59/0x100 [ 1140.188640][ T2783] ? __kfree_skb+0xfe/0x150 [ 1140.193620][ T2783] ? consume_skb+0x4b/0x160 [ 1140.198328][ T2783] ? nlmon_xmit+0x47/0x50 [ 1140.202820][ T2783] ? xmit_one+0x173/0x2e0 [ 1140.207296][ T2783] ? local_bh_enable+0x1b/0x20 [ 1140.212309][ T2783] ? __dev_queue_xmit+0xc25/0x1580 [ 1140.217497][ T2783] ? __skb_clone+0x2b9/0x2d0 [ 1140.222242][ T2783] ? __rcu_read_unlock+0x5c/0x250 [ 1140.227647][ T2783] netlink_rcv_skb+0x13e/0x240 [ 1140.233932][ T2783] ? rtnetlink_bind+0x60/0x60 [ 1140.239427][ T2783] rtnetlink_rcv+0x18/0x20 [ 1140.244393][ T2783] netlink_unicast+0x5fc/0x6c0 [ 1140.249296][ T2783] netlink_sendmsg+0x6f8/0x7c0 [ 1140.254508][ T2783] ? netlink_getsockopt+0x720/0x720 [ 1140.259984][ T2783] ____sys_sendmsg+0x360/0x4d0 [ 1140.264940][ T2783] ? import_iovec+0xb8/0xd0 [ 1140.269445][ T2783] __sys_sendmsg+0x1ed/0x270 [ 1140.274569][ T2783] ? __fsnotify_parent+0x32f/0x430 [ 1140.279860][ T2783] ? vfs_write+0x572/0x7e0 [ 1140.284293][ T2783] ? __fget_light+0x219/0x260 [ 1140.289144][ T2783] ? fput+0x2d/0x130 [ 1140.293043][ T2783] ? ksys_write+0x157/0x180 [ 1140.297662][ T2783] __x64_sys_sendmsg+0x42/0x50 [ 1140.302692][ T2783] do_syscall_64+0x39/0x80 [ 1140.307337][ T2783] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1140.313504][ T2783] RIP: 0033:0x466459 [ 1140.317754][ T2783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.338432][ T2783] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1140.347543][ T2783] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1140.356384][ T2783] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1140.365045][ T2783] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1140.373637][ T2783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.381683][ T2783] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1140.390191][ T2787] CPU: 0 PID: 2787 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 15:28:57 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1140.399734][ T2787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.410185][ T2787] Call Trace: [ 1140.414815][ T2787] dump_stack+0x137/0x19d [ 1140.419943][ T2787] should_fail+0x23c/0x250 [ 1140.425532][ T2787] ? __d_alloc+0x36/0x370 [ 1140.431210][ T2787] __should_failslab+0x81/0x90 [ 1140.439261][ T2787] should_failslab+0x5/0x20 [ 1140.444530][ T2787] kmem_cache_alloc+0x46/0x320 [ 1140.450150][ T2787] ? __init_rwsem+0x59/0x70 15:28:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:28:57 executing program 1 (fault-call:5 fault-nth:2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1140.455134][ T2787] __d_alloc+0x36/0x370 [ 1140.459485][ T2787] ? current_time+0xdb/0x190 [ 1140.464352][ T2787] d_alloc_pseudo+0x1a/0x50 [ 1140.469989][ T2787] alloc_file_pseudo+0x63/0x130 [ 1140.475030][ T2787] __shmem_file_setup+0x14c/0x1d0 [ 1140.480700][ T2787] shmem_file_setup+0x37/0x40 [ 1140.485591][ T2787] __se_sys_memfd_create+0x1eb/0x390 [ 1140.487550][ T2796] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1140.491063][ T2787] __x64_sys_memfd_create+0x2d/0x40 [ 1140.506023][ T2787] do_syscall_64+0x39/0x80 [ 1140.510545][ T2787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1140.517260][ T2787] RIP: 0033:0x466459 [ 1140.521512][ T2787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:28:58 executing program 5 (fault-call:1 fault-nth:7): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:28:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1140.547555][ T2787] RSP: 002b:00007f8df7957f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1140.557187][ T2787] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466459 [ 1140.565668][ T2787] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 1140.574394][ T2787] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1140.582630][ T2787] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1140.593716][ T2787] R13: 0000000020000080 R14: 0000000000011000 R15: 0000000020000040 15:28:58 executing program 2 (fault-call:0 fault-nth:5): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1140.673179][ T2806] FAULT_INJECTION: forcing a failure. [ 1140.673179][ T2806] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.674803][ T2805] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1140.688254][ T2806] CPU: 0 PID: 2806 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1140.705619][ T2805] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1140.705823][ T2806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.717007][ T2805] FAULT_INJECTION: forcing a failure. [ 1140.717007][ T2805] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.726315][ T2806] Call Trace: [ 1140.726328][ T2806] dump_stack+0x137/0x19d [ 1140.747404][ T2806] should_fail+0x23c/0x250 [ 1140.752292][ T2806] ? __alloc_file+0x2e/0x1a0 [ 1140.756870][ T2806] __should_failslab+0x81/0x90 [ 1140.761821][ T2806] should_failslab+0x5/0x20 [ 1140.766608][ T2806] kmem_cache_alloc+0x46/0x320 [ 1140.771356][ T2806] ? __d_alloc+0x36/0x370 [ 1140.775840][ T2806] __alloc_file+0x2e/0x1a0 [ 1140.780430][ T2806] alloc_empty_file+0xcd/0x1c0 [ 1140.785526][ T2806] alloc_file+0x3a/0x280 [ 1140.790032][ T2806] alloc_file_pseudo+0xe2/0x130 [ 1140.795103][ T2806] __shmem_file_setup+0x14c/0x1d0 [ 1140.800337][ T2806] shmem_file_setup+0x37/0x40 [ 1140.805289][ T2806] __se_sys_memfd_create+0x1eb/0x390 [ 1140.810774][ T2806] __x64_sys_memfd_create+0x2d/0x40 [ 1140.815983][ T2806] do_syscall_64+0x39/0x80 [ 1140.820389][ T2806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1140.826363][ T2806] RIP: 0033:0x466459 [ 1140.831753][ T2806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.852431][ T2806] RSP: 002b:00007f8df7957f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1140.861218][ T2806] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466459 [ 1140.869275][ T2806] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 1140.877586][ T2806] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1140.885858][ T2806] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1140.894179][ T2806] R13: 0000000020000080 R14: 0000000000011000 R15: 0000000020000040 [ 1140.903539][ T2805] CPU: 1 PID: 2805 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1140.913426][ T2805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.924041][ T2805] Call Trace: [ 1140.927454][ T2805] dump_stack+0x137/0x19d [ 1140.931993][ T2805] should_fail+0x23c/0x250 [ 1140.936545][ T2805] __should_failslab+0x81/0x90 [ 1140.941498][ T2805] should_failslab+0x5/0x20 [ 1140.946011][ T2805] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1140.951819][ T2805] ? __kmalloc_node+0x30/0x40 [ 1140.956692][ T2805] __kmalloc_node+0x30/0x40 [ 1140.961405][ T2805] kvmalloc_node+0x81/0xf0 [ 1140.965842][ T2805] alloc_netdev_mqs+0x86/0x750 [ 1140.968176][ T2811] FAULT_INJECTION: forcing a failure. [ 1140.968176][ T2811] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.971151][ T2805] ? geneve_dellink+0xc0/0xc0 [ 1140.971247][ T2805] rtnl_create_link+0x1c1/0x510 [ 1140.994157][ T2805] rtnl_newlink+0xc84/0x1310 [ 1140.998896][ T2805] ? widen_string+0x3a/0x280 [ 1141.003575][ T2805] ? aa_get_newest_label+0x74/0x250 [ 1141.008893][ T2805] ? apparmor_capable+0xfe/0x160 [ 1141.014442][ T2805] ? bpf_lsm_capable+0x5/0x10 [ 1141.019197][ T2805] ? security_capable+0x91/0xa0 [ 1141.024146][ T2805] ? ns_capable+0x86/0xb0 [ 1141.028573][ T2805] ? rtnl_setlink+0x280/0x280 [ 1141.033336][ T2805] rtnetlink_rcv_msg+0x728/0x7c0 [ 1141.038721][ T2805] ? ___cache_free+0x3c/0x2f0 [ 1141.043475][ T2805] ? skb_network_protocol+0x144/0x340 [ 1141.048839][ T2805] ? __kfree_skb+0xfe/0x150 [ 1141.053572][ T2805] ? kmem_cache_free+0x59/0x100 [ 1141.058583][ T2805] ? __kfree_skb+0xfe/0x150 [ 1141.063129][ T2805] ? consume_skb+0x4b/0x160 [ 1141.067707][ T2805] ? nlmon_xmit+0x47/0x50 [ 1141.072559][ T2805] ? xmit_one+0x173/0x2e0 [ 1141.076908][ T2805] ? local_bh_enable+0x1b/0x20 [ 1141.081845][ T2805] ? __dev_queue_xmit+0xc25/0x1580 [ 1141.087275][ T2805] ? __skb_clone+0x2b9/0x2d0 [ 1141.091942][ T2805] ? __rcu_read_unlock+0x5c/0x250 [ 1141.097256][ T2805] netlink_rcv_skb+0x13e/0x240 [ 1141.102343][ T2805] ? rtnetlink_bind+0x60/0x60 [ 1141.107407][ T2805] rtnetlink_rcv+0x18/0x20 [ 1141.112331][ T2805] netlink_unicast+0x5fc/0x6c0 [ 1141.117092][ T2805] netlink_sendmsg+0x6f8/0x7c0 [ 1141.122078][ T2805] ? netlink_getsockopt+0x720/0x720 [ 1141.127353][ T2805] ____sys_sendmsg+0x360/0x4d0 [ 1141.132187][ T2805] ? import_iovec+0xb8/0xd0 [ 1141.136791][ T2805] __sys_sendmsg+0x1ed/0x270 [ 1141.141461][ T2805] ? __fsnotify_parent+0x32f/0x430 [ 1141.146561][ T2805] ? get_pid_task+0x90/0xc0 [ 1141.151153][ T2805] ? vfs_write+0x572/0x7e0 [ 1141.155647][ T2805] ? __fget_light+0x219/0x260 [ 1141.160376][ T2805] ? fput+0x2d/0x130 [ 1141.164361][ T2805] ? ksys_write+0x157/0x180 [ 1141.168874][ T2805] __x64_sys_sendmsg+0x42/0x50 [ 1141.173902][ T2805] do_syscall_64+0x39/0x80 [ 1141.178611][ T2805] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1141.184647][ T2805] RIP: 0033:0x466459 [ 1141.188619][ T2805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.208325][ T2805] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.216814][ T2805] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 15:28:58 executing program 2 (fault-call:0 fault-nth:6): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1141.224898][ T2805] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1141.233165][ T2805] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.241565][ T2805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.249856][ T2805] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1141.258438][ T2811] CPU: 0 PID: 2811 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1141.261251][ T2809] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1141.267398][ T2811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.267412][ T2811] Call Trace: [ 1141.267421][ T2811] dump_stack+0x137/0x19d [ 1141.267446][ T2811] should_fail+0x23c/0x250 [ 1141.299924][ T2811] ? security_file_alloc+0x30/0x190 [ 1141.305713][ T2811] __should_failslab+0x81/0x90 [ 1141.310575][ T2811] should_failslab+0x5/0x20 [ 1141.315873][ T2811] kmem_cache_alloc+0x46/0x320 [ 1141.321294][ T2811] ? __alloc_file+0x2e/0x1a0 [ 1141.325875][ T2811] security_file_alloc+0x30/0x190 [ 1141.330892][ T2811] __alloc_file+0x83/0x1a0 [ 1141.335302][ T2811] alloc_empty_file+0xcd/0x1c0 [ 1141.340580][ T2811] alloc_file+0x3a/0x280 [ 1141.344904][ T2811] alloc_file_pseudo+0xe2/0x130 [ 1141.349751][ T2811] __shmem_file_setup+0x14c/0x1d0 [ 1141.354869][ T2811] shmem_file_setup+0x37/0x40 [ 1141.359568][ T2811] __se_sys_memfd_create+0x1eb/0x390 [ 1141.364956][ T2811] __x64_sys_memfd_create+0x2d/0x40 [ 1141.370595][ T2811] do_syscall_64+0x39/0x80 [ 1141.375157][ T2811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1141.381143][ T2811] RIP: 0033:0x466459 [ 1141.385214][ T2811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.406748][ T2811] RSP: 002b:00007f8df7957f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1141.415565][ T2811] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466459 15:28:58 executing program 5 (fault-call:1 fault-nth:8): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1141.424033][ T2811] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 1141.431992][ T2811] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1141.440430][ T2811] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1141.448519][ T2811] R13: 0000000020000080 R14: 0000000000011000 R15: 0000000020000040 [ 1141.467682][T12495] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1141.513063][ T2813] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1141.524667][ T2813] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1141.535182][ T2813] FAULT_INJECTION: forcing a failure. [ 1141.535182][ T2813] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.549241][ T2813] CPU: 0 PID: 2813 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1141.558260][ T2813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.568699][ T2813] Call Trace: [ 1141.572338][ T2813] dump_stack+0x137/0x19d [ 1141.576993][ T2813] should_fail+0x23c/0x250 [ 1141.582263][ T2813] __should_failslab+0x81/0x90 [ 1141.591145][ T2813] ? dev_addr_init+0xa4/0x1f0 [ 1141.596233][ T2813] should_failslab+0x5/0x20 [ 1141.601374][ T2813] kmem_cache_alloc_trace+0x49/0x340 [ 1141.606850][ T2813] ? pcpu_alloc+0x104e/0x10a0 [ 1141.611730][ T2813] dev_addr_init+0xa4/0x1f0 [ 1141.616326][ T2813] alloc_netdev_mqs+0xf8/0x750 [ 1141.621381][ T2813] ? geneve_dellink+0xc0/0xc0 [ 1141.626274][ T2813] rtnl_create_link+0x1c1/0x510 [ 1141.631379][ T2813] rtnl_newlink+0xc84/0x1310 [ 1141.636345][ T2813] ? update_load_avg+0x1c8/0x2d0 [ 1141.641435][ T2813] ? rb_insert_color+0x2fa/0x310 [ 1141.646880][ T2813] ? update_curr+0x10f/0x390 [ 1141.651837][ T2813] ? enqueue_entity+0x25b/0x480 [ 1141.657732][ T2813] ? widen_string+0x3a/0x280 [ 1141.662554][ T2813] ? aa_get_newest_label+0x74/0x250 [ 1141.668292][ T2813] ? apparmor_capable+0xfe/0x160 [ 1141.673663][ T2813] ? bpf_lsm_capable+0x5/0x10 [ 1141.678808][ T2813] ? security_capable+0x91/0xa0 [ 1141.683736][ T2813] ? ns_capable+0x86/0xb0 [ 1141.689594][ T2813] ? rtnl_setlink+0x280/0x280 [ 1141.695011][ T2813] rtnetlink_rcv_msg+0x728/0x7c0 [ 1141.700544][ T2813] ? ___cache_free+0x3c/0x2f0 [ 1141.706221][ T2813] ? skb_network_protocol+0x144/0x340 [ 1141.712792][ T2813] ? __kfree_skb+0xfe/0x150 [ 1141.717637][ T2813] ? kmem_cache_free+0x59/0x100 [ 1141.722587][ T2813] ? __kfree_skb+0xfe/0x150 [ 1141.727387][ T2813] ? consume_skb+0x4b/0x160 [ 1141.732371][ T2813] ? nlmon_xmit+0x47/0x50 [ 1141.738055][ T2813] ? xmit_one+0x173/0x2e0 [ 1141.743218][ T2813] ? local_bh_enable+0x1b/0x20 [ 1141.748511][ T2813] ? __dev_queue_xmit+0xc25/0x1580 [ 1141.753810][ T2813] ? __skb_clone+0x2b9/0x2d0 [ 1141.759249][ T2813] ? __rcu_read_unlock+0x5c/0x250 [ 1141.764757][ T2813] netlink_rcv_skb+0x13e/0x240 [ 1141.769851][ T2813] ? rtnetlink_bind+0x60/0x60 [ 1141.774758][ T2813] rtnetlink_rcv+0x18/0x20 [ 1141.779403][ T2813] netlink_unicast+0x5fc/0x6c0 [ 1141.784222][ T2813] netlink_sendmsg+0x6f8/0x7c0 [ 1141.789097][ T2813] ? netlink_getsockopt+0x720/0x720 [ 1141.794489][ T2813] ____sys_sendmsg+0x360/0x4d0 [ 1141.799609][ T2813] ? import_iovec+0xb8/0xd0 [ 1141.804411][ T2813] __sys_sendmsg+0x1ed/0x270 [ 1141.809374][ T2813] ? __fsnotify_parent+0x32f/0x430 [ 1141.814520][ T2813] ? get_pid_task+0x90/0xc0 [ 1141.819317][ T2813] ? vfs_write+0x572/0x7e0 [ 1141.823860][ T2813] ? __fget_light+0x219/0x260 [ 1141.829366][ T2813] ? fput+0x2d/0x130 [ 1141.833718][ T2813] ? ksys_write+0x157/0x180 [ 1141.838880][ T2813] __x64_sys_sendmsg+0x42/0x50 [ 1141.844057][ T2813] do_syscall_64+0x39/0x80 [ 1141.849050][ T2813] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1141.855131][ T2813] RIP: 0033:0x466459 [ 1141.859663][ T2813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.879534][ T2813] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.887998][ T2813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1141.896045][ T2813] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1141.904752][ T2813] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.912866][ T2813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.920825][ T2813] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1142.066494][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1142.186627][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1142.195904][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1142.205574][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1142.216126][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1142.336631][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1142.346960][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1142.355317][T12495] usb 2-1: Product: syz [ 1142.360376][T12495] usb 2-1: Manufacturer: syz [ 1142.367609][T12495] usb 2-1: config 0 descriptor?? [ 1142.608019][ T2797] FAULT_INJECTION: forcing a failure. [ 1142.608019][ T2797] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.622145][ T2797] CPU: 0 PID: 2797 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1142.631134][ T2797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.641351][ T2797] Call Trace: [ 1142.644672][ T2797] dump_stack+0x137/0x19d [ 1142.649262][ T2797] should_fail+0x23c/0x250 [ 1142.653776][ T2797] ? __alloc_file+0x2e/0x1a0 [ 1142.659024][ T2797] __should_failslab+0x81/0x90 [ 1142.663776][ T2797] should_failslab+0x5/0x20 [ 1142.668532][ T2797] kmem_cache_alloc+0x46/0x320 [ 1142.673306][ T2797] __alloc_file+0x2e/0x1a0 [ 1142.678179][ T2797] alloc_empty_file+0xcd/0x1c0 [ 1142.683315][ T2797] path_openat+0x65/0x21b0 [ 1142.687995][ T2797] ? __rcu_read_unlock+0x5c/0x250 [ 1142.693196][ T2797] ? aa_file_perm+0x125/0xe60 [ 1142.697859][ T2797] ? kstrtoull+0x30e/0x350 [ 1142.702297][ T2797] do_filp_open+0xd9/0x1f0 [ 1142.706789][ T2797] ? __virt_addr_valid+0x15a/0x1a0 [ 1142.712053][ T2797] ? __check_object_size+0x253/0x310 [ 1142.717344][ T2797] ? _raw_spin_unlock+0x22/0x40 [ 1142.722701][ T2797] ? alloc_fd+0x35d/0x3b0 [ 1142.727101][ T2797] do_sys_openat2+0xa3/0x250 [ 1142.731854][ T2797] __x64_sys_openat+0xef/0x110 [ 1142.736616][ T2797] do_syscall_64+0x39/0x80 [ 1142.741096][ T2797] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1142.747245][ T2797] RIP: 0033:0x419544 [ 1142.751132][ T2797] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1142.771229][ T2797] RSP: 002b:00007f770a9c3040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1142.779999][ T2797] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544 [ 1142.788133][ T2797] RDX: 0000000000000002 RSI: 00000000004be78a RDI: 00000000ffffff9c [ 1142.796341][ T2797] RBP: 00000000004be78a R08: 0000000000000000 R09: 0000000000000000 [ 1142.804666][ T2797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1142.812804][ T2797] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000022000 [ 1142.826192][T12495] usb 2-1: USB disconnect, device number 106 15:29:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:00 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:00 executing program 2 (fault-call:0 fault-nth:7): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:00 executing program 5 (fault-call:1 fault-nth:9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:00 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1143.048834][ T2829] FAULT_INJECTION: forcing a failure. [ 1143.048834][ T2829] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.063873][ T2831] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1143.073348][ T2829] CPU: 0 PID: 2829 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1143.082227][ T2829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.093009][ T2829] Call Trace: [ 1143.096397][ T2829] dump_stack+0x137/0x19d [ 1143.100422][ T2831] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1143.101418][ T2829] should_fail+0x23c/0x250 [ 1143.101442][ T2829] __should_failslab+0x81/0x90 [ 1143.101462][ T2829] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 1143.101484][ T2829] should_failslab+0x5/0x20 [ 1143.111473][ T2831] FAULT_INJECTION: forcing a failure. [ 1143.111473][ T2831] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.115635][ T2829] __kmalloc+0x66/0x380 [ 1143.115702][ T2829] ? __alloc_pages_nodemask+0x1a8/0x350 [ 1143.115724][ T2829] tomoyo_realpath_from_path+0x98/0x3b0 [ 1143.115751][ T2829] tomoyo_path_perm+0xc6/0x330 [ 1143.115772][ T2829] ? security_file_alloc+0x30/0x190 [ 1143.115797][ T2829] tomoyo_path_truncate+0x18/0x20 [ 1143.175032][ T2829] security_path_truncate+0x7f/0xd0 [ 1143.180550][ T2829] do_sys_ftruncate+0x378/0x540 [ 1143.185593][ T2829] ? kfree+0xf0/0x1e0 [ 1143.189567][ T2829] ? fpregs_assert_state_consistent+0x7d/0x90 [ 1143.195915][ T2829] __x64_sys_ftruncate+0x2f/0x40 [ 1143.201141][ T2829] do_syscall_64+0x39/0x80 [ 1143.205761][ T2829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1143.211854][ T2829] RIP: 0033:0x466417 [ 1143.216001][ T2829] Code: 48 89 e7 e8 cb e5 ff ff 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 b8 4d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 [ 1143.237425][ T2829] RSP: 002b:00007f8df7957f48 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1143.246187][ T2829] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466417 [ 1143.254677][ T2829] RDX: 0000000000011000 RSI: 0000000000011000 RDI: 0000000000000004 [ 1143.262921][ T2829] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1143.270964][ T2829] R10: 0000000000000001 R11: 0000000000000217 R12: 0000000000000004 [ 1143.280422][ T2829] R13: 0000000000000004 R14: 0000000000011000 R15: 0000000020000040 [ 1143.288959][ T2831] CPU: 1 PID: 2831 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1143.295581][ T2829] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1143.297937][ T2831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.297949][ T2831] Call Trace: [ 1143.297958][ T2831] dump_stack+0x137/0x19d [ 1143.323367][ T2831] should_fail+0x23c/0x250 [ 1143.327882][ T2831] __should_failslab+0x81/0x90 [ 1143.333404][ T2831] should_failslab+0x5/0x20 [ 1143.338020][ T2831] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1143.344266][ T2831] ? __kmalloc_node+0x30/0x40 [ 1143.349130][ T2831] __kmalloc_node+0x30/0x40 [ 1143.353641][ T2831] kvmalloc_node+0x81/0xf0 [ 1143.358184][ T2831] alloc_netdev_mqs+0x42c/0x750 [ 1143.363324][ T2831] ? geneve_dellink+0xc0/0xc0 [ 1143.368208][ T2831] rtnl_create_link+0x1c1/0x510 [ 1143.373625][ T2831] rtnl_newlink+0xc84/0x1310 [ 1143.378356][ T2831] ? kcsan_setup_watchpoint+0x26e/0x470 [ 1143.384085][ T2831] ? widen_string+0x3a/0x280 [ 1143.389304][ T2831] ? aa_get_newest_label+0x74/0x250 [ 1143.394713][ T2831] ? apparmor_capable+0xfe/0x160 [ 1143.399800][ T2831] ? bpf_lsm_capable+0x5/0x10 [ 1143.404537][ T2831] ? security_capable+0x91/0xa0 [ 1143.409428][ T2831] ? ns_capable+0x86/0xb0 [ 1143.414419][ T2831] ? rtnl_setlink+0x280/0x280 [ 1143.419405][ T2831] rtnetlink_rcv_msg+0x728/0x7c0 [ 1143.427875][ T2831] ? ___cache_free+0x3c/0x2f0 [ 1143.432783][ T2831] ? skb_network_protocol+0x144/0x340 [ 1143.438253][ T2831] ? __kfree_skb+0xfe/0x150 [ 1143.442766][ T2831] ? kmem_cache_free+0x59/0x100 [ 1143.447772][ T2831] ? __kfree_skb+0xfe/0x150 [ 1143.452524][ T2831] ? consume_skb+0x4b/0x160 [ 1143.457412][ T2831] ? nlmon_xmit+0x47/0x50 [ 1143.461905][ T2831] ? xmit_one+0x173/0x2e0 [ 1143.466399][ T2831] ? local_bh_enable+0x1b/0x20 [ 1143.471406][ T2831] ? __dev_queue_xmit+0xc25/0x1580 [ 1143.477274][ T2831] ? __skb_clone+0x2b9/0x2d0 [ 1143.481910][ T2831] ? __rcu_read_unlock+0x5c/0x250 [ 1143.487192][ T2831] netlink_rcv_skb+0x13e/0x240 [ 1143.492237][ T2831] ? rtnetlink_bind+0x60/0x60 [ 1143.497387][ T2831] rtnetlink_rcv+0x18/0x20 [ 1143.501821][ T2831] netlink_unicast+0x5fc/0x6c0 [ 1143.506711][ T2831] netlink_sendmsg+0x6f8/0x7c0 [ 1143.511965][ T2831] ? netlink_getsockopt+0x720/0x720 [ 1143.517283][ T2831] ____sys_sendmsg+0x360/0x4d0 [ 1143.522164][ T2831] ? import_iovec+0xb8/0xd0 [ 1143.526953][ T2831] __sys_sendmsg+0x1ed/0x270 [ 1143.531642][ T2831] ? __fsnotify_parent+0x32f/0x430 [ 1143.536914][ T2831] ? get_pid_task+0x90/0xc0 [ 1143.541590][ T2831] ? vfs_write+0x572/0x7e0 [ 1143.546023][ T2831] ? __fget_light+0x219/0x260 [ 1143.551237][ T2831] ? fput+0x2d/0x130 [ 1143.555517][ T2831] ? ksys_write+0x157/0x180 [ 1143.560122][ T2831] __x64_sys_sendmsg+0x42/0x50 [ 1143.565029][ T2831] do_syscall_64+0x39/0x80 [ 1143.570076][ T2831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1143.576648][ T2831] RIP: 0033:0x466459 [ 1143.580660][ T2831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1143.607619][ T2831] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1143.616411][ T2831] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1143.625429][ T2831] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1143.633786][ T2831] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.642191][ T2831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:29:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:01 executing program 1 (fault-call:5 fault-nth:3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:01 executing program 2 (fault-call:0 fault-nth:8): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1143.650877][ T2831] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 15:29:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:01 executing program 5 (fault-call:1 fault-nth:10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1143.747046][ T2846] FAULT_INJECTION: forcing a failure. [ 1143.747046][ T2846] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.749270][ T2847] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1143.770924][ T2847] FAULT_INJECTION: forcing a failure. [ 1143.770924][ T2847] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.781728][ T2846] CPU: 1 PID: 2846 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1143.792572][ T2846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.802909][ T2846] Call Trace: [ 1143.806195][ T2846] dump_stack+0x137/0x19d [ 1143.810800][ T2846] should_fail+0x23c/0x250 [ 1143.815227][ T2846] __should_failslab+0x81/0x90 [ 1143.820022][ T2846] ? tomoyo_encode2+0x1d3/0x350 [ 1143.824867][ T2846] should_failslab+0x5/0x20 [ 1143.829391][ T2846] __kmalloc+0x66/0x380 [ 1143.833543][ T2846] tomoyo_encode2+0x1d3/0x350 [ 1143.838254][ T2846] ? dynamic_dname+0xf0/0xf0 [ 1143.843036][ T2846] tomoyo_realpath_from_path+0x35e/0x3b0 [ 1143.848670][ T2846] tomoyo_path_perm+0xc6/0x330 [ 1143.853539][ T2846] ? security_file_alloc+0x30/0x190 [ 1143.858758][ T2846] tomoyo_path_truncate+0x18/0x20 [ 1143.864036][ T2846] security_path_truncate+0x7f/0xd0 [ 1143.869509][ T2846] do_sys_ftruncate+0x378/0x540 [ 1143.874538][ T2846] ? kfree+0xf0/0x1e0 [ 1143.878643][ T2846] ? fpregs_assert_state_consistent+0x7d/0x90 [ 1143.885009][ T2846] __x64_sys_ftruncate+0x2f/0x40 [ 1143.890083][ T2846] do_syscall_64+0x39/0x80 [ 1143.894509][ T2846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1143.900438][ T2846] RIP: 0033:0x466417 [ 1143.904425][ T2846] Code: 48 89 e7 e8 cb e5 ff ff 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 b8 4d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 [ 1143.924212][ T2846] RSP: 002b:00007f8df7957f48 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1143.932811][ T2846] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000466417 [ 1143.941213][ T2846] RDX: 0000000000011000 RSI: 0000000000011000 RDI: 0000000000000004 [ 1143.949582][ T2846] RBP: 0000000000000001 R08: 0000000000008800 R09: ffffffffffffffff [ 1143.957641][ T2846] R10: 0000000000000001 R11: 0000000000000217 R12: 0000000000000004 [ 1143.965614][ T2846] R13: 0000000000000004 R14: 0000000000011000 R15: 0000000020000040 [ 1143.973809][ T2847] CPU: 0 PID: 2847 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1143.982761][ T2847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.990688][ T2846] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1143.992960][ T2847] Call Trace: [ 1143.992973][ T2847] dump_stack+0x137/0x19d [ 1144.007533][ T2847] should_fail+0x23c/0x250 [ 1144.012192][ T2847] __should_failslab+0x81/0x90 [ 1144.017434][ T2847] should_failslab+0x5/0x20 [ 1144.022934][ T2847] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1144.028829][ T2847] ? __kmalloc_node+0x30/0x40 [ 1144.033653][ T2847] __kmalloc_node+0x30/0x40 [ 1144.038484][ T2847] kvmalloc_node+0x81/0xf0 [ 1144.043152][ T2847] alloc_netdev_mqs+0x575/0x750 [ 1144.048144][ T2847] ? geneve_dellink+0xc0/0xc0 [ 1144.052905][ T2847] rtnl_create_link+0x1c1/0x510 [ 1144.058242][ T2847] rtnl_newlink+0xc84/0x1310 [ 1144.062864][ T2847] ? widen_string+0x3a/0x280 [ 1144.067627][ T2847] ? aa_get_newest_label+0x74/0x250 [ 1144.073356][ T2847] ? apparmor_capable+0xfe/0x160 [ 1144.079098][ T2847] ? bpf_lsm_capable+0x5/0x10 [ 1144.084637][ T2847] ? security_capable+0x91/0xa0 [ 1144.090030][ T2847] ? ns_capable+0x86/0xb0 [ 1144.094503][ T2847] ? rtnl_setlink+0x280/0x280 [ 1144.099194][ T2847] rtnetlink_rcv_msg+0x728/0x7c0 [ 1144.104213][ T2847] ? ___cache_free+0x3c/0x2f0 [ 1144.108974][ T2847] ? skb_network_protocol+0x144/0x340 [ 1144.114851][ T2847] ? __kfree_skb+0xfe/0x150 [ 1144.119637][ T2847] ? kmem_cache_free+0x59/0x100 [ 1144.124552][ T2847] ? __kfree_skb+0xfe/0x150 [ 1144.129335][ T2847] ? consume_skb+0x4b/0x160 [ 1144.133839][ T2847] ? nlmon_xmit+0x47/0x50 [ 1144.138305][ T2847] ? xmit_one+0x173/0x2e0 [ 1144.142716][ T2847] ? local_bh_enable+0x1b/0x20 [ 1144.148161][ T2847] ? __dev_queue_xmit+0xc25/0x1580 [ 1144.153569][ T2847] ? __skb_clone+0x2b9/0x2d0 [ 1144.158319][ T2847] ? __rcu_read_unlock+0x5c/0x250 [ 1144.164488][ T2847] netlink_rcv_skb+0x13e/0x240 [ 1144.169435][ T2847] ? rtnetlink_bind+0x60/0x60 [ 1144.174598][ T2847] rtnetlink_rcv+0x18/0x20 [ 1144.179349][ T2847] netlink_unicast+0x5fc/0x6c0 [ 1144.184207][ T2847] netlink_sendmsg+0x6f8/0x7c0 [ 1144.188966][ T2847] ? netlink_getsockopt+0x720/0x720 [ 1144.194339][ T2847] ____sys_sendmsg+0x360/0x4d0 [ 1144.199199][ T2847] ? import_iovec+0xb8/0xd0 [ 1144.203799][ T2847] __sys_sendmsg+0x1ed/0x270 [ 1144.208484][ T2847] ? __fsnotify_parent+0x32f/0x430 [ 1144.213587][ T2847] ? get_pid_task+0x90/0xc0 [ 1144.218079][ T2847] ? vfs_write+0x572/0x7e0 [ 1144.222612][ T2847] ? __fget_light+0x219/0x260 [ 1144.228394][ T2847] ? fput+0x2d/0x130 [ 1144.232372][ T2847] ? ksys_write+0x157/0x180 [ 1144.238114][ T2847] __x64_sys_sendmsg+0x42/0x50 [ 1144.242874][ T2847] do_syscall_64+0x39/0x80 [ 1144.247302][ T2847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1144.253248][ T2847] RIP: 0033:0x466459 [ 1144.257166][ T2847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.276938][ T2847] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1144.285855][ T2847] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 15:29:01 executing program 2 (fault-call:0 fault-nth:9): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1144.294046][ T2847] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1144.302007][ T2847] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.310251][ T2847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1144.318668][ T2847] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1144.330150][ T8899] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1144.378465][ T2854] FAULT_INJECTION: forcing a failure. [ 1144.378465][ T2854] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1144.392564][ T2854] CPU: 0 PID: 2854 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1144.401449][ T2854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.411721][ T2854] Call Trace: [ 1144.415320][ T2854] dump_stack+0x137/0x19d [ 1144.419748][ T2854] should_fail+0x23c/0x250 [ 1144.424275][ T2854] __alloc_pages_nodemask+0xea/0x350 [ 1144.429583][ T2854] alloc_pages_vma+0x3e6/0x890 [ 1144.434414][ T2854] shmem_alloc_and_acct_page+0x2ba/0x640 [ 1144.440520][ T2854] shmem_getpage_gfp+0x6c6/0x1980 [ 1144.445565][ T2854] shmem_write_begin+0x83/0x100 [ 1144.450512][ T2854] generic_perform_write+0x196/0x3a0 [ 1144.455827][ T2854] ? file_update_time+0x1bd/0x3e0 [ 1144.461303][ T2854] __generic_file_write_iter+0x15c/0x340 [ 1144.467353][ T2854] ? generic_write_checks+0x250/0x290 [ 1144.472916][ T2854] generic_file_write_iter+0x75/0x130 [ 1144.478569][ T2854] vfs_write+0x6f9/0x7e0 [ 1144.483089][ T2854] __x64_sys_pwrite64+0xf5/0x150 [ 1144.488021][ T2854] do_syscall_64+0x39/0x80 [ 1144.492622][ T2854] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1144.498774][ T2854] RIP: 0033:0x4195f7 [ 1144.502859][ T2854] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1144.523370][ T2854] RSP: 002b:00007f8df7957f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1144.532139][ T2854] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 00000000004195f7 [ 1144.540384][ T2854] RDX: 0000000000000006 RSI: 0000000020010600 RDI: 0000000000000004 [ 1144.548696][ T2854] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1144.556853][ T2854] R10: 0000000000008800 R11: 0000000000000293 R12: 0000000000000004 [ 1144.564994][ T2854] R13: 0000000000000004 R14: 0000000020000280 R15: 0000000000000000 [ 1144.686185][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1144.806438][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1144.815276][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1144.825285][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1144.835859][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1144.956310][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1144.966242][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1144.974477][ T8899] usb 2-1: Product: syz [ 1144.979473][ T8899] usb 2-1: Manufacturer: syz [ 1144.984932][ T8899] usb 2-1: config 0 descriptor?? [ 1145.227817][ T2842] FAULT_INJECTION: forcing a failure. [ 1145.227817][ T2842] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.240892][ T2842] CPU: 1 PID: 2842 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1145.249843][ T2842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.260262][ T2842] Call Trace: [ 1145.263642][ T2842] dump_stack+0x137/0x19d [ 1145.268147][ T2842] should_fail+0x23c/0x250 [ 1145.272727][ T2842] ? security_file_alloc+0x30/0x190 [ 1145.278187][ T2842] __should_failslab+0x81/0x90 [ 1145.283474][ T2842] should_failslab+0x5/0x20 [ 1145.288129][ T2842] kmem_cache_alloc+0x46/0x320 [ 1145.292884][ T2842] ? __alloc_file+0x2e/0x1a0 [ 1145.297465][ T2842] security_file_alloc+0x30/0x190 [ 1145.303509][ T2842] __alloc_file+0x83/0x1a0 [ 1145.307926][ T2842] alloc_empty_file+0xcd/0x1c0 [ 1145.312851][ T2842] path_openat+0x65/0x21b0 [ 1145.317689][ T2842] ? __rcu_read_unlock+0x5c/0x250 [ 1145.322719][ T2842] ? aa_file_perm+0x125/0xe60 [ 1145.327599][ T2842] ? kstrtoull+0x30e/0x350 [ 1145.332193][ T2842] do_filp_open+0xd9/0x1f0 [ 1145.336599][ T2842] ? __virt_addr_valid+0x15a/0x1a0 [ 1145.341835][ T2842] ? __check_object_size+0x253/0x310 [ 1145.347219][ T2842] ? _raw_spin_unlock+0x22/0x40 [ 1145.352525][ T2842] ? alloc_fd+0x35d/0x3b0 [ 1145.357163][ T2842] do_sys_openat2+0xa3/0x250 [ 1145.361757][ T2842] __x64_sys_openat+0xef/0x110 [ 1145.366719][ T2842] do_syscall_64+0x39/0x80 [ 1145.371132][ T2842] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1145.377057][ T2842] RIP: 0033:0x419544 [ 1145.381148][ T2842] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1145.402278][ T2842] RSP: 002b:00007f770a9c3040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1145.411394][ T2842] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544 [ 1145.419445][ T2842] RDX: 0000000000000002 RSI: 00000000004be78a RDI: 00000000ffffff9c [ 1145.427705][ T2842] RBP: 00000000004be78a R08: 0000000000000000 R09: 0000000000000000 [ 1145.435856][ T2842] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1145.443961][ T2842] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000022000 [ 1145.457708][ T8899] usb 2-1: USB disconnect, device number 107 15:29:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:03 executing program 5 (fault-call:1 fault-nth:11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:03 executing program 2 (fault-call:0 fault-nth:10): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:03 executing program 1 (fault-call:5 fault-nth:4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1146.082850][ T2870] __nla_validate_parse: 1 callbacks suppressed [ 1146.082865][ T2870] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1146.103322][ T2872] FAULT_INJECTION: forcing a failure. [ 1146.103322][ T2872] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.105883][ T2870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1146.117081][ T2872] CPU: 1 PID: 2872 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1146.117103][ T2872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.117126][ T2872] Call Trace: [ 1146.117135][ T2872] dump_stack+0x137/0x19d [ 1146.117162][ T2872] should_fail+0x23c/0x250 [ 1146.117180][ T2872] ? xas_create+0x98b/0xbb0 [ 1146.117199][ T2872] __should_failslab+0x81/0x90 [ 1146.131608][ T2870] FAULT_INJECTION: forcing a failure. [ 1146.131608][ T2870] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.136573][ T2872] should_failslab+0x5/0x20 [ 1146.187875][ T2872] kmem_cache_alloc+0x46/0x320 [ 1146.192827][ T2872] ? __alloc_pages_nodemask+0x1a8/0x350 [ 1146.198423][ T2872] xas_create+0x98b/0xbb0 [ 1146.202973][ T2872] ? __rcu_read_unlock+0x5c/0x250 [ 1146.208314][ T2872] xas_create_range+0x146/0x360 [ 1146.213172][ T2872] shmem_add_to_page_cache+0x3ed/0x6e0 [ 1146.218918][ T2872] shmem_getpage_gfp+0x86a/0x1980 [ 1146.223955][ T2872] shmem_write_begin+0x83/0x100 [ 1146.231202][ T2872] generic_perform_write+0x196/0x3a0 [ 1146.236922][ T2872] ? file_update_time+0x1bd/0x3e0 [ 1146.242720][ T2872] __generic_file_write_iter+0x15c/0x340 [ 1146.248954][ T2872] ? generic_write_checks+0x250/0x290 [ 1146.255062][ T2872] generic_file_write_iter+0x75/0x130 [ 1146.261170][ T2872] vfs_write+0x6f9/0x7e0 [ 1146.265586][ T2872] __x64_sys_pwrite64+0xf5/0x150 [ 1146.270611][ T2872] do_syscall_64+0x39/0x80 [ 1146.275256][ T2872] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1146.281230][ T2872] RIP: 0033:0x4195f7 [ 1146.285223][ T2872] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1146.305179][ T2872] RSP: 002b:00007f8df7957f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1146.313753][ T2872] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 00000000004195f7 [ 1146.322004][ T2872] RDX: 0000000000000006 RSI: 0000000020010600 RDI: 0000000000000004 [ 1146.330921][ T2872] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1146.338980][ T2872] R10: 0000000000008800 R11: 0000000000000293 R12: 0000000000000004 [ 1146.347199][ T2872] R13: 0000000000000004 R14: 0000000020000280 R15: 0000000000000000 [ 1146.355265][ T2870] CPU: 0 PID: 2870 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1146.363994][ T2870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.374819][ T2870] Call Trace: [ 1146.378282][ T2870] dump_stack+0x137/0x19d [ 1146.382880][ T2870] should_fail+0x23c/0x250 [ 1146.387831][ T2870] __should_failslab+0x81/0x90 [ 1146.392795][ T2870] should_failslab+0x5/0x20 [ 1146.397381][ T2870] kmem_cache_alloc_node+0x56/0x310 [ 1146.402737][ T2870] ? consume_skb+0x4b/0x160 [ 1146.407402][ T2870] ? __alloc_skb+0xed/0x420 [ 1146.412345][ T2870] __alloc_skb+0xed/0x420 [ 1146.417338][ T2870] netlink_ack+0x292/0x690 [ 1146.422358][ T2870] ? __rcu_read_unlock+0x5c/0x250 [ 1146.427737][ T2870] netlink_rcv_skb+0x1b7/0x240 [ 1146.432737][ T2870] ? rtnetlink_bind+0x60/0x60 [ 1146.437742][ T2870] rtnetlink_rcv+0x18/0x20 [ 1146.442171][ T2870] netlink_unicast+0x5fc/0x6c0 [ 1146.447195][ T2870] netlink_sendmsg+0x6f8/0x7c0 [ 1146.452040][ T2870] ? netlink_getsockopt+0x720/0x720 [ 1146.457718][ T2870] ____sys_sendmsg+0x360/0x4d0 [ 1146.463093][ T2870] ? import_iovec+0xb8/0xd0 [ 1146.467874][ T2870] __sys_sendmsg+0x1ed/0x270 [ 1146.472843][ T2870] ? __fsnotify_parent+0x32f/0x430 [ 1146.478220][ T2870] ? get_pid_task+0x90/0xc0 [ 1146.482953][ T2870] ? vfs_write+0x572/0x7e0 [ 1146.487593][ T2870] ? __fget_light+0x219/0x260 [ 1146.492638][ T2870] ? fput+0x2d/0x130 [ 1146.496632][ T2870] ? ksys_write+0x157/0x180 [ 1146.501219][ T2870] __x64_sys_sendmsg+0x42/0x50 [ 1146.506081][ T2870] do_syscall_64+0x39/0x80 [ 1146.510636][ T2870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1146.516711][ T2870] RIP: 0033:0x466459 [ 1146.520796][ T2870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.541362][ T2870] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.550057][ T2870] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1146.558567][ T2870] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1146.566986][ T2870] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.575208][ T2870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.586115][ T2870] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 15:29:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:04 executing program 5 (fault-call:1 fault-nth:12): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:04 executing program 2 (fault-call:0 fault-nth:11): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1146.737937][ T2886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1146.747930][ T2886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1146.751762][ T2888] FAULT_INJECTION: forcing a failure. [ 1146.751762][ T2888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.757936][ T2886] FAULT_INJECTION: forcing a failure. [ 1146.757936][ T2886] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.771191][ T2888] CPU: 1 PID: 2888 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1146.793120][ T2888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.803371][ T2888] Call Trace: [ 1146.806677][ T2888] dump_stack+0x137/0x19d [ 1146.811075][ T2888] should_fail+0x23c/0x250 [ 1146.816082][ T2888] should_fail_usercopy+0x16/0x20 [ 1146.821108][ T2888] iov_iter_copy_from_user_atomic+0x2d6/0x830 [ 1146.827360][ T2888] ? shmem_write_begin+0x83/0x100 [ 1146.832513][ T2888] generic_perform_write+0x1e4/0x3a0 [ 1146.837972][ T2888] ? file_update_time+0x1bd/0x3e0 [ 1146.843018][ T2888] __generic_file_write_iter+0x15c/0x340 [ 1146.848652][ T2888] ? generic_write_checks+0x250/0x290 [ 1146.854113][ T2888] generic_file_write_iter+0x75/0x130 [ 1146.859569][ T2888] vfs_write+0x6f9/0x7e0 [ 1146.864106][ T2888] __x64_sys_pwrite64+0xf5/0x150 [ 1146.869171][ T2888] do_syscall_64+0x39/0x80 [ 1146.874485][ T2888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1146.880838][ T2888] RIP: 0033:0x4195f7 [ 1146.884902][ T2888] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1146.906310][ T2888] RSP: 002b:00007f8df7957f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1146.915042][ T2888] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 00000000004195f7 [ 1146.923439][ T2888] RDX: 0000000000000006 RSI: 0000000020010600 RDI: 0000000000000004 [ 1146.931880][ T2888] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1146.940711][ T2888] R10: 0000000000008800 R11: 0000000000000293 R12: 0000000000000004 [ 1146.949589][ T2888] R13: 0000000000000004 R14: 0000000020000280 R15: 0000000000000000 [ 1146.957826][ T2886] CPU: 0 PID: 2886 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1146.959679][T12495] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1146.966962][ T2886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.966976][ T2886] Call Trace: [ 1146.966986][ T2886] dump_stack+0x137/0x19d [ 1146.967008][ T2886] should_fail+0x23c/0x250 [ 1146.967023][ T2886] __should_failslab+0x81/0x90 [ 1147.002660][ T2886] should_failslab+0x5/0x20 [ 1147.007278][ T2886] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1147.013272][ T2886] ? __kmalloc_node_track_caller+0x30/0x40 [ 1147.019383][ T2886] __kmalloc_node_track_caller+0x30/0x40 [ 1147.025275][ T2886] ? netlink_ack+0x292/0x690 [ 1147.031228][ T2886] __alloc_skb+0x187/0x420 [ 1147.036159][ T2886] netlink_ack+0x292/0x690 [ 1147.040839][ T2886] ? __rcu_read_unlock+0x5c/0x250 [ 1147.046620][ T2886] netlink_rcv_skb+0x1b7/0x240 [ 1147.051477][ T2886] ? rtnetlink_bind+0x60/0x60 [ 1147.056364][ T2886] rtnetlink_rcv+0x18/0x20 [ 1147.061131][ T2886] netlink_unicast+0x5fc/0x6c0 [ 1147.066054][ T2886] netlink_sendmsg+0x6f8/0x7c0 [ 1147.071052][ T2886] ? netlink_getsockopt+0x720/0x720 [ 1147.076484][ T2886] ____sys_sendmsg+0x360/0x4d0 [ 1147.081821][ T2886] ? import_iovec+0xb8/0xd0 [ 1147.086467][ T2886] __sys_sendmsg+0x1ed/0x270 [ 1147.091069][ T2886] ? __fsnotify_parent+0x32f/0x430 [ 1147.096581][ T2886] ? get_pid_task+0x90/0xc0 [ 1147.101145][ T2886] ? vfs_write+0x572/0x7e0 [ 1147.107656][ T2886] ? __fget_light+0x219/0x260 [ 1147.112712][ T2886] ? fput+0x2d/0x130 [ 1147.117015][ T2886] ? ksys_write+0x157/0x180 [ 1147.121904][ T2886] __x64_sys_sendmsg+0x42/0x50 [ 1147.126690][ T2886] do_syscall_64+0x39/0x80 [ 1147.131394][ T2886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1147.137439][ T2886] RIP: 0033:0x466459 [ 1147.141595][ T2886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.162634][ T2886] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.171049][ T2886] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1147.179497][ T2886] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 15:29:04 executing program 2 (fault-call:0 fault-nth:12): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1147.187746][ T2886] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.195878][ T2886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.204533][ T2886] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 15:29:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1147.238748][ T2893] FAULT_INJECTION: forcing a failure. [ 1147.238748][ T2893] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.252434][ T2893] CPU: 1 PID: 2893 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1147.261275][ T2893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1147.271653][ T2893] Call Trace: [ 1147.274958][ T2893] dump_stack+0x137/0x19d [ 1147.279381][ T2893] should_fail+0x23c/0x250 [ 1147.284077][ T2893] ? getname_flags+0x84/0x3d0 [ 1147.288982][ T2893] __should_failslab+0x81/0x90 [ 1147.294007][ T2893] should_failslab+0x5/0x20 [ 1147.298530][ T2893] kmem_cache_alloc+0x46/0x320 [ 1147.303826][ T2893] getname_flags+0x84/0x3d0 [ 1147.308678][ T2893] ? vfs_write+0x572/0x7e0 [ 1147.313266][ T2893] getname+0x15/0x20 [ 1147.317297][ T2893] do_sys_openat2+0x5b/0x250 [ 1147.321991][ T2893] __x64_sys_openat+0xef/0x110 [ 1147.327107][ T2893] do_syscall_64+0x39/0x80 [ 1147.332314][ T2893] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1147.338754][ T2893] RIP: 0033:0x419544 [ 1147.342991][ T2893] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1147.363853][ T2893] RSP: 002b:00007f8df7957ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1147.372434][ T2893] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 1147.380954][ T2893] RDX: 0000000000000002 RSI: 00007f8df7958000 RDI: 00000000ffffff9c [ 1147.389717][ T2893] RBP: 00007f8df7958000 R08: 0000000000000000 R09: ffffffffffffffff [ 1147.398464][ T2893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1147.407393][ T2893] R13: 0000000000000004 R14: 0000000020000298 R15: 0000000000000001 [ 1147.555923][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1147.695947][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1147.705613][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1147.717771][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1147.728994][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1147.867691][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1147.877566][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1147.885690][T12495] usb 2-1: Product: syz [ 1147.891120][T12495] usb 2-1: Manufacturer: syz [ 1147.896823][T12495] usb 2-1: config 0 descriptor?? [ 1148.148534][ T2874] FAULT_INJECTION: forcing a failure. [ 1148.148534][ T2874] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.161396][ T2874] CPU: 1 PID: 2874 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1148.170349][ T2874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.180760][ T2874] Call Trace: [ 1148.184060][ T2874] dump_stack+0x137/0x19d [ 1148.188687][ T2874] should_fail+0x23c/0x250 [ 1148.193191][ T2874] __should_failslab+0x81/0x90 [ 1148.198415][ T2874] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 1148.204173][ T2874] should_failslab+0x5/0x20 [ 1148.208675][ T2874] __kmalloc+0x66/0x380 [ 1148.212827][ T2874] tomoyo_realpath_from_path+0x98/0x3b0 [ 1148.218736][ T2874] tomoyo_check_open_permission+0xaf/0x370 [ 1148.224643][ T2874] tomoyo_file_open+0xd3/0xf0 [ 1148.229706][ T2874] security_file_open+0x3f/0x90 [ 1148.234575][ T2874] do_dentry_open+0x22d/0x890 [ 1148.239440][ T2874] vfs_open+0x43/0x50 [ 1148.243932][ T2874] path_openat+0x1982/0x21b0 [ 1148.248823][ T2874] ? aa_file_perm+0x125/0xe60 [ 1148.253718][ T2874] do_filp_open+0xd9/0x1f0 [ 1148.258187][ T2874] ? _raw_spin_unlock+0x22/0x40 [ 1148.263220][ T2874] ? alloc_fd+0x35d/0x3b0 [ 1148.267582][ T2874] do_sys_openat2+0xa3/0x250 [ 1148.272203][ T2874] __x64_sys_openat+0xef/0x110 [ 1148.277145][ T2874] do_syscall_64+0x39/0x80 [ 1148.281918][ T2874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1148.287811][ T2874] RIP: 0033:0x419544 [ 1148.291700][ T2874] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1148.311681][ T2874] RSP: 002b:00007f770a9c3040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1148.320617][ T2874] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544 [ 1148.329329][ T2874] RDX: 0000000000000002 RSI: 00000000004be78a RDI: 00000000ffffff9c [ 1148.337686][ T2874] RBP: 00000000004be78a R08: 0000000000000000 R09: 0000000000000000 [ 1148.346467][ T2874] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1148.354680][ T2874] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000022000 [ 1148.367553][ T2874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1148.374735][ T2874] udc-core: couldn't find an available UDC or it's busy [ 1148.382327][ T2874] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1148.391462][T11464] usb 2-1: USB disconnect, device number 108 15:29:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:06 executing program 5 (fault-call:1 fault-nth:13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:06 executing program 2 (fault-call:0 fault-nth:13): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:06 executing program 1 (fault-call:5 fault-nth:5): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1149.108545][ T2912] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1149.110921][ T2911] FAULT_INJECTION: forcing a failure. [ 1149.110921][ T2911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1149.121340][ T2912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1149.138816][ T2911] CPU: 1 PID: 2911 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1149.150137][ T2911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.150597][ T2912] FAULT_INJECTION: forcing a failure. [ 1149.150597][ T2912] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.160260][ T2911] Call Trace: [ 1149.160273][ T2911] dump_stack+0x137/0x19d [ 1149.160304][ T2911] should_fail+0x23c/0x250 [ 1149.160397][ T2911] should_fail_usercopy+0x16/0x20 [ 1149.160416][ T2911] strncpy_from_user+0x21/0x250 [ 1149.195865][ T2911] getname_flags+0xb8/0x3d0 [ 1149.200458][ T2911] ? vfs_write+0x572/0x7e0 [ 1149.204954][ T2911] getname+0x15/0x20 [ 1149.209113][ T2911] do_sys_openat2+0x5b/0x250 [ 1149.213715][ T2911] __x64_sys_openat+0xef/0x110 [ 1149.218839][ T2911] do_syscall_64+0x39/0x80 [ 1149.223242][ T2911] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1149.229215][ T2911] RIP: 0033:0x419544 [ 1149.233266][ T2911] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1149.253408][ T2911] RSP: 002b:00007f8df7957ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1149.261915][ T2911] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 1149.269967][ T2911] RDX: 0000000000000002 RSI: 00007f8df7958000 RDI: 00000000ffffff9c [ 1149.278374][ T2911] RBP: 00007f8df7958000 R08: 0000000000000000 R09: ffffffffffffffff [ 1149.286601][ T2911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1149.294930][ T2911] R13: 0000000000000004 R14: 0000000020000298 R15: 0000000000000001 [ 1149.303242][ T2912] CPU: 0 PID: 2912 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1149.312046][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.322628][ T2912] Call Trace: [ 1149.325988][ T2912] dump_stack+0x137/0x19d [ 1149.330917][ T2912] should_fail+0x23c/0x250 [ 1149.335721][ T2912] ? skb_clone+0x12c/0x1f0 [ 1149.340381][ T2912] __should_failslab+0x81/0x90 [ 1149.345752][ T2912] should_failslab+0x5/0x20 [ 1149.350794][ T2912] kmem_cache_alloc+0x46/0x320 [ 1149.357029][ T2912] ? rhashtable_jhash2+0x13a/0x1a0 [ 1149.362586][ T2912] skb_clone+0x12c/0x1f0 [ 1149.367221][ T2912] netlink_deliver_tap+0x2a0/0x470 [ 1149.372785][ T2912] ? netlink_attachskb+0x42a/0x590 [ 1149.378050][ T2912] ? __rcu_read_unlock+0x5c/0x250 [ 1149.383417][ T2912] netlink_unicast+0x427/0x6c0 [ 1149.388536][ T2912] netlink_ack+0x63e/0x690 [ 1149.393395][ T2912] ? __rcu_read_unlock+0x5c/0x250 [ 1149.398609][ T2912] netlink_rcv_skb+0x1b7/0x240 [ 1149.403685][ T2912] ? rtnetlink_bind+0x60/0x60 [ 1149.408876][ T2912] rtnetlink_rcv+0x18/0x20 [ 1149.413959][ T2912] netlink_unicast+0x5fc/0x6c0 [ 1149.419087][ T2912] netlink_sendmsg+0x6f8/0x7c0 [ 1149.424121][ T2912] ? netlink_getsockopt+0x720/0x720 [ 1149.429384][ T2912] ____sys_sendmsg+0x360/0x4d0 [ 1149.434517][ T2912] ? import_iovec+0xb8/0xd0 [ 1149.439168][ T2912] __sys_sendmsg+0x1ed/0x270 [ 1149.444028][ T2912] ? __fsnotify_parent+0x32f/0x430 [ 1149.451130][ T2912] ? get_pid_task+0x90/0xc0 [ 1149.455650][ T2912] ? vfs_write+0x572/0x7e0 [ 1149.460170][ T2912] ? __fget_light+0x219/0x260 [ 1149.465087][ T2912] ? fput+0x2d/0x130 [ 1149.469314][ T2912] ? ksys_write+0x157/0x180 [ 1149.474170][ T2912] __x64_sys_sendmsg+0x42/0x50 [ 1149.479117][ T2912] do_syscall_64+0x39/0x80 [ 1149.483726][ T2912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1149.489642][ T2912] RIP: 0033:0x466459 [ 1149.493538][ T2912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1149.514115][ T2912] RSP: 002b:00007f6ef80a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.522866][ T2912] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1149.532393][ T2912] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1149.541431][ T2912] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1149.550065][ T2912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1149.558215][ T2912] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1149.655787][T12495] usb 2-1: new high-speed USB device number 109 using dummy_hcd 15:29:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:07 executing program 2 (fault-call:0 fault-nth:14): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:07 executing program 5 (fault-call:1 fault-nth:14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1149.750768][ T2926] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1149.755627][ T2925] FAULT_INJECTION: forcing a failure. [ 1149.755627][ T2925] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.766962][ T2926] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1149.775070][ T2925] CPU: 1 PID: 2925 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1149.786819][ T2926] FAULT_INJECTION: forcing a failure. [ 1149.786819][ T2926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1149.791932][ T2925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.791947][ T2925] Call Trace: [ 1149.791957][ T2925] dump_stack+0x137/0x19d [ 1149.823449][ T2925] should_fail+0x23c/0x250 [ 1149.827963][ T2925] ? __alloc_file+0x2e/0x1a0 [ 1149.832639][ T2925] __should_failslab+0x81/0x90 [ 1149.837398][ T2925] should_failslab+0x5/0x20 [ 1149.842152][ T2925] kmem_cache_alloc+0x46/0x320 [ 1149.846929][ T2925] __alloc_file+0x2e/0x1a0 [ 1149.851425][ T2925] alloc_empty_file+0xcd/0x1c0 [ 1149.856202][ T2925] path_openat+0x65/0x21b0 [ 1149.860925][ T2925] ? write_one_page+0x2c0/0x2c0 [ 1149.865850][ T2925] ? iov_iter_advance+0x1eb/0xa40 [ 1149.870991][ T2925] ? balance_dirty_pages_ratelimited+0xce/0x8b0 [ 1149.877399][ T2925] ? generic_perform_write+0x332/0x3a0 [ 1149.882979][ T2925] do_filp_open+0xd9/0x1f0 [ 1149.887479][ T2925] ? __virt_addr_valid+0x15a/0x1a0 [ 1149.888404][ T2929] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1149.892708][ T2925] ? __check_object_size+0x253/0x310 [ 1149.907573][ T2925] ? _raw_spin_unlock+0x22/0x40 [ 1149.912800][ T2925] ? alloc_fd+0x35d/0x3b0 [ 1149.917205][ T2925] do_sys_openat2+0xa3/0x250 [ 1149.923320][ T2925] __x64_sys_openat+0xef/0x110 [ 1149.928356][ T2925] do_syscall_64+0x39/0x80 [ 1149.932874][ T2925] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1149.939137][ T2925] RIP: 0033:0x419544 [ 1149.943194][ T2925] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1149.963469][ T2925] RSP: 002b:00007f8df7957ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1149.972233][ T2925] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 1149.980498][ T2925] RDX: 0000000000000002 RSI: 00007f8df7958000 RDI: 00000000ffffff9c [ 1149.988785][ T2925] RBP: 00007f8df7958000 R08: 0000000000000000 R09: ffffffffffffffff [ 1149.996840][ T2925] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1150.005505][ T2925] R13: 0000000000000004 R14: 0000000020000298 R15: 0000000000000001 [ 1150.013749][ T2926] CPU: 0 PID: 2926 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1150.022823][ T2926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.033828][ T2926] Call Trace: [ 1150.037288][ T2926] dump_stack+0x137/0x19d [ 1150.042048][ T2926] should_fail+0x23c/0x250 [ 1150.046654][ T2926] should_fail_usercopy+0x16/0x20 [ 1150.051944][ T2926] _copy_to_user+0x1c/0x90 [ 1150.056617][ T2926] simple_read_from_buffer+0xab/0x120 [ 1150.062210][ T2926] proc_fail_nth_read+0xf6/0x140 [ 1150.067269][ T2926] ? rw_verify_area+0x136/0x250 [ 1150.072926][ T2926] ? proc_fault_inject_write+0x200/0x200 [ 1150.079061][ T2926] vfs_read+0x154/0x5d0 [ 1150.083410][ T2926] ? __fget_light+0x219/0x260 [ 1150.088290][ T2926] ksys_read+0xce/0x180 [ 1150.092464][ T2926] __x64_sys_read+0x3e/0x50 [ 1150.096972][ T2926] do_syscall_64+0x39/0x80 [ 1150.101594][ T2926] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1150.107695][ T2926] RIP: 0033:0x4191dc [ 1150.111582][ T2926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1150.131852][ T2926] RSP: 002b:00007f6ef80a9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1150.140409][ T2926] RAX: ffffffffffffffda RBX: 0000000000000060 RCX: 00000000004191dc 15:29:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1150.148603][ T2926] RDX: 000000000000000f RSI: 00007f6ef80a91e0 RDI: 0000000000000004 [ 1150.156868][ T2926] RBP: 00007f6ef80a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.164932][ T2926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.173120][ T2926] R13: 00007ffd9ce1babf R14: 00007f6ef80a9300 R15: 0000000000022000 [ 1150.240097][ T2938] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1150.255715][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1150.405683][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1150.405719][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1150.405738][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1150.405756][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1150.525868][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1150.537186][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1150.545542][T12495] usb 2-1: Product: syz [ 1150.550576][T12495] usb 2-1: Manufacturer: syz [ 1150.556763][T12495] usb 2-1: config 0 descriptor?? [ 1150.797182][ T2913] FAULT_INJECTION: forcing a failure. [ 1150.797182][ T2913] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.810239][ T2913] CPU: 1 PID: 2913 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1150.819177][ T2913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.830097][ T2913] Call Trace: [ 1150.833401][ T2913] dump_stack+0x137/0x19d [ 1150.837951][ T2913] should_fail+0x23c/0x250 [ 1150.843185][ T2913] __should_failslab+0x81/0x90 [ 1150.848564][ T2913] ? tomoyo_encode2+0x1d3/0x350 [ 1150.854241][ T2913] should_failslab+0x5/0x20 [ 1150.859007][ T2913] __kmalloc+0x66/0x380 [ 1150.863310][ T2913] tomoyo_encode2+0x1d3/0x350 [ 1150.869554][ T2913] tomoyo_realpath_from_path+0x35e/0x3b0 [ 1150.876465][ T2913] tomoyo_check_open_permission+0xaf/0x370 [ 1150.882478][ T2913] tomoyo_file_open+0xd3/0xf0 [ 1150.887253][ T2913] security_file_open+0x3f/0x90 [ 1150.892456][ T2913] do_dentry_open+0x22d/0x890 [ 1150.898337][ T2913] vfs_open+0x43/0x50 [ 1150.903840][ T2913] path_openat+0x1982/0x21b0 [ 1150.908517][ T2913] ? aa_file_perm+0x125/0xe60 [ 1150.913287][ T2913] do_filp_open+0xd9/0x1f0 [ 1150.917972][ T2913] ? _raw_spin_unlock+0x22/0x40 [ 1150.923260][ T2913] ? alloc_fd+0x35d/0x3b0 [ 1150.927741][ T2913] do_sys_openat2+0xa3/0x250 [ 1150.932768][ T2913] __x64_sys_openat+0xef/0x110 [ 1150.938279][ T2913] do_syscall_64+0x39/0x80 [ 1150.943015][ T2913] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1150.949176][ T2913] RIP: 0033:0x419544 [ 1150.953526][ T2913] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1150.974010][ T2913] RSP: 002b:00007f770a9c3040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1150.982802][ T2913] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544 [ 1150.991345][ T2913] RDX: 0000000000000002 RSI: 00000000004be78a RDI: 00000000ffffff9c [ 1150.999705][ T2913] RBP: 00000000004be78a R08: 0000000000000000 R09: 0000000000000000 [ 1151.008810][ T2913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1151.017217][ T2913] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000022000 [ 1151.028616][ T2913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1151.036232][ T2913] udc-core: couldn't find an available UDC or it's busy [ 1151.043627][ T2913] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1151.053983][T12495] usb 2-1: USB disconnect, device number 109 15:29:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:09 executing program 2 (fault-call:0 fault-nth:15): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:09 executing program 1 (fault-call:5 fault-nth:6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1152.142633][ T2962] FAULT_INJECTION: forcing a failure. [ 1152.142633][ T2962] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.144731][ T2963] __nla_validate_parse: 2 callbacks suppressed [ 1152.144744][ T2963] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1152.168173][ T2962] CPU: 0 PID: 2962 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1152.174787][ T2959] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1152.181147][ T2962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.181162][ T2962] Call Trace: [ 1152.181172][ T2962] dump_stack+0x137/0x19d [ 1152.181198][ T2962] should_fail+0x23c/0x250 [ 1152.181218][ T2962] ? security_file_alloc+0x30/0x190 [ 1152.193233][ T2959] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1152.200978][ T2962] __should_failslab+0x81/0x90 [ 1152.201006][ T2962] should_failslab+0x5/0x20 [ 1152.201027][ T2962] kmem_cache_alloc+0x46/0x320 [ 1152.201041][ T2962] ? __alloc_file+0x2e/0x1a0 [ 1152.247888][ T2962] security_file_alloc+0x30/0x190 [ 1152.253186][ T2962] __alloc_file+0x83/0x1a0 [ 1152.258374][ T2962] alloc_empty_file+0xcd/0x1c0 [ 1152.263316][ T2962] path_openat+0x65/0x21b0 [ 1152.267721][ T2962] ? write_one_page+0x2c0/0x2c0 [ 1152.272643][ T2962] ? iov_iter_advance+0x1eb/0xa40 [ 1152.277788][ T2962] ? balance_dirty_pages_ratelimited+0xce/0x8b0 [ 1152.284128][ T2962] ? generic_perform_write+0x332/0x3a0 [ 1152.289660][ T2962] do_filp_open+0xd9/0x1f0 [ 1152.294230][ T2962] ? __virt_addr_valid+0x15a/0x1a0 [ 1152.299528][ T2962] ? __check_object_size+0x253/0x310 [ 1152.304831][ T2962] ? _raw_spin_unlock+0x22/0x40 [ 1152.309912][ T2962] ? alloc_fd+0x35d/0x3b0 [ 1152.314501][ T2962] do_sys_openat2+0xa3/0x250 [ 1152.319323][ T2962] __x64_sys_openat+0xef/0x110 [ 1152.324500][ T2962] do_syscall_64+0x39/0x80 [ 1152.329326][ T2962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1152.335754][ T2962] RIP: 0033:0x419544 [ 1152.340007][ T2962] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1152.360402][ T2962] RSP: 002b:00007f8df7957ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1152.369124][ T2962] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 1152.377260][ T2962] RDX: 0000000000000002 RSI: 00007f8df7958000 RDI: 00000000ffffff9c [ 1152.385403][ T2962] RBP: 00007f8df7958000 R08: 0000000000000000 R09: ffffffffffffffff 15:29:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1152.393849][ T2962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1152.402131][ T2962] R13: 0000000000000004 R14: 0000000020000298 R15: 0000000000000001 [ 1152.428002][ T2968] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 15:29:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:09 executing program 2 (fault-call:0 fault-nth:16): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1152.438327][ T2968] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:29:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1152.480446][ T2973] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1152.481547][ T2975] FAULT_INJECTION: forcing a failure. [ 1152.481547][ T2975] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.505672][ T2975] CPU: 1 PID: 2975 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1152.514729][ T2975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.525315][ T2975] Call Trace: [ 1152.528929][ T2975] dump_stack+0x137/0x19d [ 1152.533380][ T2975] should_fail+0x23c/0x250 [ 1152.538181][ T2975] ? __d_alloc+0x36/0x370 [ 1152.542724][ T2975] __should_failslab+0x81/0x90 [ 1152.547946][ T2975] should_failslab+0x5/0x20 [ 1152.552494][ T2975] kmem_cache_alloc+0x46/0x320 [ 1152.557270][ T2975] ? make_kuid+0x121/0x180 [ 1152.562002][ T2975] __d_alloc+0x36/0x370 [ 1152.565485][ T9746] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1152.566292][ T2975] ? generic_permission+0xfa/0x420 [ 1152.580176][ T2975] d_alloc_parallel+0x51/0xd10 [ 1152.588113][ T2975] ? __d_lookup+0x38b/0x3b0 [ 1152.592794][ T2975] path_openat+0x686/0x21b0 [ 1152.597310][ T2975] do_filp_open+0xd9/0x1f0 [ 1152.602028][ T2975] ? _raw_spin_unlock+0x22/0x40 [ 1152.607073][ T2975] ? alloc_fd+0x35d/0x3b0 [ 1152.609052][ T2980] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1152.611929][ T2975] do_sys_openat2+0xa3/0x250 [ 1152.611959][ T2975] __x64_sys_openat+0xef/0x110 [ 1152.622365][ T2980] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1152.626464][ T2975] do_syscall_64+0x39/0x80 [ 1152.626490][ T2975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1152.626518][ T2975] RIP: 0033:0x419544 [ 1152.655883][ T2975] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1152.675680][ T2975] RSP: 002b:00007f8df7957ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1152.684385][ T2975] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 1152.692459][ T2975] RDX: 0000000000000002 RSI: 00007f8df7958000 RDI: 00000000ffffff9c [ 1152.700605][ T2975] RBP: 00007f8df7958000 R08: 0000000000000000 R09: ffffffffffffffff [ 1152.708759][ T2975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1152.717007][ T2975] R13: 0000000000000004 R14: 0000000020000298 R15: 0000000000000001 [ 1152.815618][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1152.935675][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1152.944667][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1152.954036][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1152.965123][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1153.085902][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1153.095455][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1153.103939][ T9746] usb 2-1: Product: syz [ 1153.108570][ T9746] usb 2-1: Manufacturer: syz [ 1153.115669][ T9746] usb 2-1: config 0 descriptor?? 15:29:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1153.254504][ T2992] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1153.264541][ T2993] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1153.356852][ T2957] FAULT_INJECTION: forcing a failure. [ 1153.356852][ T2957] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.370555][ T2957] CPU: 1 PID: 2957 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1153.379914][ T2957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.390598][ T2957] Call Trace: [ 1153.393882][ T2957] dump_stack+0x137/0x19d [ 1153.398407][ T2957] should_fail+0x23c/0x250 [ 1153.403155][ T2957] __should_failslab+0x81/0x90 [ 1153.407995][ T2957] ? raw_open+0x58/0x1b0 [ 1153.412416][ T2957] should_failslab+0x5/0x20 [ 1153.417170][ T2957] kmem_cache_alloc_trace+0x49/0x340 [ 1153.422843][ T2957] raw_open+0x58/0x1b0 [ 1153.427045][ T2957] ? raw_ioctl+0x1870/0x1870 [ 1153.432132][ T2957] misc_open+0x264/0x2a0 [ 1153.436572][ T2957] chrdev_open+0x35f/0x3d0 [ 1153.441071][ T2957] ? cd_forget+0xe0/0xe0 [ 1153.445567][ T2957] do_dentry_open+0x530/0x890 [ 1153.450444][ T2957] vfs_open+0x43/0x50 [ 1153.454419][ T2957] path_openat+0x1982/0x21b0 [ 1153.459631][ T2957] ? aa_file_perm+0x125/0xe60 [ 1153.464611][ T2957] do_filp_open+0xd9/0x1f0 [ 1153.469815][ T2957] ? _raw_spin_unlock+0x22/0x40 [ 1153.475312][ T2957] ? alloc_fd+0x35d/0x3b0 [ 1153.479830][ T2957] do_sys_openat2+0xa3/0x250 [ 1153.485204][ T2957] __x64_sys_openat+0xef/0x110 [ 1153.490785][ T2957] do_syscall_64+0x39/0x80 [ 1153.495436][ T2957] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1153.501534][ T2957] RIP: 0033:0x419544 [ 1153.505629][ T2957] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1153.526834][ T2957] RSP: 002b:00007f770a9c3040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1153.535891][ T2957] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544 [ 1153.543963][ T2957] RDX: 0000000000000002 RSI: 00000000004be78a RDI: 00000000ffffff9c [ 1153.553721][ T2957] RBP: 00000000004be78a R08: 0000000000000000 R09: 0000000000000000 [ 1153.562475][ T2957] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1153.570795][ T2957] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000022000 [ 1153.586757][ T9746] usb 2-1: USB disconnect, device number 110 15:29:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:12 executing program 2 (fault-call:0 fault-nth:17): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:12 executing program 1 (fault-call:5 fault-nth:7): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1155.181579][ T3015] FAULT_INJECTION: forcing a failure. [ 1155.181579][ T3015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.211744][ T3015] CPU: 1 PID: 3015 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1155.220987][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.231964][ T3015] Call Trace: [ 1155.235288][ T3015] dump_stack+0x137/0x19d [ 1155.239721][ T3015] should_fail+0x23c/0x250 [ 1155.244409][ T3015] should_fail_usercopy+0x16/0x20 [ 1155.249630][ T3015] _copy_to_user+0x1c/0x90 [ 1155.254063][ T3015] simple_read_from_buffer+0xab/0x120 [ 1155.259967][ T3015] proc_fail_nth_read+0xf6/0x140 [ 1155.265007][ T3015] ? rw_verify_area+0x136/0x250 [ 1155.269981][ T3015] ? proc_fault_inject_write+0x200/0x200 [ 1155.275968][ T3015] vfs_read+0x154/0x5d0 15:29:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/18, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1155.280156][ T3015] ? __fget_light+0x219/0x260 [ 1155.284920][ T3015] ksys_read+0xce/0x180 [ 1155.289414][ T3015] __x64_sys_read+0x3e/0x50 [ 1155.294165][ T3015] do_syscall_64+0x39/0x80 [ 1155.298925][ T3015] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1155.304898][ T3015] RIP: 0033:0x4191dc [ 1155.308921][ T3015] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 15:29:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/18, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1155.329726][ T3015] RSP: 002b:00007f8df7958170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1155.338935][ T3015] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191dc [ 1155.347173][ T3015] RDX: 000000000000000f RSI: 00007f8df79581e0 RDI: 0000000000000003 [ 1155.355602][ T3015] RBP: 00007f8df79581d0 R08: 0000000000000000 R09: ffffffffffffffff [ 1155.363841][ T3015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.372379][ T3015] R13: 00007ffd857a5fbf R14: 00007f8df7958300 R15: 0000000000022000 [ 1155.485320][T11464] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1155.725221][T11464] usb 2-1: Using ep0 maxpacket: 32 [ 1155.845282][T11464] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1155.857036][T11464] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1155.866962][T11464] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1155.879487][T11464] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1156.005395][T11464] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1156.015451][T11464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1156.024123][T11464] usb 2-1: Product: syz [ 1156.028514][T11464] usb 2-1: Manufacturer: syz [ 1156.034649][T11464] usb 2-1: config 0 descriptor?? 15:29:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:13 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/18, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1156.276927][ T3017] FAULT_INJECTION: forcing a failure. [ 1156.276927][ T3017] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.310541][ T3017] CPU: 1 PID: 3017 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1156.319352][ T3017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.329668][ T3017] Call Trace: [ 1156.333362][ T3017] dump_stack+0x137/0x19d [ 1156.337709][ T3017] should_fail+0x23c/0x250 [ 1156.342316][ T3017] __should_failslab+0x81/0x90 [ 1156.347619][ T3017] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 1156.353787][ T3017] should_failslab+0x5/0x20 [ 1156.358762][ T3017] __kmalloc+0x66/0x380 [ 1156.363136][ T3017] tomoyo_realpath_from_path+0x98/0x3b0 [ 1156.368960][ T3017] tomoyo_path_number_perm+0xc1/0x2d0 [ 1156.374453][ T3017] ? kmem_cache_free+0x59/0x100 [ 1156.380277][ T3017] ? __rcu_read_unlock+0x5c/0x250 [ 1156.385807][ T3017] tomoyo_file_ioctl+0x1c/0x20 [ 1156.391549][ T3017] security_file_ioctl+0x45/0x90 [ 1156.396886][ T3017] __se_sys_ioctl+0x48/0x140 [ 1156.402047][ T3017] __x64_sys_ioctl+0x3f/0x50 [ 1156.407346][ T3017] do_syscall_64+0x39/0x80 [ 1156.412151][ T3017] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1156.418774][ T3017] RIP: 0033:0x466217 [ 1156.423601][ T3017] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.448014][ T3017] RSP: 002b:00007f770a9c30b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1156.456900][ T3017] RAX: ffffffffffffffda RBX: 00007f770a9c4130 RCX: 0000000000466217 [ 1156.465266][ T3017] RDX: 00007f770a9c4130 RSI: 0000000041015500 RDI: 0000000000000007 [ 1156.474208][ T3017] RBP: 0000000000000007 R08: 0000000000000010 R09: 00312e6364755f79 [ 1156.483344][ T3017] R10: 00007f770a9c2e57 R11: 0000000000000246 R12: 00007f770a9c3100 [ 1156.491755][ T3017] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000000868 [ 1156.507688][ T3017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1156.516379][ T3017] udc-core: couldn't find an available UDC or it's busy [ 1156.524694][ T3017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1156.536442][T11464] usb 2-1: USB disconnect, device number 111 15:29:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/19, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:15 executing program 1 (fault-call:5 fault-nth:8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/19, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1158.209965][ T3058] __nla_validate_parse: 13 callbacks suppressed [ 1158.209977][ T3058] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.228359][ T3058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.246993][ T3061] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1158.317028][ T3071] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.327198][ T3071] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.337432][ T3072] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1158.504924][T12495] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1158.764861][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1158.895047][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1158.904164][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1158.913558][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1158.924521][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1159.076264][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1159.086389][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1159.095456][T12495] usb 2-1: Product: syz [ 1159.100105][T12495] usb 2-1: Manufacturer: syz [ 1159.106345][T12495] usb 2-1: config 0 descriptor?? 15:29:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/19, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1159.332359][ T3086] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1159.343703][ T3085] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1159.363298][ T3059] FAULT_INJECTION: forcing a failure. [ 1159.363298][ T3059] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.367619][ T3085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1159.384472][ T3059] CPU: 0 PID: 3059 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1159.395064][ T3059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1159.405559][ T3059] Call Trace: [ 1159.409027][ T3059] dump_stack+0x137/0x19d [ 1159.413596][ T3059] should_fail+0x23c/0x250 [ 1159.418106][ T3059] __should_failslab+0x81/0x90 [ 1159.423516][ T3059] ? tomoyo_encode2+0x1d3/0x350 [ 1159.429105][ T3059] should_failslab+0x5/0x20 [ 1159.433993][ T3059] __kmalloc+0x66/0x380 [ 1159.438142][ T3059] tomoyo_encode2+0x1d3/0x350 [ 1159.443201][ T3059] tomoyo_realpath_from_path+0x35e/0x3b0 [ 1159.449488][ T3059] tomoyo_path_number_perm+0xc1/0x2d0 [ 1159.455067][ T3059] ? kmem_cache_free+0x59/0x100 [ 1159.460675][ T3059] ? __rcu_read_unlock+0x5c/0x250 [ 1159.466250][ T3059] tomoyo_file_ioctl+0x1c/0x20 [ 1159.471714][ T3059] security_file_ioctl+0x45/0x90 [ 1159.477003][ T3059] __se_sys_ioctl+0x48/0x140 [ 1159.481691][ T3059] __x64_sys_ioctl+0x3f/0x50 [ 1159.486485][ T3059] do_syscall_64+0x39/0x80 [ 1159.491030][ T3059] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1159.497505][ T3059] RIP: 0033:0x466217 [ 1159.501725][ T3059] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.522169][ T3059] RSP: 002b:00007f770a9c30b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.531737][ T3059] RAX: ffffffffffffffda RBX: 00007f770a9c4130 RCX: 0000000000466217 [ 1159.540703][ T3059] RDX: 00007f770a9c4130 RSI: 0000000041015500 RDI: 0000000000000007 [ 1159.549175][ T3059] RBP: 0000000000000007 R08: 0000000000000010 R09: 00312e6364755f79 [ 1159.558443][ T3059] R10: 00007f770a9c2e57 R11: 0000000000000246 R12: 00007f770a9c3100 [ 1159.566772][ T3059] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000000868 [ 1159.577766][ T3059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1159.587543][ T3059] udc-core: couldn't find an available UDC or it's busy [ 1159.594569][ T3059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1159.611993][T12495] usb 2-1: USB disconnect, device number 112 15:29:18 executing program 3 (fault-call:4 fault-nth:0): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cb", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:18 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:18 executing program 1 (fault-call:5 fault-nth:9): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1161.250603][ T3100] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1161.259255][ T3101] FAULT_INJECTION: forcing a failure. [ 1161.259255][ T3101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.279070][ T3101] CPU: 0 PID: 3101 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1161.288030][ T3101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 15:29:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1161.298438][ T3101] Call Trace: [ 1161.301907][ T3101] dump_stack+0x137/0x19d [ 1161.306373][ T3101] should_fail+0x23c/0x250 [ 1161.310890][ T3101] should_fail_usercopy+0x16/0x20 [ 1161.316230][ T3101] _copy_from_user+0x1c/0xd0 [ 1161.321047][ T3101] __copy_msghdr_from_user+0x44/0x350 [ 1161.326714][ T3101] ? __fget_light+0x219/0x260 [ 1161.331426][ T3101] __sys_sendmsg+0x135/0x270 [ 1161.336119][ T3101] ? kstrtouint_from_user+0x104/0x130 [ 1161.342024][ T3101] ? __rcu_read_unlock+0x5c/0x250 [ 1161.347281][ T3101] ? fsnotify_perm+0x59/0x2e0 [ 1161.352164][ T3101] ? __fsnotify_parent+0x32f/0x430 [ 1161.357286][ T3101] ? get_pid_task+0x90/0xc0 [ 1161.362073][ T3101] ? vfs_write+0x572/0x7e0 [ 1161.366611][ T3101] ? __fget_light+0x219/0x260 [ 1161.371332][ T3101] ? fput+0x2d/0x130 [ 1161.375402][ T3101] ? ksys_write+0x157/0x180 [ 1161.380191][ T3101] __x64_sys_sendmsg+0x42/0x50 [ 1161.385410][ T3101] do_syscall_64+0x39/0x80 [ 1161.390202][ T3101] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1161.396964][ T3101] RIP: 0033:0x466459 15:29:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1161.401229][ T3101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.424645][ T3101] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.433351][ T3101] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1161.441969][ T3101] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1161.450774][ T3101] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.459017][ T3101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.467360][ T3101] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1161.534828][ T9635] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1161.774731][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1161.894788][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1161.903851][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1161.914252][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1161.926158][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1162.054854][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1162.065840][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1162.075029][ T9635] usb 2-1: Product: syz [ 1162.079870][ T9635] usb 2-1: Manufacturer: syz [ 1162.086941][ T9635] usb 2-1: config 0 descriptor?? 15:29:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:19 executing program 3 (fault-call:4 fault-nth:1): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1162.327269][ T3104] FAULT_INJECTION: forcing a failure. [ 1162.327269][ T3104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.356434][ T3104] CPU: 1 PID: 3104 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1162.365508][ T3104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.376776][ T3104] Call Trace: [ 1162.380200][ T3104] dump_stack+0x137/0x19d [ 1162.385149][ T3104] should_fail+0x23c/0x250 [ 1162.390103][ T3104] should_fail_usercopy+0x16/0x20 [ 1162.395329][ T3104] _copy_from_user+0x1c/0xd0 [ 1162.400163][ T3104] raw_ioctl+0x2b6/0x1870 [ 1162.404728][ T3104] ? kmem_cache_free+0x59/0x100 [ 1162.409788][ T3104] ? do_vfs_ioctl+0x4f7/0xec0 [ 1162.414633][ T3104] ? tomoyo_file_ioctl+0x1c/0x20 [ 1162.419977][ T3104] ? tsan.module_ctor+0x10/0x10 [ 1162.425136][ T3104] __se_sys_ioctl+0xcb/0x140 [ 1162.430037][ T3104] __x64_sys_ioctl+0x3f/0x50 [ 1162.435100][ T3104] do_syscall_64+0x39/0x80 [ 1162.439946][ T3104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1162.446121][ T3104] RIP: 0033:0x466217 [ 1162.450408][ T3104] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.471025][ T3127] FAULT_INJECTION: forcing a failure. [ 1162.471025][ T3127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.472161][ T3104] RSP: 002b:00007f770a9c30b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.494838][ T3104] RAX: ffffffffffffffda RBX: 00007f770a9c4130 RCX: 0000000000466217 [ 1162.503309][ T3104] RDX: 00007f770a9c4130 RSI: 0000000041015500 RDI: 0000000000000007 [ 1162.511275][ T3104] RBP: 0000000000000007 R08: 0000000000000010 R09: 00312e6364755f79 15:29:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1162.519818][ T3104] R10: 00007f770a9c2e57 R11: 0000000000000246 R12: 00007f770a9c3100 [ 1162.528403][ T3104] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000000868 [ 1162.536861][ T3127] CPU: 0 PID: 3127 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1162.546471][ T3127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.549769][ T9635] usb 2-1: USB disconnect, device number 113 [ 1162.556777][ T3127] Call Trace: [ 1162.556790][ T3127] dump_stack+0x137/0x19d [ 1162.556820][ T3127] should_fail+0x23c/0x250 [ 1162.576481][ T3127] should_fail_usercopy+0x16/0x20 [ 1162.584403][ T3127] _copy_from_user+0x1c/0xd0 [ 1162.590662][ T3127] iovec_from_user+0xc4/0x2d0 [ 1162.595585][ T3127] ? __alloc_pages_nodemask+0x1a8/0x350 [ 1162.601482][ T3127] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 1162.607416][ T3127] ? should_fail+0xd6/0x250 [ 1162.612339][ T3127] __import_iovec+0x49/0x270 [ 1162.617134][ T3127] import_iovec+0xb8/0xd0 [ 1162.621912][ T3127] __sys_sendmsg+0x1ab/0x270 [ 1162.626672][ T3127] ? __rcu_read_unlock+0x5c/0x250 [ 1162.632215][ T3127] ? fsnotify_perm+0x59/0x2e0 [ 1162.637046][ T3127] ? __fsnotify_parent+0x32f/0x430 [ 1162.642586][ T3127] ? get_pid_task+0x90/0xc0 [ 1162.647194][ T3127] ? vfs_write+0x572/0x7e0 [ 1162.651816][ T3127] ? __fget_light+0x219/0x260 [ 1162.657098][ T3127] ? fput+0x2d/0x130 [ 1162.661407][ T3127] ? ksys_write+0x157/0x180 [ 1162.666476][ T3127] __x64_sys_sendmsg+0x42/0x50 [ 1162.671663][ T3127] do_syscall_64+0x39/0x80 [ 1162.676668][ T3127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1162.682987][ T3127] RIP: 0033:0x466459 [ 1162.687485][ T3127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.710196][ T3127] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.720016][ T3127] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1162.728514][ T3127] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1162.738013][ T3127] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.746184][ T3127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.755563][ T3127] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 15:29:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cb", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:21 executing program 3 (fault-call:4 fault-nth:2): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:21 executing program 1 (fault-call:5 fault-nth:10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1164.289699][ T3147] __nla_validate_parse: 11 callbacks suppressed [ 1164.289829][ T3147] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.291485][ T3148] FAULT_INJECTION: forcing a failure. [ 1164.291485][ T3148] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.299583][ T3147] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.335897][ T3148] CPU: 1 PID: 3148 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1164.345047][ T3148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.355318][ T3148] Call Trace: [ 1164.359529][ T3148] dump_stack+0x137/0x19d [ 1164.364015][ T3148] should_fail+0x23c/0x250 [ 1164.368708][ T3148] __should_failslab+0x81/0x90 [ 1164.373854][ T3148] should_failslab+0x5/0x20 [ 1164.378797][ T3148] kmem_cache_alloc_node+0x56/0x310 15:29:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1164.382288][ T3157] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.384310][ T3148] ? __alloc_skb+0xed/0x420 [ 1164.384337][ T3148] __alloc_skb+0xed/0x420 [ 1164.394549][ T3157] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.399034][ T3148] netlink_sendmsg+0x4c7/0x7c0 [ 1164.418671][ T3148] ? netlink_getsockopt+0x720/0x720 [ 1164.423974][ T3148] ____sys_sendmsg+0x360/0x4d0 [ 1164.428944][ T3148] ? import_iovec+0xb8/0xd0 [ 1164.433557][ T3148] __sys_sendmsg+0x1ed/0x270 [ 1164.438482][ T3148] ? __fsnotify_parent+0x32f/0x430 [ 1164.443861][ T3148] ? get_pid_task+0x90/0xc0 [ 1164.448612][ T3148] ? vfs_write+0x572/0x7e0 [ 1164.453653][ T3148] ? __fget_light+0x219/0x260 [ 1164.458463][ T3148] ? fput+0x2d/0x130 [ 1164.462724][ T3148] ? ksys_write+0x157/0x180 [ 1164.467732][ T3148] __x64_sys_sendmsg+0x42/0x50 [ 1164.472922][ T3148] do_syscall_64+0x39/0x80 [ 1164.477623][ T3148] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1164.483594][ T3148] RIP: 0033:0x466459 [ 1164.487487][ T3148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.508225][ T3148] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.516734][ T3148] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1164.524929][ T3148] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1164.533178][ T3148] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.535890][ T3162] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.542066][ T3148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.542082][ T3148] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1164.569644][ T3162] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.694363][ T9634] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1164.934561][ T9634] usb 2-1: Using ep0 maxpacket: 32 [ 1165.065761][ T9634] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1165.074760][ T9634] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1165.083895][ T9634] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1165.095056][ T9634] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1165.226221][ T9634] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1165.236389][ T9634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1165.245579][ T9634] usb 2-1: Product: syz [ 1165.250015][ T9634] usb 2-1: Manufacturer: syz [ 1165.255609][ T9634] usb 2-1: config 0 descriptor?? 15:29:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:22 executing program 3 (fault-call:4 fault-nth:3): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1165.391760][ T3175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1165.401423][ T3176] FAULT_INJECTION: forcing a failure. [ 1165.401423][ T3176] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.411359][ T3175] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1165.416727][ T3176] CPU: 1 PID: 3176 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1165.433288][ T3176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.443453][ T3176] Call Trace: [ 1165.446829][ T3176] dump_stack+0x137/0x19d [ 1165.451447][ T3176] should_fail+0x23c/0x250 [ 1165.456136][ T3176] __should_failslab+0x81/0x90 [ 1165.460908][ T3176] should_failslab+0x5/0x20 [ 1165.465642][ T3176] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1165.471544][ T3176] ? __kmalloc_node_track_caller+0x30/0x40 [ 1165.477420][ T3176] __kmalloc_node_track_caller+0x30/0x40 [ 1165.483428][ T3176] ? netlink_sendmsg+0x4c7/0x7c0 [ 1165.488367][ T3176] __alloc_skb+0x187/0x420 [ 1165.493160][ T3176] netlink_sendmsg+0x4c7/0x7c0 [ 1165.498283][ T3176] ? netlink_getsockopt+0x720/0x720 [ 1165.503827][ T3176] ____sys_sendmsg+0x360/0x4d0 [ 1165.508869][ T3176] ? import_iovec+0xb8/0xd0 [ 1165.513539][ T3176] __sys_sendmsg+0x1ed/0x270 [ 1165.518348][ T3176] ? __fsnotify_parent+0x32f/0x430 [ 1165.523770][ T3176] ? get_pid_task+0x90/0xc0 [ 1165.528782][ T3176] ? vfs_write+0x572/0x7e0 [ 1165.533875][ T3176] ? __fget_light+0x219/0x260 [ 1165.538821][ T3176] ? fput+0x2d/0x130 [ 1165.543014][ T3176] ? ksys_write+0x157/0x180 [ 1165.547973][ T3176] __x64_sys_sendmsg+0x42/0x50 [ 1165.553148][ T3176] do_syscall_64+0x39/0x80 [ 1165.557799][ T3176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1165.563761][ T3176] RIP: 0033:0x466459 [ 1165.567891][ T3176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1165.590924][ T3176] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.600005][ T3176] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1165.608445][ T3176] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1165.616738][ T3176] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.624872][ T3176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.632989][ T3176] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1165.647383][ T3151] FAULT_INJECTION: forcing a failure. [ 1165.647383][ T3151] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.662662][ T3151] CPU: 1 PID: 3151 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1165.671481][ T3151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.681917][ T3151] Call Trace: [ 1165.685232][ T3151] dump_stack+0x137/0x19d [ 1165.690006][ T3151] should_fail+0x23c/0x250 [ 1165.694623][ T3151] __should_failslab+0x81/0x90 [ 1165.699653][ T3151] ? raw_ioctl+0xf7c/0x1870 [ 1165.704529][ T3151] should_failslab+0x5/0x20 [ 1165.709529][ T3151] kmem_cache_alloc_trace+0x49/0x340 [ 1165.714916][ T3151] raw_ioctl+0xf7c/0x1870 [ 1165.719586][ T3151] ? tsan.module_ctor+0x10/0x10 [ 1165.724533][ T3151] __se_sys_ioctl+0xcb/0x140 [ 1165.729392][ T3151] __x64_sys_ioctl+0x3f/0x50 [ 1165.734166][ T3151] do_syscall_64+0x39/0x80 [ 1165.738931][ T3151] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1165.745104][ T3151] RIP: 0033:0x466217 [ 1165.749369][ T3151] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1165.769963][ T3151] RSP: 002b:00007f770a9c30b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.779176][ T3151] RAX: ffffffffffffffda RBX: 00007f770a9c4130 RCX: 0000000000466217 [ 1165.787774][ T3151] RDX: 00007f770a9c4130 RSI: 0000000041015500 RDI: 0000000000000007 [ 1165.796476][ T3151] RBP: 0000000000000007 R08: 0000000000000010 R09: 00312e6364755f79 [ 1165.804870][ T3151] R10: 00007f770a9c2e57 R11: 0000000000000246 R12: 00007f770a9c3100 [ 1165.813679][ T3151] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000000868 [ 1165.824639][ T9635] usb 2-1: USB disconnect, device number 114 15:29:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cb", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xb, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:24 executing program 3 (fault-call:4 fault-nth:4): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:24 executing program 1 (fault-call:5 fault-nth:11): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1167.305931][ T3192] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.326440][ T3195] FAULT_INJECTION: forcing a failure. [ 1167.326440][ T3195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.333084][ T3192] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.351435][ T3195] CPU: 1 PID: 3195 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1167.360475][ T3195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.370620][ T3195] Call Trace: [ 1167.374269][ T3195] dump_stack+0x137/0x19d [ 1167.378619][ T3195] should_fail+0x23c/0x250 [ 1167.383242][ T3195] should_fail_usercopy+0x16/0x20 [ 1167.389582][ T3195] _copy_from_iter_full+0x11f/0x5f0 [ 1167.394882][ T3195] ? __virt_addr_valid+0x15a/0x1a0 [ 1167.400487][ T3195] ? __check_object_size+0x253/0x310 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1167.406217][ T3195] netlink_sendmsg+0x579/0x7c0 [ 1167.411081][ T3195] ? netlink_getsockopt+0x720/0x720 [ 1167.416285][ T3195] ____sys_sendmsg+0x360/0x4d0 [ 1167.421173][ T3195] ? import_iovec+0xb8/0xd0 [ 1167.425816][ T3195] __sys_sendmsg+0x1ed/0x270 [ 1167.430618][ T3195] ? __fsnotify_parent+0x32f/0x430 [ 1167.435958][ T3195] ? get_pid_task+0x90/0xc0 [ 1167.440594][ T3195] ? vfs_write+0x572/0x7e0 [ 1167.445281][ T3195] ? __fget_light+0x219/0x260 [ 1167.450021][ T3195] ? fput+0x2d/0x130 [ 1167.453938][ T3195] ? ksys_write+0x157/0x180 [ 1167.458719][ T3195] __x64_sys_sendmsg+0x42/0x50 [ 1167.463719][ T3195] do_syscall_64+0x39/0x80 [ 1167.468253][ T3195] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1167.474197][ T3195] RIP: 0033:0x466459 [ 1167.478301][ T3195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1167.500585][ T3195] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.509198][ T3195] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1167.517441][ T3195] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1167.525600][ T3195] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.533693][ T3195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.541871][ T3195] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1167.714083][ T9635] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1167.995166][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1168.144074][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1168.153209][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1168.163480][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1168.174493][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 15:29:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xd, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:25 executing program 3 (fault-call:4 fault-nth:5): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1168.315618][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1168.324899][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1168.333381][ T9635] usb 2-1: Product: syz [ 1168.339309][ T9635] usb 2-1: Manufacturer: syz [ 1168.345560][ T9635] usb 2-1: config 0 descriptor?? 15:29:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xe, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1168.417540][ T3215] FAULT_INJECTION: forcing a failure. [ 1168.417540][ T3215] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.433020][ T3215] CPU: 1 PID: 3215 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1168.442116][ T3215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.452302][ T3215] Call Trace: [ 1168.455586][ T3215] dump_stack+0x137/0x19d [ 1168.459930][ T3215] should_fail+0x23c/0x250 [ 1168.464723][ T3215] ? skb_clone+0x12c/0x1f0 [ 1168.469152][ T3215] __should_failslab+0x81/0x90 [ 1168.473993][ T3215] should_failslab+0x5/0x20 [ 1168.478650][ T3215] kmem_cache_alloc+0x46/0x320 [ 1168.483503][ T3215] ? rhashtable_jhash2+0x13a/0x1a0 [ 1168.488902][ T3215] skb_clone+0x12c/0x1f0 [ 1168.493284][ T3215] netlink_deliver_tap+0x2a0/0x470 [ 1168.498437][ T3215] ? __rcu_read_unlock+0x5c/0x250 [ 1168.503499][ T3215] netlink_unicast+0x5de/0x6c0 [ 1168.508293][ T3215] netlink_sendmsg+0x6f8/0x7c0 [ 1168.513181][ T3215] ? netlink_getsockopt+0x720/0x720 [ 1168.518397][ T3215] ____sys_sendmsg+0x360/0x4d0 [ 1168.523316][ T3215] ? import_iovec+0xb8/0xd0 [ 1168.528052][ T3215] __sys_sendmsg+0x1ed/0x270 [ 1168.532762][ T3215] ? __fsnotify_parent+0x32f/0x430 [ 1168.538069][ T3215] ? get_pid_task+0x90/0xc0 [ 1168.542574][ T3215] ? vfs_write+0x572/0x7e0 [ 1168.547131][ T3215] ? __fget_light+0x219/0x260 [ 1168.552144][ T3215] ? fput+0x2d/0x130 [ 1168.556130][ T3215] ? ksys_write+0x157/0x180 [ 1168.560796][ T3215] __x64_sys_sendmsg+0x42/0x50 [ 1168.565948][ T3215] do_syscall_64+0x39/0x80 [ 1168.571155][ T3215] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1168.577426][ T3215] RIP: 0033:0x466459 [ 1168.584353][ T3215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.604943][ T3215] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.613484][ T3215] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1168.621900][ T3215] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1168.630220][ T3215] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.638629][ T3215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.646590][ T3215] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1168.659248][ T3196] FAULT_INJECTION: forcing a failure. [ 1168.659248][ T3196] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.681941][ T3196] CPU: 1 PID: 3196 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1168.690763][ T3196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.701650][ T3196] Call Trace: [ 1168.705223][ T3196] dump_stack+0x137/0x19d [ 1168.709660][ T3196] should_fail+0x23c/0x250 [ 1168.714085][ T3196] __should_failslab+0x81/0x90 [ 1168.719568][ T3196] ? raw_ioctl+0xfd2/0x1870 [ 1168.724386][ T3196] should_failslab+0x5/0x20 [ 1168.729240][ T3196] kmem_cache_alloc_trace+0x49/0x340 [ 1168.734599][ T3196] ? raw_ioctl+0xf7c/0x1870 [ 1168.739148][ T3196] ? strscpy+0x12f/0x160 [ 1168.743399][ T3196] raw_ioctl+0xfd2/0x1870 [ 1168.747816][ T3196] ? tsan.module_ctor+0x10/0x10 [ 1168.752657][ T3196] __se_sys_ioctl+0xcb/0x140 [ 1168.757337][ T3196] __x64_sys_ioctl+0x3f/0x50 [ 1168.762019][ T3196] do_syscall_64+0x39/0x80 [ 1168.766510][ T3196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1168.772567][ T3196] RIP: 0033:0x466217 [ 1168.776722][ T3196] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.796846][ T3196] RSP: 002b:00007f770a9c30b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.805333][ T3196] RAX: ffffffffffffffda RBX: 00007f770a9c4130 RCX: 0000000000466217 [ 1168.814096][ T3196] RDX: 00007f770a9c4130 RSI: 0000000041015500 RDI: 0000000000000007 [ 1168.822465][ T3196] RBP: 0000000000000007 R08: 0000000000000010 R09: 00312e6364755f79 [ 1168.830733][ T3196] R10: 00007f770a9c2e57 R11: 0000000000000246 R12: 00007f770a9c3100 [ 1168.839279][ T3196] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000000868 [ 1168.850741][ T9635] usb 2-1: USB disconnect, device number 115 15:29:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa66", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:27 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x10, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:27 executing program 3 (fault-call:4 fault-nth:6): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:27 executing program 1 (fault-call:5 fault-nth:12): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:27 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x11, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1170.357465][ T3240] __nla_validate_parse: 4 callbacks suppressed [ 1170.357479][ T3240] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1170.380302][ T3240] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1170.392405][ T3244] FAULT_INJECTION: forcing a failure. [ 1170.392405][ T3244] name failslab, interval 1, probability 0, space 0, times 0 15:29:27 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x12, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1170.409198][ T3244] CPU: 1 PID: 3244 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1170.418342][ T3244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.428665][ T3244] Call Trace: [ 1170.432855][ T3244] dump_stack+0x137/0x19d [ 1170.437306][ T3244] should_fail+0x23c/0x250 [ 1170.441858][ T3244] __should_failslab+0x81/0x90 [ 1170.446825][ T3244] should_failslab+0x5/0x20 [ 1170.451528][ T3244] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1170.457616][ T3244] ? __kmalloc_node+0x30/0x40 [ 1170.462347][ T3244] __kmalloc_node+0x30/0x40 [ 1170.467149][ T3244] qdisc_alloc+0x5b/0x350 [ 1170.471663][ T3244] ? nla_strcmp+0x9b/0xb0 [ 1170.476085][ T3244] qdisc_create+0x111/0xdd0 [ 1170.480754][ T3244] ? __nla_parse+0x3c/0x50 [ 1170.485177][ T3244] tc_modify_qdisc+0x5e6/0x10a0 [ 1170.490601][ T3244] ? qdisc_offload_graft_helper+0x190/0x190 [ 1170.496695][ T3244] rtnetlink_rcv_msg+0x728/0x7c0 [ 1170.501731][ T3244] ? ___cache_free+0x3c/0x2f0 [ 1170.506593][ T3244] ? skb_network_protocol+0x144/0x340 [ 1170.512165][ T3244] ? __kfree_skb+0xfe/0x150 [ 1170.516677][ T3244] ? kmem_cache_free+0x59/0x100 [ 1170.521529][ T3244] ? __kfree_skb+0xfe/0x150 [ 1170.526259][ T3244] ? consume_skb+0x4b/0x160 [ 1170.531707][ T3244] ? nlmon_xmit+0x47/0x50 [ 1170.536136][ T3244] ? xmit_one+0x173/0x2e0 [ 1170.540624][ T3244] ? local_bh_enable+0x1b/0x20 [ 1170.545653][ T3244] ? __dev_queue_xmit+0xc25/0x1580 [ 1170.551563][ T3244] ? __skb_clone+0x2b9/0x2d0 [ 1170.556659][ T3244] ? __rcu_read_unlock+0x5c/0x250 [ 1170.562155][ T3244] netlink_rcv_skb+0x13e/0x240 [ 1170.567175][ T3244] ? rtnetlink_bind+0x60/0x60 [ 1170.572139][ T3244] rtnetlink_rcv+0x18/0x20 [ 1170.577079][ T3244] netlink_unicast+0x5fc/0x6c0 [ 1170.584318][ T3244] netlink_sendmsg+0x6f8/0x7c0 [ 1170.589189][ T3244] ? netlink_getsockopt+0x720/0x720 [ 1170.594564][ T3244] ____sys_sendmsg+0x360/0x4d0 [ 1170.599350][ T3244] ? import_iovec+0xb8/0xd0 [ 1170.603956][ T3244] __sys_sendmsg+0x1ed/0x270 [ 1170.608541][ T3244] ? __fsnotify_parent+0x32f/0x430 [ 1170.613873][ T3244] ? get_pid_task+0x90/0xc0 [ 1170.618501][ T3244] ? vfs_write+0x572/0x7e0 [ 1170.623085][ T3244] ? __fget_light+0x219/0x260 [ 1170.628381][ T3244] ? fput+0x2d/0x130 [ 1170.632488][ T3244] ? ksys_write+0x157/0x180 [ 1170.637009][ T3244] __x64_sys_sendmsg+0x42/0x50 [ 1170.642312][ T3244] do_syscall_64+0x39/0x80 [ 1170.646731][ T3244] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1170.652862][ T3244] RIP: 0033:0x466459 [ 1170.656998][ T3244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1170.677318][ T3244] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.685717][ T3244] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1170.694089][ T3244] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1170.702813][ T3244] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.711165][ T3244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.719444][ T3244] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1170.873806][ T9635] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1171.123868][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1171.243939][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1171.252601][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1171.262168][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1171.273451][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 15:29:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x18, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:28 executing program 3 (fault-call:4 fault-nth:7): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1171.405021][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1171.418963][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1171.440443][ T9635] usb 2-1: Product: syz 15:29:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1171.451786][ T3257] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1171.451894][ T9635] usb 2-1: Manufacturer: syz [ 1171.461851][ T3257] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1171.475603][ T3260] FAULT_INJECTION: forcing a failure. [ 1171.475603][ T3260] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.494647][ T3260] CPU: 0 PID: 3260 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1171.503770][ T3260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.506687][ T9635] usb 2-1: config 0 descriptor?? [ 1171.513997][ T3260] Call Trace: [ 1171.522597][ T3260] dump_stack+0x137/0x19d [ 1171.527031][ T3260] should_fail+0x23c/0x250 [ 1171.531726][ T3260] __should_failslab+0x81/0x90 [ 1171.536546][ T3260] should_failslab+0x5/0x20 [ 1171.541082][ T3260] kmem_cache_alloc_node+0x56/0x310 [ 1171.546856][ T3260] ? consume_skb+0x4b/0x160 [ 1171.551492][ T3260] ? __alloc_skb+0xed/0x420 [ 1171.556086][ T3260] __alloc_skb+0xed/0x420 [ 1171.560507][ T3260] netlink_ack+0x292/0x690 [ 1171.565147][ T3260] ? __rcu_read_unlock+0x5c/0x250 [ 1171.570303][ T3260] netlink_rcv_skb+0x1b7/0x240 [ 1171.575079][ T3260] ? rtnetlink_bind+0x60/0x60 [ 1171.580491][ T3260] rtnetlink_rcv+0x18/0x20 [ 1171.588272][ T3260] netlink_unicast+0x5fc/0x6c0 [ 1171.593118][ T3260] netlink_sendmsg+0x6f8/0x7c0 [ 1171.597003][ T3268] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1171.597891][ T3260] ? netlink_getsockopt+0x720/0x720 [ 1171.607550][ T3268] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1171.612827][ T3260] ____sys_sendmsg+0x360/0x4d0 [ 1171.612859][ T3260] ? import_iovec+0xb8/0xd0 [ 1171.612880][ T3260] __sys_sendmsg+0x1ed/0x270 [ 1171.636996][ T3260] ? __fsnotify_parent+0x32f/0x430 [ 1171.642504][ T3260] ? get_pid_task+0x90/0xc0 [ 1171.647448][ T3260] ? vfs_write+0x572/0x7e0 [ 1171.652086][ T3260] ? __fget_light+0x219/0x260 [ 1171.656768][ T3260] ? fput+0x2d/0x130 [ 1171.660736][ T3260] ? ksys_write+0x157/0x180 [ 1171.665274][ T3260] __x64_sys_sendmsg+0x42/0x50 [ 1171.670536][ T3260] do_syscall_64+0x39/0x80 [ 1171.675062][ T3260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1171.681040][ T3260] RIP: 0033:0x466459 [ 1171.685466][ T3260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1171.705506][ T3260] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.714248][ T3260] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1171.722802][ T3260] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1171.730931][ T3260] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.739361][ T3260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.747356][ T3260] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1171.997098][ T3242] FAULT_INJECTION: forcing a failure. [ 1171.997098][ T3242] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.011360][ T3242] CPU: 1 PID: 3242 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1172.020943][ T3242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.032771][ T3242] Call Trace: [ 1172.036593][ T3242] dump_stack+0x137/0x19d [ 1172.041108][ T3242] should_fail+0x23c/0x250 [ 1172.045879][ T3242] __should_failslab+0x81/0x90 [ 1172.052238][ T3242] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 1172.058132][ T3242] should_failslab+0x5/0x20 [ 1172.062920][ T3242] __kmalloc+0x66/0x380 [ 1172.067367][ T3242] tomoyo_realpath_from_path+0x98/0x3b0 [ 1172.073282][ T3242] tomoyo_path_number_perm+0xc1/0x2d0 [ 1172.079057][ T3242] ? kmem_cache_alloc_trace+0x1c6/0x340 [ 1172.084877][ T3242] ? raw_ioctl+0xfd2/0x1870 [ 1172.089487][ T3242] ? __rcu_read_unlock+0x5c/0x250 [ 1172.094665][ T3242] tomoyo_file_ioctl+0x1c/0x20 [ 1172.099850][ T3242] security_file_ioctl+0x45/0x90 [ 1172.105405][ T3242] __se_sys_ioctl+0x48/0x140 [ 1172.110179][ T3242] __x64_sys_ioctl+0x3f/0x50 [ 1172.114859][ T3242] do_syscall_64+0x39/0x80 [ 1172.119717][ T3242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1172.125747][ T3242] RIP: 0033:0x466217 [ 1172.130205][ T3242] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.152202][ T3242] RSP: 002b:00007f770a9c30b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1172.161264][ T3242] RAX: ffffffffffffffda RBX: 00007f770a9c4130 RCX: 0000000000466217 [ 1172.169933][ T3242] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 1172.177937][ T3242] RBP: 0000000000000007 R08: 0000000000000010 R09: 00312e6364755f79 [ 1172.186610][ T3242] R10: 00007f770a9c2e57 R11: 0000000000000246 R12: 0000000000000000 [ 1172.195505][ T3242] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000000868 [ 1172.206429][ T3242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1172.213389][ T3242] udc-core: couldn't find an available UDC or it's busy [ 1172.221055][ T3242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1172.232718][ T9635] usb 2-1: USB disconnect, device number 116 15:29:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa66", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:30 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x25, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb00, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:30 executing program 3 (fault-call:4 fault-nth:8): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:30 executing program 1 (fault-call:5 fault-nth:13): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:30 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x5c, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1173.363461][ T3281] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.381982][ T3281] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.395721][ T3282] FAULT_INJECTION: forcing a failure. [ 1173.395721][ T3282] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.423683][ T3282] CPU: 1 PID: 3282 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1173.432525][ T3282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.443572][ T3282] Call Trace: [ 1173.446854][ T3282] dump_stack+0x137/0x19d [ 1173.451476][ T3282] should_fail+0x23c/0x250 [ 1173.456087][ T3282] __should_failslab+0x81/0x90 [ 1173.461075][ T3282] should_failslab+0x5/0x20 [ 1173.465780][ T3282] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1173.471520][ T3282] ? __kmalloc_node_track_caller+0x30/0x40 [ 1173.471623][ T3292] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.477749][ T3282] __kmalloc_node_track_caller+0x30/0x40 [ 1173.477775][ T3282] ? netlink_ack+0x292/0x690 [ 1173.477800][ T3282] __alloc_skb+0x187/0x420 [ 1173.497530][ T3292] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.497872][ T3282] netlink_ack+0x292/0x690 [ 1173.517324][ T3282] ? __rcu_read_unlock+0x5c/0x250 [ 1173.522535][ T3282] netlink_rcv_skb+0x1b7/0x240 [ 1173.527310][ T3282] ? rtnetlink_bind+0x60/0x60 [ 1173.532016][ T3282] rtnetlink_rcv+0x18/0x20 [ 1173.536523][ T3282] netlink_unicast+0x5fc/0x6c0 [ 1173.541492][ T3282] netlink_sendmsg+0x6f8/0x7c0 [ 1173.546718][ T3282] ? netlink_getsockopt+0x720/0x720 [ 1173.552909][ T3282] ____sys_sendmsg+0x360/0x4d0 [ 1173.558133][ T3282] ? import_iovec+0xb8/0xd0 [ 1173.562645][ T3282] __sys_sendmsg+0x1ed/0x270 [ 1173.567427][ T3282] ? __fsnotify_parent+0x32f/0x430 [ 1173.572603][ T3282] ? get_pid_task+0x90/0xc0 [ 1173.577942][ T3282] ? vfs_write+0x572/0x7e0 [ 1173.583627][ T3282] ? __fget_light+0x219/0x260 [ 1173.588987][ T3282] ? fput+0x2d/0x130 [ 1173.593089][ T3282] ? ksys_write+0x157/0x180 [ 1173.598205][ T3282] __x64_sys_sendmsg+0x42/0x50 [ 1173.602967][ T3282] do_syscall_64+0x39/0x80 [ 1173.607554][ T3282] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1173.613521][ T3282] RIP: 0033:0x466459 [ 1173.617506][ T3282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1173.638943][ T3282] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.647778][ T3282] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1173.656091][ T3282] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1173.665009][ T3282] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.673216][ T3282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.681199][ T3282] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1173.683548][T11464] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1173.963541][T11464] usb 2-1: Using ep0 maxpacket: 32 [ 1174.083559][T11464] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1174.092473][T11464] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1174.102401][T11464] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1174.113171][T11464] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1174.234603][T11464] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1174.244598][T11464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1174.253074][T11464] usb 2-1: Product: syz [ 1174.258156][T11464] usb 2-1: Manufacturer: syz [ 1174.263914][T11464] usb 2-1: config 0 descriptor?? 15:29:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfe, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd00, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:31 executing program 3 (fault-call:4 fault-nth:9): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x204, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1174.472301][ T3306] FAULT_INJECTION: forcing a failure. [ 1174.472301][ T3306] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.501793][ T3306] CPU: 1 PID: 3306 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1174.511222][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.521867][ T3306] Call Trace: [ 1174.525157][ T3306] dump_stack+0x137/0x19d [ 1174.529997][ T3306] should_fail+0x23c/0x250 [ 1174.534542][ T3306] ? skb_clone+0x12c/0x1f0 [ 1174.539212][ T3306] __should_failslab+0x81/0x90 [ 1174.544359][ T3306] should_failslab+0x5/0x20 [ 1174.549439][ T3306] kmem_cache_alloc+0x46/0x320 [ 1174.554812][ T3306] ? rhashtable_jhash2+0x13a/0x1a0 [ 1174.560770][ T3306] skb_clone+0x12c/0x1f0 [ 1174.565220][ T3306] netlink_deliver_tap+0x2a0/0x470 [ 1174.571188][ T3306] ? netlink_attachskb+0x42a/0x590 [ 1174.576329][ T3306] ? __rcu_read_unlock+0x5c/0x250 [ 1174.582967][ T3306] netlink_unicast+0x427/0x6c0 [ 1174.587934][ T3306] netlink_ack+0x63e/0x690 [ 1174.593293][ T3306] ? __rcu_read_unlock+0x5c/0x250 [ 1174.598937][ T3306] netlink_rcv_skb+0x1b7/0x240 [ 1174.603699][ T3306] ? rtnetlink_bind+0x60/0x60 [ 1174.608614][ T3306] rtnetlink_rcv+0x18/0x20 [ 1174.613242][ T3306] netlink_unicast+0x5fc/0x6c0 [ 1174.617999][ T3306] netlink_sendmsg+0x6f8/0x7c0 [ 1174.622923][ T3306] ? netlink_getsockopt+0x720/0x720 [ 1174.628139][ T3306] ____sys_sendmsg+0x360/0x4d0 [ 1174.632932][ T3306] ? import_iovec+0xb8/0xd0 [ 1174.637552][ T3306] __sys_sendmsg+0x1ed/0x270 [ 1174.642134][ T3306] ? __fsnotify_parent+0x32f/0x430 [ 1174.647232][ T3306] ? get_pid_task+0x90/0xc0 [ 1174.651818][ T3306] ? vfs_write+0x572/0x7e0 [ 1174.656317][ T3306] ? __fget_light+0x219/0x260 [ 1174.660988][ T3306] ? fput+0x2d/0x130 [ 1174.664966][ T3306] ? ksys_write+0x157/0x180 [ 1174.669552][ T3306] __x64_sys_sendmsg+0x42/0x50 [ 1174.674394][ T3306] do_syscall_64+0x39/0x80 [ 1174.678797][ T3306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1174.684853][ T3306] RIP: 0033:0x466459 [ 1174.688828][ T3306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.710597][ T3306] RSP: 002b:00007f85c64a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.719149][ T3306] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1174.727319][ T3306] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1174.735719][ T3306] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.743827][ T3306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.752417][ T3306] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1174.768803][ T3285] FAULT_INJECTION: forcing a failure. [ 1174.768803][ T3285] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.782126][ T3285] CPU: 1 PID: 3285 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1174.791267][ T3285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.801529][ T3285] Call Trace: [ 1174.804893][ T3285] dump_stack+0x137/0x19d [ 1174.809366][ T3285] should_fail+0x23c/0x250 [ 1174.814085][ T3285] __should_failslab+0x81/0x90 [ 1174.819141][ T3285] ? tomoyo_encode2+0x1d3/0x350 [ 1174.824371][ T3285] should_failslab+0x5/0x20 [ 1174.828882][ T3285] __kmalloc+0x66/0x380 [ 1174.833224][ T3285] tomoyo_encode2+0x1d3/0x350 [ 1174.838041][ T3285] tomoyo_realpath_from_path+0x35e/0x3b0 [ 1174.843908][ T3285] tomoyo_path_number_perm+0xc1/0x2d0 [ 1174.849611][ T3285] ? kmem_cache_alloc_trace+0x1c6/0x340 [ 1174.855228][ T3285] ? raw_ioctl+0xfd2/0x1870 [ 1174.860083][ T3285] ? __rcu_read_unlock+0x5c/0x250 [ 1174.865577][ T3285] tomoyo_file_ioctl+0x1c/0x20 [ 1174.870786][ T3285] security_file_ioctl+0x45/0x90 [ 1174.875720][ T3285] __se_sys_ioctl+0x48/0x140 [ 1174.881373][ T3285] __x64_sys_ioctl+0x3f/0x50 [ 1174.886112][ T3285] do_syscall_64+0x39/0x80 [ 1174.890902][ T3285] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1174.897027][ T3285] RIP: 0033:0x466217 [ 1174.901175][ T3285] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.921884][ T3285] RSP: 002b:00007f770a9c30b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.930579][ T3285] RAX: ffffffffffffffda RBX: 00007f770a9c4130 RCX: 0000000000466217 [ 1174.939151][ T3285] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 1174.947303][ T3285] RBP: 0000000000000007 R08: 0000000000000010 R09: 00312e6364755f79 [ 1174.955544][ T3285] R10: 00007f770a9c2e57 R11: 0000000000000246 R12: 0000000000000000 [ 1174.963725][ T3285] R13: 0000000000000000 R14: 00000000200000c0 R15: 0000000000000868 [ 1174.975029][ T3285] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1174.981996][ T3285] udc-core: couldn't find an available UDC or it's busy [ 1174.989984][ T3285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1174.999479][ T9635] usb 2-1: USB disconnect, device number 117 [ 1175.863757][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1175.870773][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 15:29:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa66", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:33 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x300, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:33 executing program 3 (fault-call:4 fault-nth:10): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:33 executing program 1 (fault-call:5 fault-nth:14): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:33 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x402, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1176.406795][ T3325] __nla_validate_parse: 2 callbacks suppressed [ 1176.406810][ T3325] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1176.436953][ T3325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1176.447894][ T3327] FAULT_INJECTION: forcing a failure. 15:29:33 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x406, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1176.447894][ T3327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.461897][ T3327] CPU: 1 PID: 3327 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1176.470777][ T3327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.481107][ T3327] Call Trace: [ 1176.484598][ T3327] dump_stack+0x137/0x19d [ 1176.489093][ T3327] should_fail+0x23c/0x250 [ 1176.493643][ T3327] should_fail_usercopy+0x16/0x20 [ 1176.498758][ T3327] _copy_to_user+0x1c/0x90 [ 1176.503361][ T3327] simple_read_from_buffer+0xab/0x120 [ 1176.508913][ T3327] proc_fail_nth_read+0xf6/0x140 [ 1176.514206][ T3327] ? rw_verify_area+0x136/0x250 [ 1176.519247][ T3327] ? proc_fault_inject_write+0x200/0x200 [ 1176.525161][ T3327] vfs_read+0x154/0x5d0 [ 1176.529874][ T3327] ? __fget_light+0x219/0x260 [ 1176.534795][ T3327] ksys_read+0xce/0x180 [ 1176.539185][ T3327] __x64_sys_read+0x3e/0x50 [ 1176.543939][ T3327] do_syscall_64+0x39/0x80 [ 1176.548475][ T3327] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1176.554396][ T3327] RIP: 0033:0x4191dc [ 1176.559188][ T3327] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1176.579760][ T3327] RSP: 002b:00007f85c64a5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1176.589662][ T3327] RAX: ffffffffffffffda RBX: 000000000000018c RCX: 00000000004191dc [ 1176.597947][ T3327] RDX: 000000000000000f RSI: 00007f85c64a51e0 RDI: 0000000000000005 [ 1176.606061][ T3327] RBP: 00007f85c64a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.614196][ T3327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1176.622473][ T3327] R13: 00007fffa5b443bf R14: 00007f85c64a5300 R15: 0000000000022000 [ 1176.783275][ T9635] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1177.033254][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1177.193603][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1177.202572][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1177.212066][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1177.223305][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1177.363402][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1177.372734][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1177.381682][ T9635] usb 2-1: Product: syz [ 1177.386457][ T9635] usb 2-1: Manufacturer: syz [ 1177.391902][ T9635] usb 2-1: config 0 descriptor?? 15:29:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x500, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:34 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x600, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1177.496752][ T3346] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1177.506691][ T3346] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1177.635294][ T3328] udc-core: couldn't find an available UDC or it's busy [ 1177.643711][ T3328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1177.651588][ T3328] FAULT_INJECTION: forcing a failure. [ 1177.651588][ T3328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.665409][ T3328] CPU: 1 PID: 3328 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 1177.674920][ T3328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.685580][ T3328] Call Trace: [ 1177.689064][ T3328] dump_stack+0x137/0x19d [ 1177.693936][ T3328] should_fail+0x23c/0x250 [ 1177.698586][ T3328] should_fail_usercopy+0x16/0x20 [ 1177.703760][ T3328] _copy_to_user+0x1c/0x90 [ 1177.708171][ T3328] simple_read_from_buffer+0xab/0x120 [ 1177.714034][ T3328] proc_fail_nth_read+0xf6/0x140 [ 1177.720015][ T3328] ? rw_verify_area+0x136/0x250 [ 1177.725353][ T3328] ? proc_fault_inject_write+0x200/0x200 [ 1177.731357][ T3328] vfs_read+0x154/0x5d0 [ 1177.735727][ T3328] ? __fget_light+0x219/0x260 [ 1177.740777][ T3328] ksys_read+0xce/0x180 [ 1177.745074][ T3328] __x64_sys_read+0x3e/0x50 [ 1177.749683][ T3328] do_syscall_64+0x39/0x80 [ 1177.754371][ T3328] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1177.760945][ T3328] RIP: 0033:0x4191dc [ 1177.765347][ T3328] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1177.785416][ T3328] RSP: 002b:00007f770a9c5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1177.794190][ T3328] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191dc [ 1177.802516][ T3328] RDX: 000000000000000f RSI: 00007f770a9c51e0 RDI: 0000000000000006 [ 1177.810562][ T3328] RBP: 00007f770a9c51d0 R08: 0000000000000000 R09: 00312e6364755f79 [ 1177.819050][ T3328] R10: 00007f770a9c2e57 R11: 0000000000000246 R12: 0000000000000002 [ 1177.827260][ T3328] R13: 00007ffdfac4526f R14: 00007f770a9c5300 R15: 0000000000022000 [ 1177.847748][ T9635] usb 2-1: USB disconnect, device number 118 15:29:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d", 0xaf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:36 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1100, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:36 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x604, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:36 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x700, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1179.426904][ T3370] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1179.438884][ T3370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1179.501824][ T3377] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1179.511656][ T3377] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1179.683050][ T8899] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1179.923015][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1180.043690][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1180.052682][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1180.063381][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1180.074699][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1180.203154][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1180.213132][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1180.222048][ T8899] usb 2-1: Product: syz [ 1180.226489][ T8899] usb 2-1: Manufacturer: syz [ 1180.232287][ T8899] usb 2-1: config 0 descriptor?? 15:29:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x900, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1400, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1180.477151][ T3362] udc-core: couldn't find an available UDC or it's busy [ 1180.485153][ T3362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1180.497255][ T9634] usb 2-1: USB disconnect, device number 119 15:29:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa00, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1180.541341][ T3394] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.552789][ T3394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:29:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d", 0xaf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xb00, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2500, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc00, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1182.438503][ T3406] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1182.452195][ T3406] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1182.712775][ T8899] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1182.972726][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1183.092890][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1183.102169][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1183.113552][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1183.124663][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1183.254197][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1183.264210][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1183.272469][ T8899] usb 2-1: Product: syz [ 1183.278687][ T8899] usb 2-1: Manufacturer: syz [ 1183.284605][ T8899] usb 2-1: config 0 descriptor?? 15:29:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4788, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xd00, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:40 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1183.523910][ T3409] udc-core: couldn't find an available UDC or it's busy [ 1183.531668][ T3409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1183.550050][ T8899] usb 2-1: USB disconnect, device number 120 15:29:41 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xe00, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1183.583675][ T3436] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1183.595819][ T3436] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1184.322623][ T9635] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1184.602602][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1184.722926][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1184.731817][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1184.741588][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1184.753194][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1184.912593][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1184.922570][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1184.930935][ T9635] usb 2-1: Product: syz [ 1184.935626][ T9635] usb 2-1: Manufacturer: syz [ 1184.941010][ T9635] usb 2-1: config 0 descriptor?? [ 1185.212631][ T8899] usb 2-1: USB disconnect, device number 121 15:29:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d", 0xaf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4888, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:42 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:42 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1100, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:42 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1200, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:42 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1800, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1185.472752][ T3461] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.493627][ T3461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.772500][T12495] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1186.032456][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1186.202655][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1186.211170][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1186.220739][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1186.231930][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1186.352550][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1186.361790][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1186.371184][T12495] usb 2-1: Product: syz [ 1186.376212][T12495] usb 2-1: Manufacturer: syz [ 1186.381679][T12495] usb 2-1: config 0 descriptor?? 15:29:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:43 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:43 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:44 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2500, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1186.596622][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1186.606243][ T3487] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1186.634264][ T3464] udc-core: couldn't find an available UDC or it's busy [ 1186.643598][ T3464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1186.658242][T12495] usb 2-1: USB disconnect, device number 122 [ 1187.432357][ T8899] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1187.682343][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1187.802361][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1187.811914][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1187.822159][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1187.832878][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1187.962368][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1187.973311][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1187.981667][ T8899] usb 2-1: Product: syz [ 1187.987052][ T8899] usb 2-1: Manufacturer: syz [ 1187.995455][ T8899] usb 2-1: config 0 descriptor?? [ 1188.242404][ T9635] usb 2-1: USB disconnect, device number 123 15:29:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:45 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3f00, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:45 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x5c00, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1188.509061][ T3514] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1188.521761][ T3514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:29:45 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfeff, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1188.802221][T12495] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1189.062226][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1189.192886][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1189.201600][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1189.211298][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1189.222398][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1189.372546][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1189.381778][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1189.390250][T12495] usb 2-1: Product: syz [ 1189.395181][T12495] usb 2-1: Manufacturer: syz [ 1189.400747][T12495] usb 2-1: config 0 descriptor?? 15:29:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6558, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:46 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfffe, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:47 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x11000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1189.614908][ T3537] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1189.625845][ T3537] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1189.654467][T12495] usb 2-1: USB disconnect, device number 124 [ 1190.432070][ T8899] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1190.672094][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1190.792304][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1190.801319][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1190.810637][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1190.821137][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1190.942233][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1190.952124][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1190.960638][ T8899] usb 2-1: Product: syz [ 1190.965070][ T8899] usb 2-1: Manufacturer: syz [ 1190.970729][ T8899] usb 2-1: config 0 descriptor?? [ 1191.212718][ T9634] usb 2-1: USB disconnect, device number 125 15:29:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:48 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x80000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:48 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x80040, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1191.563693][ T3572] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1191.578238][ T3572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1191.821957][ T9746] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1192.061949][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1192.182008][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1192.191021][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1192.200946][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1192.212358][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1192.332090][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1192.341235][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1192.350078][ T9746] usb 2-1: Product: syz [ 1192.354811][ T9746] usb 2-1: Manufacturer: syz [ 1192.361222][ T9746] usb 2-1: config 0 descriptor?? 15:29:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8847, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x100100, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:50 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1192.613228][ T3568] udc-core: couldn't find an available UDC or it's busy [ 1192.626927][ T3568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:29:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x200000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1192.658804][ T9746] usb 2-1: USB disconnect, device number 126 [ 1192.680190][ T3595] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1192.696325][ T3595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1193.421852][T12495] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1193.661822][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1193.781983][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1193.791215][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1193.801322][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1193.812169][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1193.951814][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1193.961330][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1193.970075][T12495] usb 2-1: Product: syz [ 1193.974580][T12495] usb 2-1: Manufacturer: syz [ 1193.979943][T12495] usb 2-1: config 0 descriptor?? [ 1194.242309][ T9746] usb 2-1: USB disconnect, device number 127 15:29:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8848, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:52 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1194.588335][ T3625] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1194.611260][ T3625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1194.851709][ T9746] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1195.091683][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1195.211706][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1195.220527][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1195.229588][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1195.240640][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1195.361688][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1195.371415][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1195.381988][ T9746] usb 2-1: Product: syz [ 1195.386307][ T9746] usb 2-1: Manufacturer: syz [ 1195.394140][ T9746] usb 2-1: config 0 descriptor?? 15:29:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfeff, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:53 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2040000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1195.634938][ T9746] usb 2-1: USB disconnect, device number 2 15:29:53 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1195.692087][ T3651] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1195.705185][ T3651] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1196.401571][ T9746] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1196.641569][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1196.761789][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1196.770546][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1196.779809][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1196.790215][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1196.911686][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1196.921069][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1196.930809][ T9746] usb 2-1: Product: syz [ 1196.935455][ T9746] usb 2-1: Manufacturer: syz [ 1196.941068][ T9746] usb 2-1: config 0 descriptor?? [ 1197.184231][ T9746] usb 2-1: USB disconnect, device number 3 15:29:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:54 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x7, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1197.599775][ T3674] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.613113][ T3674] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.698310][ T3687] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.708656][ T3687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.881425][ T9746] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1198.121412][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1198.241642][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1198.250766][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1198.260953][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1198.274890][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1198.401626][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1198.411262][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1198.420392][ T9746] usb 2-1: Product: syz [ 1198.424965][ T9746] usb 2-1: Manufacturer: syz [ 1198.431940][ T9746] usb 2-1: config 0 descriptor?? 15:29:56 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x15c, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 15:29:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1198.683539][T12495] usb 2-1: USB disconnect, device number 4 15:29:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1198.724373][ T3705] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1198.736371][ T3705] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1199.451319][ T9746] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1199.691271][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1199.811339][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1199.820135][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1199.830396][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1199.842038][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1199.971445][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1199.982286][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1199.991256][ T9746] usb 2-1: Product: syz [ 1199.996729][ T9746] usb 2-1: Manufacturer: syz [ 1200.002512][ T9746] usb 2-1: config 0 descriptor?? [ 1200.249623][ T9746] usb 2-1: USB disconnect, device number 5 15:29:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:29:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6040000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 15:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x110000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x8, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:29:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1200.644590][ T3734] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1200.654159][ T3734] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:29:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:29:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:29:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1200.764544][ T3750] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1200.779036][ T3750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1200.951176][ T9746] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1201.191149][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1201.311361][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1201.320253][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1201.329972][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1201.340922][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1201.464519][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1201.474485][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1201.483031][ T9746] usb 2-1: Product: syz [ 1201.487766][ T9746] usb 2-1: Manufacturer: syz [ 1201.494767][ T9746] usb 2-1: config 0 descriptor?? [ 1201.735059][ T9746] usb 2-1: USB disconnect, device number 6 [ 1202.501095][ T9746] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1202.741873][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1202.861096][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1202.869999][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1202.879458][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1202.890362][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1203.011209][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1203.020567][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1203.030222][ T9746] usb 2-1: Product: syz [ 1203.035088][ T9746] usb 2-1: Manufacturer: syz [ 1203.040563][ T9746] usb 2-1: config 0 descriptor?? [ 1203.301092][ T9746] usb 2-1: USB disconnect, device number 7 15:30:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x9, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1203.658070][ T3782] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1203.673640][ T3782] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1203.790904][ T3799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1203.805379][ T3799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1203.950925][T12495] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1204.210891][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1204.331075][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1204.340082][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1204.350548][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1204.361899][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1204.491039][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1204.500309][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1204.509521][T12495] usb 2-1: Product: syz [ 1204.514163][T12495] usb 2-1: Manufacturer: syz [ 1204.520627][T12495] usb 2-1: config 0 descriptor?? [ 1204.772714][T12495] usb 2-1: USB disconnect, device number 8 [ 1205.540801][T11464] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1205.780772][T11464] usb 2-1: Using ep0 maxpacket: 32 [ 1205.900857][T11464] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1205.909642][T11464] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1205.919179][T11464] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1205.931246][T11464] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1206.050918][T11464] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1206.060421][T11464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1206.074911][T11464] usb 2-1: Product: syz [ 1206.079070][T11464] usb 2-1: Manufacturer: syz [ 1206.085240][T11464] usb 2-1: config 0 descriptor?? [ 1206.330896][T11464] usb 2-1: USB disconnect, device number 9 15:30:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xb00, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0xa, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xe000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1206.705807][ T3840] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1206.721176][ T3840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1206.794343][ T3853] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1206.804287][ T3853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1206.849082][ T3859] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1206.861256][ T3859] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1206.990673][T12495] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1207.230730][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1207.350912][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1207.359921][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1207.369829][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1207.381169][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1207.500765][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1207.510635][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1207.519728][T12495] usb 2-1: Product: syz [ 1207.524681][T12495] usb 2-1: Manufacturer: syz [ 1207.534095][T12495] usb 2-1: config 0 descriptor?? [ 1207.773115][ T9635] usb 2-1: USB disconnect, device number 10 [ 1208.560505][ T8899] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1208.800504][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1208.920718][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1208.929784][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1208.939234][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1208.950511][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1209.080619][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1209.089992][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1209.098545][ T8899] usb 2-1: Product: syz [ 1209.102821][ T8899] usb 2-1: Manufacturer: syz [ 1209.108277][ T8899] usb 2-1: config 0 descriptor?? [ 1209.360586][T12495] usb 2-1: USB disconnect, device number 11 15:30:07 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:07 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x11000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x1100, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0xb, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:07 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x12000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1209.718101][ T3886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1209.736288][ T3886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:07 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x1486, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:07 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x18000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x2b80, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1209.817048][ T3901] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1209.832740][ T3901] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1209.844466][ T3906] ptrace attach of "/root/syz-executor.0"[3904] was attempted by "/root/syz-executor.0"[3906] [ 1210.010458][ T8899] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1210.280383][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1210.430640][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1210.439659][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1210.449016][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1210.460890][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1210.591482][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1210.601498][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1210.610067][ T8899] usb 2-1: Product: syz [ 1210.614897][ T8899] usb 2-1: Manufacturer: syz [ 1210.620750][ T8899] usb 2-1: config 0 descriptor?? [ 1210.862619][ T9746] usb 2-1: USB disconnect, device number 12 [ 1211.630298][ T9635] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1211.881696][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1212.010390][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1212.019514][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1212.029305][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1212.041638][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1212.190405][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1212.201044][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1212.209311][ T9635] usb 2-1: Product: syz [ 1212.214456][ T9635] usb 2-1: Manufacturer: syz [ 1212.221996][ T9635] usb 2-1: config 0 descriptor?? [ 1212.490332][ T8899] usb 2-1: USB disconnect, device number 13 15:30:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x25000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x4788, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0xc, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x4888, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1212.762192][ T3942] __nla_validate_parse: 2 callbacks suppressed [ 1212.762206][ T3942] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1212.778609][ T3942] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x40000800, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x5c000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1212.862777][ T3955] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1212.875850][ T3955] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1212.889973][ T3960] ptrace attach of "/root/syz-executor.0"[3956] was attempted by "/root/syz-executor.0"[3960] 15:30:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x5865, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1213.030184][ T8899] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1213.270170][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1213.390295][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1213.399448][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1213.409421][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1213.420275][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1213.550134][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1213.559688][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1213.569622][ T8899] usb 2-1: Product: syz [ 1213.574191][ T8899] usb 2-1: Manufacturer: syz [ 1213.582461][ T8899] usb 2-1: config 0 descriptor?? [ 1213.822860][ T8899] usb 2-1: USB disconnect, device number 14 [ 1214.590011][T12495] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1214.830001][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1214.960199][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1214.969226][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1214.979117][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1214.993733][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1215.161265][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1215.170807][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1215.178953][T12495] usb 2-1: Product: syz [ 1215.183850][T12495] usb 2-1: Manufacturer: syz [ 1215.189532][T12495] usb 2-1: config 0 descriptor?? [ 1215.431076][ T9746] usb 2-1: USB disconnect, device number 15 15:30:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:13 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x5c01, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0xd, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1215.796232][ T4003] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1215.808797][ T4003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:13 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x10000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1215.893917][ T4023] ptrace attach of "/root/syz-executor.0"[4021] was attempted by "/root/syz-executor.0"[4023] [ 1215.897853][ T4020] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1215.927630][ T4020] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1216.059910][ T9746] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1216.299918][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1216.420141][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1216.430201][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1216.439639][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1216.450872][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1216.580196][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1216.590339][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1216.598904][ T9746] usb 2-1: Product: syz [ 1216.604001][ T9746] usb 2-1: Manufacturer: syz [ 1216.614146][ T9746] usb 2-1: config 0 descriptor?? [ 1216.852961][ T9746] usb 2-1: USB disconnect, device number 16 [ 1217.619788][ T9746] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1217.859793][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1217.979877][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1217.988981][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1218.000079][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1218.011773][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1218.139981][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1218.149552][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1218.158668][ T9746] usb 2-1: Product: syz [ 1218.163056][ T9746] usb 2-1: Manufacturer: syz [ 1218.169004][ T9746] usb 2-1: config 0 descriptor?? [ 1218.419740][ T9746] usb 2-1: USB disconnect, device number 17 15:30:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x6558, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x80000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0xe, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1218.827678][ T4072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1218.841031][ T4072] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x10010000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x8614, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x20000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1218.936031][ T4088] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1218.964799][ T4088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1219.079686][ T9746] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1219.319609][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1219.439765][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1219.449978][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1219.459292][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1219.471162][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1219.599696][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1219.609850][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1219.618331][ T9746] usb 2-1: Product: syz [ 1219.623580][ T9746] usb 2-1: Manufacturer: syz [ 1219.633359][ T9746] usb 2-1: config 0 descriptor?? [ 1219.872820][ T9634] usb 2-1: USB disconnect, device number 18 [ 1220.639502][ T9746] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1220.879486][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1220.999774][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1221.009623][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1221.020688][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1221.032378][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1221.159734][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1221.169874][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1221.178167][ T9746] usb 2-1: Product: syz [ 1221.183060][ T9746] usb 2-1: Manufacturer: syz [ 1221.188563][ T9746] usb 2-1: config 0 descriptor?? [ 1221.449595][ T9746] usb 2-1: USB disconnect, device number 19 15:30:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x8847, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x10, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1221.852584][ T4138] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1221.867259][ T4138] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x8848, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x204000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x34000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1221.954504][ T4153] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1221.965342][ T4153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1222.129468][T12495] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1222.369359][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1222.489571][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1222.498388][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1222.508607][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1222.520644][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1222.649514][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1222.659185][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1222.669237][T12495] usb 2-1: Product: syz [ 1222.673912][T12495] usb 2-1: Manufacturer: syz [ 1222.680900][T12495] usb 2-1: config 0 descriptor?? [ 1222.921979][ T9634] usb 2-1: USB disconnect, device number 20 [ 1223.689274][ T8899] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1223.929354][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1224.049523][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1224.058418][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1224.068283][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1224.078646][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1224.199406][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1224.209379][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1224.218086][ T8899] usb 2-1: Product: syz [ 1224.223318][ T8899] usb 2-1: Manufacturer: syz [ 1224.229049][ T8899] usb 2-1: config 0 descriptor?? [ 1224.481303][ T9635] usb 2-1: USB disconnect, device number 21 15:30:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x11000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x400300, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x11, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1224.868546][ T4203] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1224.893265][ T4203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1224.983277][ T4223] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1224.996061][ T4223] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1225.159158][ T8899] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1225.409123][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1225.529864][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1225.538968][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1225.548161][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1225.558740][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1225.719295][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1225.729661][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1225.738008][ T8899] usb 2-1: Product: syz [ 1225.742544][ T8899] usb 2-1: Manufacturer: syz [ 1225.748188][ T8899] usb 2-1: config 0 descriptor?? [ 1225.992740][ T8899] usb 2-1: USB disconnect, device number 22 [ 1226.759073][ T9635] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1227.019065][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1227.179135][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1227.189213][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1227.198563][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1227.209801][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1227.339222][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1227.349275][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1227.358657][ T9635] usb 2-1: Product: syz [ 1227.363894][ T9635] usb 2-1: Manufacturer: syz [ 1227.370705][ T9635] usb 2-1: config 0 descriptor?? [ 1227.609909][ T9635] usb 2-1: USB disconnect, device number 23 15:30:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x14000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x604000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:25 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x4000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x12, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1227.898316][ T4263] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1227.912515][ T4263] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:25 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x5000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x900000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:25 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x6000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1228.013827][ T4278] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1228.031243][ T4278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1228.178939][ T9746] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1228.418973][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1228.539044][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1228.548004][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1228.557679][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1228.568649][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1228.699059][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1228.709051][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1228.717333][ T9746] usb 2-1: Product: syz [ 1228.722638][ T9746] usb 2-1: Manufacturer: syz [ 1228.732662][ T9746] usb 2-1: config 0 descriptor?? [ 1228.972060][ T9746] usb 2-1: USB disconnect, device number 24 [ 1229.748746][ T9635] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1230.018739][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1230.158869][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1230.167741][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1230.177634][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1230.188811][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1230.320187][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1230.330076][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1230.338067][ T9635] usb 2-1: Product: syz [ 1230.343249][ T9635] usb 2-1: Manufacturer: syz [ 1230.350306][ T9635] usb 2-1: config 0 descriptor?? [ 1230.589397][ T9635] usb 2-1: USB disconnect, device number 25 15:30:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa00000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x7000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x18, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xb00000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1230.927214][ T4327] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1230.951644][ T4327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc00000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x8000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x9000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xd00000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1231.070206][ T4357] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1231.084282][ T4357] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xe00000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xa000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1231.126787][ T4366] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1231.136324][ T4366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1231.198628][ T9746] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1231.438615][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1231.558803][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1231.567833][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1231.581818][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1231.593509][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1231.718779][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1231.728506][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1231.737573][ T9746] usb 2-1: Product: syz [ 1231.742217][ T9746] usb 2-1: Manufacturer: syz [ 1231.748488][ T9746] usb 2-1: config 0 descriptor?? [ 1231.990170][ T9746] usb 2-1: USB disconnect, device number 26 [ 1232.768523][T12495] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1233.049768][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1233.178780][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1233.187752][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1233.197512][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1233.208938][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1233.348685][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1233.358554][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1233.367472][T12495] usb 2-1: Product: syz [ 1233.372681][T12495] usb 2-1: Manufacturer: syz [ 1233.382175][T12495] usb 2-1: config 0 descriptor?? 15:30:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x25, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1233.628530][ T8899] usb 2-1: USB disconnect, device number 27 15:30:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x81ffffff, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1000000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe6450", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:31 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xb000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1100000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88470000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1233.995402][ T4403] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1234.007463][ T4403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1234.028445][ T8899] usb 2-1: new high-speed USB device number 28 using dummy_hcd 15:30:31 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xc000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1200000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88480000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1234.084923][ T4411] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1234.105469][ T4411] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:31 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1234.268464][ T8899] usb 2-1: Using ep0 maxpacket: 32 [ 1234.388951][ T8899] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1234.398499][ T8899] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1234.409296][ T8899] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1234.421312][ T8899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1234.548644][ T8899] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1234.558592][ T8899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1234.566750][ T8899] usb 2-1: Product: syz [ 1234.571746][ T8899] usb 2-1: Manufacturer: syz [ 1234.580626][ T8899] usb 2-1: config 0 descriptor?? [ 1234.821297][T12495] usb 2-1: USB disconnect, device number 28 [ 1235.598267][ T9651] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1235.849006][ T9651] usb 2-1: Using ep0 maxpacket: 32 [ 1235.968429][ T9651] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1235.977508][ T9651] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1235.986530][ T9651] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1235.997337][ T9651] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1236.118299][ T9651] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1236.127948][ T9651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1236.137476][ T9651] usb 2-1: Product: syz [ 1236.142645][ T9651] usb 2-1: Manufacturer: syz [ 1236.152106][ T9651] usb 2-1: config 0 descriptor?? 15:30:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x48, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1236.393744][ T9634] usb 2-1: USB disconnect, device number 29 [ 1236.828236][ T9634] usb 2-1: new high-speed USB device number 30 using dummy_hcd 15:30:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1800000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:34 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2500000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1237.014033][ T4459] __nla_validate_parse: 2 callbacks suppressed [ 1237.014048][ T4459] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1237.030068][ T4459] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:34 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x11000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xefffffff, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1237.101186][ T9634] usb 2-1: Using ep0 maxpacket: 32 [ 1237.116123][ T4467] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1237.130444][ T4467] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:34 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4000080000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1237.206806][ T4480] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1237.230928][ T4480] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1237.248328][ T9634] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1237.262346][ T9634] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1237.276040][ T9634] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1237.286998][ T9634] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1237.298393][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.305146][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.418159][ T9634] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1237.427955][ T9634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1237.437006][ T9634] usb 2-1: Product: syz [ 1237.441394][ T9634] usb 2-1: Manufacturer: syz [ 1237.447373][ T9634] usb 2-1: config 0 descriptor?? [ 1237.700767][ T9634] usb 2-1: USB disconnect, device number 30 [ 1238.478132][ T9634] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1238.758295][ T9634] usb 2-1: Using ep0 maxpacket: 32 [ 1238.908043][ T9634] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1238.916819][ T9634] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1238.926719][ T9634] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1238.937766][ T9634] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1239.068318][ T9634] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1239.077949][ T9634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1239.086414][ T9634] usb 2-1: Product: syz [ 1239.091376][ T9634] usb 2-1: Manufacturer: syz [ 1239.096716][ T9634] usb 2-1: config 0 descriptor?? 15:30:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x4c, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:36 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x5c00000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1239.348083][ T9634] usb 2-1: USB disconnect, device number 31 [ 1239.757940][ T9634] usb 2-1: new high-speed USB device number 32 using dummy_hcd 15:30:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x5c010000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1240.021344][ T9634] usb 2-1: Using ep0 maxpacket: 32 15:30:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8000000000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x60000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1240.144046][ T4522] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1240.153660][ T4522] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfeff0000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfeffffff00000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x65580000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1240.188471][ T9634] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1240.200584][ T9634] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1240.210840][ T9634] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1240.244619][ T9634] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1240.260087][ T4533] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1240.270101][ T4533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1240.397908][ T9634] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1240.407653][ T9634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1240.416807][ T9634] usb 2-1: Product: syz [ 1240.421266][ T9634] usb 2-1: Manufacturer: syz [ 1240.428315][ T9634] usb 2-1: config 0 descriptor?? [ 1240.679333][ T9651] usb 2-1: USB disconnect, device number 32 [ 1241.457819][ T9635] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1241.707777][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1241.847847][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1241.856965][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1241.866751][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1241.877817][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1242.008113][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1242.017344][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1242.026288][ T9635] usb 2-1: Product: syz [ 1242.030600][ T9635] usb 2-1: Manufacturer: syz [ 1242.037614][ T9635] usb 2-1: config 0 descriptor?? 15:30:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x5c, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfeffffffffffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1242.291034][ T9635] usb 2-1: USB disconnect, device number 33 [ 1242.727670][ T9635] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1242.978462][ T9635] usb 2-1: Using ep0 maxpacket: 32 15:30:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:40 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x802b0000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff0f0000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:40 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x81000000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1243.097700][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1243.106546][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1243.117344][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1243.129436][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 15:30:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffa888, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:40 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x81ffffff, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1243.164185][ T4574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1243.174726][ T4574] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1243.237981][ T4586] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1243.248520][ T4586] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1243.259247][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1243.273729][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1243.297526][ T9635] usb 2-1: Product: syz [ 1243.308743][ T9635] usb 2-1: Manufacturer: syz [ 1243.314413][ T9635] usb 2-1: config 0 descriptor?? [ 1243.561086][ T9651] usb 2-1: USB disconnect, device number 34 [ 1244.327562][T12495] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1244.567664][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1244.687762][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1244.696755][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1244.706150][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1244.716985][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1244.857724][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1244.867575][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1244.875820][T12495] usb 2-1: Product: syz [ 1244.881251][T12495] usb 2-1: Manufacturer: syz [ 1244.891350][T12495] usb 2-1: config 0 descriptor?? 15:30:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x60, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:42 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1245.157554][ T9634] usb 2-1: USB disconnect, device number 35 [ 1245.577533][ T9634] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1245.847654][ T9634] usb 2-1: Using ep0 maxpacket: 32 15:30:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1245.987591][ T9634] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1245.996643][ T9634] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1246.006025][ T9634] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1246.016669][ T9634] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1246.072819][ T4618] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1246.082538][ T4618] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:43 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x86140000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:43 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff81, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1246.147437][ T9634] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1246.166668][ T9634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1246.182543][ T9634] usb 2-1: Product: syz [ 1246.188102][ T4629] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:43 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x88470000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1246.194271][ T9634] usb 2-1: Manufacturer: syz [ 1246.202801][ T4629] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1246.209784][ T9634] usb 2-1: config 0 descriptor?? 15:30:43 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffef, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1246.274017][ T4640] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1246.288099][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1246.461064][ T8899] usb 2-1: USB disconnect, device number 36 [ 1247.237391][ T9634] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1247.477496][ T9634] usb 2-1: Using ep0 maxpacket: 32 [ 1247.617577][ T9634] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1247.626551][ T9634] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1247.636351][ T9634] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1247.647720][ T9634] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1247.807490][ T9634] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1247.817107][ T9634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1247.825597][ T9634] usb 2-1: Product: syz [ 1247.830905][ T9634] usb 2-1: Manufacturer: syz [ 1247.837879][ T9634] usb 2-1: config 0 descriptor?? 15:30:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x68, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:45 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1248.079298][ T9634] usb 2-1: USB disconnect, device number 37 [ 1248.517224][ T9634] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1248.757218][ T9634] usb 2-1: Using ep0 maxpacket: 32 [ 1248.877389][ T9634] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1248.886314][ T9634] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1248.895992][ T9634] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1248.906713][ T9634] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 15:30:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x88480000, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1249.028470][ T9634] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1249.039506][ T9634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1249.048572][ T9634] usb 2-1: Product: syz [ 1249.053109][ T9634] usb 2-1: Manufacturer: syz [ 1249.059680][ T9634] usb 2-1: config 0 descriptor?? 15:30:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:46 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x6, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x88a8ffff, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:46 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xf, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x9effffff, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1249.209963][ T4684] __nla_validate_parse: 2 callbacks suppressed [ 1249.209977][ T4684] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1249.230992][ T4684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:46 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xfe, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1249.300389][ T8899] usb 2-1: USB disconnect, device number 38 [ 1250.067143][ T9634] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1250.327077][ T9634] usb 2-1: Using ep0 maxpacket: 32 [ 1250.447255][ T9634] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1250.457101][ T9634] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1250.466046][ T9634] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1250.477586][ T9634] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1250.627349][ T9634] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1250.636557][ T9634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1250.645401][ T9634] usb 2-1: Product: syz [ 1250.650059][ T9634] usb 2-1: Manufacturer: syz [ 1250.655569][ T9634] usb 2-1: config 0 descriptor?? 15:30:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x6c, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xefffffff, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1250.898246][ T9746] usb 2-1: USB disconnect, device number 39 [ 1251.297233][ T9746] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1251.546994][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1251.677098][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1251.686960][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1251.696438][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1251.707201][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1251.868766][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1251.878550][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1251.887201][ T9746] usb 2-1: Product: syz [ 1251.891538][ T9746] usb 2-1: Manufacturer: syz [ 1251.898454][ T9746] usb 2-1: config 0 descriptor?? 15:30:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:49 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00e00001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:49 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1252.160115][ T9635] usb 2-1: USB disconnect, device number 40 15:30:49 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xfffe, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="e03f03001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:49 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf1ffffff, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00200201000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1252.946934][ T9635] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1253.206855][ T9635] usb 2-1: Using ep0 maxpacket: 32 [ 1253.347079][ T9635] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1253.355625][ T9635] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1253.365582][ T9635] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1253.376570][ T9635] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1253.508352][ T9635] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1253.517964][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1253.526392][ T9635] usb 2-1: Product: syz [ 1253.531670][ T9635] usb 2-1: Manufacturer: syz [ 1253.541113][ T9635] usb 2-1: config 0 descriptor?? 15:30:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x74, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffa888, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f0ff7f1000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1253.806982][ T9651] usb 2-1: USB disconnect, device number 41 [ 1254.216756][ T9651] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1254.456735][ T9651] usb 2-1: Using ep0 maxpacket: 32 [ 1254.577270][ T9651] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1254.587559][ T9651] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1254.596627][ T9651] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1254.607293][ T9651] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1254.736888][ T9651] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1254.746587][ T9651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1254.755041][ T9651] usb 2-1: Product: syz [ 1254.759907][ T9651] usb 2-1: Manufacturer: syz [ 1254.765748][ T9651] usb 2-1: config 0 descriptor?? [ 1255.009697][ T9635] usb 2-1: USB disconnect, device number 42 15:30:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:52 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1eba44, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="effdffff1000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000100010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffff81, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000200010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffff9e, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1255.776615][ T9746] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1256.016658][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1256.091358][ T4814] ================================================================== [ 1256.099734][ T4814] BUG: KCSAN: data-race in file_remove_privs / vfs_write [ 1256.106788][ T4814] [ 1256.109369][ T4814] write to 0xffff88810ccbfcfc of 4 bytes by task 4836 on cpu 1: [ 1256.117344][ T4814] file_remove_privs+0x312/0x3a0 [ 1256.122743][ T4814] __generic_file_write_iter+0xda/0x340 [ 1256.128400][ T4814] generic_file_write_iter+0x75/0x130 [ 1256.133779][ T4814] vfs_write+0x6f9/0x7e0 [ 1256.138031][ T4814] __x64_sys_pwrite64+0xf5/0x150 [ 1256.142982][ T4814] do_syscall_64+0x39/0x80 [ 1256.147399][ T4814] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1256.153396][ T4814] [ 1256.155805][ T4814] read to 0xffff88810ccbfcfc of 4 bytes by task 4814 on cpu 0: [ 1256.163343][ T4814] vfs_write+0x3ac/0x7e0 [ 1256.167668][ T4814] __x64_sys_pwrite64+0xf5/0x150 [ 1256.172609][ T4814] do_syscall_64+0x39/0x80 [ 1256.177117][ T4814] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1256.183192][ T4814] [ 1256.185513][ T4814] Reported by Kernel Concurrency Sanitizer on: [ 1256.191663][ T4814] CPU: 0 PID: 4814 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1256.200856][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.211225][ T4814] ================================================================== [ 1256.256649][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1256.265554][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1256.274929][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1256.285594][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1256.406745][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1256.416157][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1256.425329][ T9746] usb 2-1: Product: syz [ 1256.430014][ T9746] usb 2-1: Manufacturer: syz [ 1256.440109][ T9746] usb 2-1: config 0 descriptor?? 15:30:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x7a, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000a00010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffffef, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1256.678731][ T9746] usb 2-1: USB disconnect, device number 43 [ 1257.086604][ T9746] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1257.346591][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1257.476889][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1257.485520][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1257.495743][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1257.506219][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1257.646526][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1257.656240][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1257.665471][ T9746] usb 2-1: Product: syz [ 1257.670185][ T9746] usb 2-1: Manufacturer: syz [ 1257.677828][ T9746] usb 2-1: config 0 descriptor?? [ 1257.937815][T12495] usb 2-1: USB disconnect, device number 44 15:30:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffe, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600200001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffff0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffff1, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c01000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600300001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600400001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600500001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1258.716389][ T9746] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1258.966385][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1259.096356][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1259.105248][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1259.134068][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1259.156343][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1259.286431][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1259.296240][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1259.304643][ T9746] usb 2-1: Product: syz [ 1259.309372][ T9746] usb 2-1: Manufacturer: syz [ 1259.315105][ T9746] usb 2-1: config 0 descriptor?? 15:30:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x300, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:56 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1000000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600600001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) [ 1259.566431][ T9746] usb 2-1: USB disconnect, device number 45 [ 1259.976313][ T9746] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1260.216303][ T9746] usb 2-1: Using ep0 maxpacket: 32 [ 1260.336472][ T9746] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1260.345621][ T9746] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1260.355735][ T9746] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1260.366532][ T9746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1260.486452][ T9746] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1260.496161][ T9746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1260.505479][ T9746] usb 2-1: Product: syz [ 1260.510031][ T9746] usb 2-1: Manufacturer: syz [ 1260.518463][ T9746] usb 2-1: config 0 descriptor?? [ 1260.757432][ T4904] udc-core: couldn't find an available UDC or it's busy [ 1260.765530][ T4904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1260.775379][ T9651] usb 2-1: USB disconnect, device number 46 15:30:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:30:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffffffe, &(0x7f0000000280)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:30:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600700001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2400000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600800001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c002000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:30:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600900001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c00e000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1261.556153][T12495] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1261.817337][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1261.976248][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1261.984834][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1262.016188][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1262.027832][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1262.166115][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1262.180111][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1262.189404][T12495] usb 2-1: Product: syz [ 1262.193619][T12495] usb 2-1: Manufacturer: syz [ 1262.200206][T12495] usb 2-1: config 0 descriptor?? 15:30:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x500, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:30:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600a00001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:30:59 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e03f030024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1262.456176][T12495] usb 2-1: USB disconnect, device number 47 [ 1262.866079][T12495] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1263.106083][T12495] usb 2-1: Using ep0 maxpacket: 32 [ 1263.246157][T12495] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1263.257017][T12495] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1263.270776][T12495] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1263.282078][T12495] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1263.416224][T12495] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1263.426680][T12495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1263.437043][T12495] usb 2-1: Product: syz [ 1263.442528][T12495] usb 2-1: Manufacturer: syz [ 1263.449376][T12495] usb 2-1: config 0 descriptor?? [ 1263.687562][ T4966] udc-core: couldn't find an available UDC or it's busy [ 1263.696853][ T4966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1263.709801][T12495] usb 2-1: USB disconnect, device number 48 15:31:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="665307008e897094e729d6108daa3af386d30e783cfd0cbadecfa192f0ed6d3c12e43a8969d03279ca949095200adc14a63a5908bc7dd973da3c7bc7831a4d00000000097b3f805c10951199c8048bfaff766ee5f840af7a50211bb769ce6f29a2fa22be6765ade11a83eb075a76fe5df099ef7f91d4052ce6043a108e90cc3527fe645093956c6d6bd7706bfeac4acc255af2e45b1d3eb0dcb7e30cbda1f24a1ed5afe393f70e6c7d15cbe1aa667d53", 0xb0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:31:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:31:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff0944303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:31:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600b00001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:31:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c09002024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:31:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00f0ff7f24000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) 15:31:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600c00001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001"], 0x60}}, 0x0) 15:31:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff5e44303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:31:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="effdffff24000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1264.475965][ T9651] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1264.715974][ T9651] usb 2-1: Using ep0 maxpacket: 32 [ 1264.836387][ T9651] usb 2-1: config index 0 descriptor too short (expected 48011, got 18) [ 1264.845806][ T9651] usb 2-1: config 0 has too many interfaces: 136, using maximum allowed: 32 [ 1264.855571][ T9651] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1264.866794][ T9651] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 136 [ 1264.996014][ T9651] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=14.2c [ 1265.005706][ T9651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1265.014963][ T9651] usb 2-1: Product: syz [ 1265.019587][ T9651] usb 2-1: Manufacturer: syz [ 1265.025591][ T9651] usb 2-1: config 0 descriptor?? 15:31:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="120100002d6f7f20402000d32c14010200010902"], 0x0) syz_usb_connect$hid(0x600, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:31:02 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010600)="ff435e303031", 0x6, 0x8800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:31:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c02000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010072656400600102000c00040008"], 0x18c}}, 0x0) [ 1265.275962][T12495] usb 2-1: USB disconnect, device number 49 [ 1265.715853][T12495] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1265.985831][T12495] usb 2-1: Using ep0 maxpacket: 32