0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:05 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) 01:59:05 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) r7 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000000)={0x4, 0x2}) [ 550.851680][T11951] tipc: TX() has been purged, node left! [ 550.904927][T12374] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 550.921217][T11951] tipc: TX() has been purged, node left! 01:59:06 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 551.514196][T12374] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 551.522378][T12374] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.533083][T12374] usb 6-1: config 0 has no interface number 0 [ 551.539340][T12374] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 551.550413][T12374] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 551.564369][T12374] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 551.573657][T12374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.659908][T16502] IPVS: ftp: loaded support on port[0] = 21 [ 551.706920][T16505] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 551.727550][T12374] usb 6-1: config 0 descriptor?? [ 551.813466][T12374] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 552.149432][ T3223] usb 6-1: USB disconnect, device number 33 01:59:06 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) r7 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000000)={0x4, 0x2}) [ 552.386091][T16534] IPVS: ftp: loaded support on port[0] = 21 01:59:07 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c090000"], 0x0) 01:59:07 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) r7 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000000)={0x4, 0x2}) 01:59:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) 01:59:08 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) 01:59:08 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:08 executing program 3: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') exit(0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1, 0x0, 0x0) 01:59:08 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) r7 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000000)={0x4, 0x2}) [ 553.868030][T16585] IPVS: ftp: loaded support on port[0] = 21 [ 553.922812][T12371] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 554.102383][ T8704] Bluetooth: hci5: command 0x0406 tx timeout [ 554.432538][T12371] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 554.440731][T12371] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.451765][T12371] usb 6-1: config 0 has no interface number 0 [ 554.458026][T12371] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 554.462828][T16592] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 554.469127][T12371] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 554.488855][T12371] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 554.498125][T12371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.815200][T12371] usb 6-1: config 0 descriptor?? [ 554.862001][T12371] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 555.057005][T12371] usb 6-1: USB disconnect, device number 34 01:59:10 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:10 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) r7 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000000)={0x4, 0x2}) 01:59:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) close(0xffffffffffffffff) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) 01:59:10 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) 01:59:10 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:10 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c090000"], 0x0) [ 556.029751][T16632] IPVS: ftp: loaded support on port[0] = 21 01:59:10 executing program 3: clone(0x80200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'wg2\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:59:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x2, 0x0) [ 556.461798][T16645] IPVS: ftp: loaded support on port[0] = 21 [ 556.534925][T16633] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 556.650786][T12378] usb 6-1: new low-speed USB device number 35 using dummy_hcd 01:59:11 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200), 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 557.081803][T12378] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 557.090092][T12378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.100522][T12378] usb 6-1: config 0 has no interface number 0 [ 557.106766][T12378] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 557.117776][T12378] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 557.131355][T12378] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 557.143982][T12378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:59:12 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) 01:59:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) 01:59:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unlinkat(0xffffffffffffffff, 0x0, 0xb7b7ce8c4a19e2a7) [ 557.562538][T16691] IPVS: ftp: loaded support on port[0] = 21 [ 557.602610][T12378] usb 6-1: config 0 descriptor?? [ 557.669770][T12378] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 557.925170][ T28] usb 6-1: USB disconnect, device number 35 01:59:12 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:12 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 01:59:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x1f, 0x0, 0x3f, 0x0, 0x0, "4a74b94429f191397a12bf4310cf4fe7c141eb"}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x3e) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) [ 558.520807][T11951] tipc: TX() has been purged, node left! [ 558.581433][T11951] tipc: TX() has been purged, node left! [ 558.590815][T11951] tipc: TX() has been purged, node left! 01:59:13 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200), 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:13 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c090000090501"], 0x0) [ 558.682253][T11951] tipc: TX() has been purged, node left! [ 558.695904][T11951] tipc: TX() has been purged, node left! 01:59:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001140)="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", 0xffffff5f}], 0x1) [ 558.759962][T11951] tipc: TX() has been purged, node left! [ 558.892043][T16748] IPVS: ftp: loaded support on port[0] = 21 01:59:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) 01:59:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x1f, 0x0, 0x3f, 0x0, 0x0, "4a74b94429f191397a12bf4310cf4fe7c141eb"}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x3e) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) [ 559.424715][T16766] IPVS: ftp: loaded support on port[0] = 21 [ 559.779582][T12497] usb 6-1: new low-speed USB device number 36 using dummy_hcd 01:59:14 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 560.172281][T12497] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 560.180776][T12497] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.191207][T12497] usb 6-1: config 0 has no interface number 0 [ 560.197454][T12497] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 560.208492][T12497] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 560.218302][T12497] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 230 [ 560.231648][T12497] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 560.240942][T12497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:59:15 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0207000702"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) [ 560.476380][T16816] IPVS: ftp: loaded support on port[0] = 21 01:59:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390400000000000000103f1b0000", @ANYRES32=r4, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x48}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@loopback, @empty, r3}, 0xc) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) [ 560.587563][T12497] usb 6-1: config 0 descriptor?? [ 560.651032][T12497] snd-usb-audio: probe of 6-1:0.2 failed with error -2 01:59:15 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0x12e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 560.843932][T12497] usb 6-1: USB disconnect, device number 36 01:59:15 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200), 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:15 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 561.240278][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 561.250207][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 561.276024][T16847] ptrace attach of "/root/syz-executor.3"[16846] was attempted by "/root/syz-executor.3"[16847] 01:59:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000029002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="04"], 0x1ec}}, 0x0) [ 561.673807][T16857] IPVS: ftp: loaded support on port[0] = 21 01:59:16 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c090000090501"], 0x0) 01:59:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002a002787bddb4543e396540d00000000", @ANYRES32=r2], 0x1ec}}, 0x0) [ 561.715267][T16862] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.0'. [ 561.955798][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 561.965345][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.033653][T16873] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.0'. 01:59:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000064002787bddb4543e396540d00000000", @ANYRES32=r2], 0x1ec}}, 0x0) 01:59:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000100)={0x0, "b2029fb73e4a348a5a8369a92f139573501138b3a71349265656c8be0ba4c42c2941f89288bb0cfc2135d52f1f592fffab7454bb278ebdac39872e004525052e"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 562.377822][ T3223] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 562.775305][ T3223] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 562.784031][ T3223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.794411][ T3223] usb 6-1: config 0 has no interface number 0 [ 562.800735][ T3223] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 562.811855][ T3223] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 562.821733][ T3223] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 230 [ 562.834924][ T3223] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 562.844171][ T3223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.861960][ T3223] usb 6-1: config 0 descriptor?? [ 562.874424][T16917] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.0'. [ 562.928255][ T3223] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 562.954954][T16921] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.0'. [ 563.027523][ T12] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 563.113016][ T3223] usb 6-1: USB disconnect, device number 37 [ 563.421240][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.432476][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.442632][ T12] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 563.451918][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.519176][ T12] usb 5-1: config 0 descriptor?? [ 564.000562][ T12] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 564.053225][ T12] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 564.216064][ T12] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 564.267855][ T12] usb 5-1: USB disconnect, device number 2 01:59:19 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:19 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x0, "d5b940203940d6"}, 0x9, 0x0) 01:59:19 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 01:59:19 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c090000090501"], 0x0) [ 564.986550][ T12] usb 5-1: new high-speed USB device number 3 using dummy_hcd 01:59:19 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00', 0x2) [ 565.367501][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.378721][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.388883][ T12] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 565.396619][T11611] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 565.398152][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:59:20 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x80240) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r3, @ANYBLOB="049f000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', r3, 0x4, 0x3, 0xff, 0x4, 0x0, @private1, @empty, 0x1, 0x1, 0x8000, 0x7}}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@private1, r4}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x3ee, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000780)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f0e5bc2ea74c56c96a0160a018f3ee399c7b226a9d648fdb022df06aea665e9aab09c81f003a1c51cda7864b01368bd01eaff1044190aa6b96c0042c137eac"}, 0x80, 0x0}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000001600)={'tunl0\x00', r3, 0x40, 0x80, 0x1, 0xfffff800, {{0x25, 0x4, 0x0, 0x5, 0x94, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0x0, [{@loopback}, {@broadcast, 0x3}, {@broadcast, 0xad6bbac2}, {@rand_addr=0x64010100, 0x80000001}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x5}, {@multicast2, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x2d, 0x3, 0x3, [{@broadcast, 0x5}, {@rand_addr=0x64010102, 0x43}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x4de}, {@rand_addr=0x64010101, 0x81}, {@rand_addr=0x64010101, 0x4}]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) [ 565.515343][T16987] IPVS: ftp: loaded support on port[0] = 21 [ 565.632753][ T12] usb 5-1: config 0 descriptor?? [ 565.756950][T11611] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 565.765118][T11611] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.775567][T11611] usb 6-1: config 0 has no interface number 0 [ 565.782773][T11611] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 565.793885][T11611] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 01:59:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000100)={0x0, "b2029fb73e4a348a5a8369a92f139573501138b3a71349265656c8be0ba4c42c2941f89288bb0cfc2135d52f1f592fffab7454bb278ebdac39872e004525052e"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 565.803830][T11611] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 230 [ 565.817088][T11611] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 565.826176][ T12] usb 5-1: can't set config #0, error -71 [ 565.829500][ T12] usb 5-1: USB disconnect, device number 3 [ 565.832122][T11611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.250658][T11611] usb 6-1: config 0 descriptor?? [ 566.306005][T11611] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 566.502211][T11611] usb 6-1: USB disconnect, device number 38 [ 566.606870][T17010] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 566.775571][T12371] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 566.856324][T11951] tipc: TX() has been purged, node left! [ 566.888299][T11951] tipc: TX() has been purged, node left! 01:59:21 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:21 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f00000098c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x200080c1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:59:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00', 0x2) 01:59:21 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 567.158506][T12371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.169638][T12371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.179739][T12371] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 567.189002][T12371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:59:21 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c09000009050112"], 0x0) [ 567.501591][T17041] IPVS: ftp: loaded support on port[0] = 21 [ 567.568281][T12371] usb 5-1: config 0 descriptor?? [ 568.099181][T12371] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 568.135410][ T8704] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 568.192313][T12371] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input6 [ 568.444557][T12371] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 568.526407][ T8704] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 568.534800][ T8704] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.545899][ T8704] usb 6-1: config 0 has no interface number 0 [ 568.552149][ T8704] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 568.563204][ T8704] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 568.573348][ T8704] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 568.573909][T12371] usb 5-1: USB disconnect, device number 4 [ 568.583271][ T8704] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 230 [ 568.583428][ T8704] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 568.583553][ T8704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:59:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002e002787bddb4543e396540d00000000", @ANYRES32=r2], 0x1ec}}, 0x0) 01:59:23 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 568.973757][ T8704] usb 6-1: config 0 descriptor?? [ 569.031019][ T8704] snd-usb-audio: probe of 6-1:0.2 failed with error -12 01:59:23 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 569.150720][T17101] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.0'. [ 569.261682][ T8706] usb 6-1: USB disconnect, device number 39 [ 569.362288][T17117] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.0'. 01:59:24 executing program 4: syz_usb_connect(0x0, 0x15b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}, @uac_as={[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "d3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "03d4d7d61d6e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "378dc2f259985bc76e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a675f9b4dc593e629c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) 01:59:24 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:24 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c09000009050112"], 0x0) [ 569.964450][ T8706] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 570.214175][ T8706] usb 5-1: Using ep0 maxpacket: 32 01:59:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 570.336955][ T8706] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 570.346206][ T8706] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 570.575367][ T8706] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 570.584770][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.592904][ T8706] usb 5-1: Product: syz [ 570.597472][ T8706] usb 5-1: Manufacturer: syz [ 570.602246][ T8706] usb 5-1: SerialNumber: syz [ 570.721494][ T8706] usb 5-1: config 0 descriptor?? [ 570.774943][ T8706] option 5-1:0.0: GSM modem (1-port) converter detected [ 570.970951][T11613] usb 5-1: USB disconnect, device number 5 [ 570.979700][T11613] option 5-1:0.0: device disconnected [ 571.784582][ T28] usb 5-1: new high-speed USB device number 6 using dummy_hcd 01:59:26 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:26 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:26 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:26 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 571.993653][T12371] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 572.024878][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 572.197415][T17173] IPVS: ftp: loaded support on port[0] = 21 [ 572.308979][T17178] IPVS: ftp: loaded support on port[0] = 21 [ 572.415129][ T28] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 572.424319][ T28] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 572.515206][T12371] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 572.523512][T12371] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.534604][T12371] usb 6-1: config 0 has no interface number 0 [ 572.540853][T12371] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 572.551862][T12371] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 572.561886][T12371] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 572.571781][T12371] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 230 [ 572.584993][T12371] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 572.594252][T12371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:59:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 572.910099][T12371] usb 6-1: config 0 descriptor?? [ 572.965287][T12371] snd-usb-audio: probe of 6-1:0.2 failed with error -12 01:59:27 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:27 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 573.098197][ T1110] tipc: TX() has been purged, node left! 01:59:27 executing program 4: syz_usb_connect(0x0, 0x15b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}, @uac_as={[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "d3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "03d4d7d61d6e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "378dc2f259985bc76e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a675f9b4dc593e629c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) [ 573.163277][T11674] usb 6-1: USB disconnect, device number 40 [ 573.193494][ T28] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 573.202977][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.211100][ T28] usb 5-1: Product: syz [ 573.216230][ T28] usb 5-1: Manufacturer: syz [ 573.349339][ T28] usb 5-1: config 0 descriptor?? [ 573.418933][ T28] usb 5-1: can't set config #0, error -71 [ 573.479277][ T28] usb 5-1: USB disconnect, device number 6 01:59:28 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 573.748747][T17244] IPVS: ftp: loaded support on port[0] = 21 01:59:28 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c09000009050112"], 0x0) 01:59:28 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 574.042625][ T28] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 574.302214][ T28] usb 5-1: Using ep0 maxpacket: 32 01:59:29 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 574.423806][ T28] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 574.433322][ T28] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 574.605326][T17278] IPVS: ftp: loaded support on port[0] = 21 [ 574.623627][ T28] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 574.633044][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.641158][ T28] usb 5-1: Product: syz [ 574.645801][ T28] usb 5-1: Manufacturer: syz [ 574.650541][ T28] usb 5-1: SerialNumber: syz [ 574.812234][T11674] usb 6-1: new low-speed USB device number 41 using dummy_hcd 01:59:29 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 574.946925][T17285] IPVS: ftp: loaded support on port[0] = 21 [ 575.035257][ T28] usb 5-1: config 0 descriptor?? 01:59:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 575.079068][ T28] option 5-1:0.0: GSM modem (1-port) converter detected [ 575.362009][T11674] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 575.370192][T11674] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.380615][T11674] usb 6-1: config 0 has no interface number 0 [ 575.387110][T11674] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 575.398283][T11674] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 575.408451][T11674] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 575.418425][T11674] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 230 [ 575.431972][T11674] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 575.441159][T11674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.589305][T12371] usb 5-1: USB disconnect, device number 7 [ 575.597964][T12371] option 5-1:0.0: device disconnected 01:59:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000600)=""/4096, 0x0, 0x1000, 0x1}, 0x20) [ 575.982689][T11674] usb 6-1: config 0 descriptor?? 01:59:30 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 576.033199][T11674] snd-usb-audio: probe of 6-1:0.2 failed with error -12 [ 576.239286][T10289] usb 6-1: USB disconnect, device number 41 01:59:31 executing program 4: syz_usb_connect(0x0, 0x15b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}, @uac_as={[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "d3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "03d4d7d61d6e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "378dc2f259985bc76e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a675f9b4dc593e629c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) 01:59:31 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000600)=""/4096, 0x0, 0x1000, 0x1}, 0x20) [ 576.644684][T17339] IPVS: ftp: loaded support on port[0] = 21 01:59:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000600)=""/4096, 0x0, 0x1000, 0x1}, 0x20) [ 577.219754][ T8706] usb 5-1: new high-speed USB device number 8 using dummy_hcd 01:59:32 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 577.471064][ T8706] usb 5-1: Using ep0 maxpacket: 32 [ 577.592961][ T8706] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 577.602234][ T8706] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 577.822377][ T8706] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 577.831723][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.839846][ T8706] usb 5-1: Product: syz [ 577.844320][ T8706] usb 5-1: Manufacturer: syz [ 577.849044][ T8706] usb 5-1: SerialNumber: syz [ 577.883207][T17374] IPVS: ftp: loaded support on port[0] = 21 [ 578.038136][ T8706] usb 5-1: config 0 descriptor?? [ 578.089057][ T8706] option 5-1:0.0: GSM modem (1-port) converter detected [ 578.445977][ T8706] usb 5-1: USB disconnect, device number 8 [ 578.489075][ T8706] option 5-1:0.0: device disconnected [ 578.687277][ T1110] tipc: TX() has been purged, node left! [ 578.699022][ T1110] tipc: TX() has been purged, node left! [ 578.729055][ T1110] tipc: TX() has been purged, node left! [ 578.799117][ T1110] tipc: TX() has been purged, node left! 01:59:33 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:33 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x58, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh]}}}}}}}, 0x0) 01:59:33 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x39, 0x1000, 0x1}, 0x20) 01:59:33 executing program 4: syz_usb_connect(0x0, 0x15b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}, @uac_as={[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "d3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "03d4d7d61d6e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "378dc2f259985bc76e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a675f9b4dc593e629c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) 01:59:34 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 579.452780][T17423] IPVS: ftp: loaded support on port[0] = 21 01:59:34 executing program 5: 01:59:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x39, 0x1000, 0x1}, 0x20) [ 579.740518][T10289] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 579.759966][T17430] IPVS: ftp: loaded support on port[0] = 21 [ 580.000509][T10289] usb 5-1: Using ep0 maxpacket: 32 [ 580.131271][T10289] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 580.140393][T10289] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 01:59:35 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x39, 0x1000, 0x1}, 0x20) 01:59:35 executing program 5: [ 580.579947][T10289] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 580.589166][T10289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.597521][T10289] usb 5-1: Product: syz [ 580.602023][T10289] usb 5-1: Manufacturer: syz [ 580.606748][T10289] usb 5-1: SerialNumber: syz [ 580.702114][T10289] usb 5-1: config 0 descriptor?? [ 580.758088][T10289] option 5-1:0.0: GSM modem (1-port) converter detected 01:59:35 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:35 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:35 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 581.105162][T10289] usb 5-1: USB disconnect, device number 9 [ 581.113682][T10289] option 5-1:0.0: device disconnected 01:59:35 executing program 5: 01:59:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '%'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 581.375934][T17501] IPVS: ftp: loaded support on port[0] = 21 [ 581.667999][T17507] IPVS: ftp: loaded support on port[0] = 21 01:59:36 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 01:59:36 executing program 4: 01:59:37 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:37 executing program 5: 01:59:37 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 01:59:37 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '%'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 582.774661][T17538] IPVS: ftp: loaded support on port[0] = 21 01:59:37 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 01:59:39 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:39 executing program 4: 01:59:39 executing program 5: 01:59:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '%'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:39 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:39 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 584.768434][T17577] IPVS: ftp: loaded support on port[0] = 21 01:59:39 executing program 4: 01:59:39 executing program 5: [ 585.352074][T17586] IPVS: ftp: loaded support on port[0] = 21 01:59:40 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:40 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], '%L'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:40 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:40 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 586.133843][T17620] IPVS: ftp: loaded support on port[0] = 21 [ 586.603237][ T1110] tipc: TX() has been purged, node left! [ 586.626129][ T1110] tipc: TX() has been purged, node left! [ 586.652497][ T1110] tipc: TX() has been purged, node left! 01:59:41 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000100013"], 0x1a4}}, 0x0) 01:59:41 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:41 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], '%L'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:41 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:41 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 01:59:41 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x0, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:41 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], '%L'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4008556c, 0x0) [ 587.390302][T17670] IPVS: ftp: loaded support on port[0] = 21 [ 587.469152][T17671] IPVS: ftp: loaded support on port[0] = 21 01:59:42 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf, 0xf, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x2d, 0x1000, 0x1}, 0x20) 01:59:42 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x0, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1276, 0xffffffffffffffff) [ 590.430930][ T1110] tipc: TX() has been purged, node left! [ 590.439581][ T1110] tipc: TX() has been purged, node left! 01:59:45 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf, 0xf, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x2d, 0x1000, 0x1}, 0x20) 01:59:45 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 01:59:45 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x0, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:45 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 590.921574][T17736] IPVS: ftp: loaded support on port[0] = 21 01:59:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf, 0xf, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x2d, 0x1000, 0x1}, 0x20) [ 591.175139][T17739] EXT4-fs (loop5): Unsupported filesystem blocksize 16777216 (14 log_block_size) 01:59:45 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x0, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 591.317516][T17739] EXT4-fs (loop5): Unsupported filesystem blocksize 16777216 (14 log_block_size) [ 591.411190][T17748] IPVS: ftp: loaded support on port[0] = 21 01:59:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:46 executing program 4: syz_usb_connect(0x0, 0x15b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x0, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}, @uac_as={[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "d3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "03d4d7d61d6e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "378dc2f259985bc76e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a675f9b4dc593e629c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) 01:59:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x0, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:46 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x0, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 592.362864][T17801] EXT4-fs (loop5): Unsupported filesystem blocksize 16777216 (14 log_block_size) 01:59:47 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:47 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x0, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:47 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x68, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x0, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 592.543798][T11674] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 592.804207][T17808] IPVS: ftp: loaded support on port[0] = 21 01:59:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) [ 592.866362][T11674] usb 5-1: device descriptor read/64, error 18 01:59:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x0, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 593.161836][T17814] IPVS: ftp: loaded support on port[0] = 21 [ 593.315854][T11674] usb 5-1: device descriptor read/64, error 18 01:59:48 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x50, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}]}}}}}}}, 0x0) [ 593.587552][T11674] usb 5-1: new high-speed USB device number 11 using dummy_hcd 01:59:48 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 593.792885][T17830] EXT4-fs (loop5): Unsupported filesystem blocksize 16777216 (14 log_block_size) [ 593.875027][T11674] usb 5-1: device descriptor read/64, error 18 01:59:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x39, 0x1000, 0x1}, 0x20) [ 594.335771][T17868] IPVS: ftp: loaded support on port[0] = 21 [ 594.390960][T11674] usb 5-1: device descriptor read/64, error 18 [ 594.558912][T11674] usb usb5-port1: attempt power cycle 01:59:50 executing program 4: syz_usb_connect(0x0, 0x15b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x0, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}, @uac_as={[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "d3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "03d4d7d61d6e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "378dc2f259985bc76e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a675f9b4dc593e629c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) 01:59:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:50 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x50, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}]}}}}}}}, 0x0) 01:59:50 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x39, 0x1000, 0x1}, 0x20) 01:59:50 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 595.530196][T17901] IPVS: ftp: loaded support on port[0] = 21 [ 595.643645][T17904] IPVS: ftp: loaded support on port[0] = 21 [ 596.017152][T17907] EXT4-fs (loop5): Unsupported filesystem blocksize 16777216 (14 log_block_size) 01:59:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x39, 0x1000, 0x1}, 0x20) 01:59:51 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x50, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}]}}}}}}}, 0x0) 01:59:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:51 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 596.670404][ T1110] tipc: TX() has been purged, node left! 01:59:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x0, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:51 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 596.757456][ T1110] tipc: TX() has been purged, node left! [ 596.787156][ T1110] tipc: TX() has been purged, node left! [ 596.796922][ T8704] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 596.840271][ T1110] tipc: TX() has been purged, node left! [ 597.077079][ T8704] usb 5-1: device descriptor read/64, error 18 [ 597.228058][T17973] IPVS: ftp: loaded support on port[0] = 21 [ 597.230579][T17971] IPVS: ftp: loaded support on port[0] = 21 [ 597.594126][ T8704] usb 5-1: device descriptor read/64, error 18 [ 597.863936][ T8704] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 598.134138][ T8704] usb 5-1: device descriptor read/64, error 18 [ 598.548272][ T8704] usb 5-1: device descriptor read/64, error 18 [ 598.675184][ T8704] usb usb5-port1: attempt power cycle 01:59:53 executing program 4: syz_usb_connect(0x0, 0x15b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x0, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}, @uac_as={[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "d3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "03d4d7d61d6e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "378dc2f259985bc76e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a675f9b4dc593e629c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) 01:59:53 executing program 0: syz_emit_ethernet(0x8e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x58, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh]}}}}}}}, 0x0) 01:59:53 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x0, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:53 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 599.432904][T18043] IPVS: ftp: loaded support on port[0] = 21 01:59:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:54 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x0, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:54 executing program 0: syz_emit_ethernet(0x8e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x58, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh]}}}}}}}, 0x0) [ 600.169905][ T8704] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 600.287577][ T8704] usb 5-1: Invalid ep0 maxpacket: 0 [ 600.453648][ T8704] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 600.543121][ T8704] usb 5-1: Invalid ep0 maxpacket: 0 [ 600.549876][ T8704] usb usb5-port1: unable to enumerate USB device 01:59:55 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 01:59:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:55 executing program 0: syz_emit_ethernet(0x8e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x58, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3a], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh]}}}}}}}, 0x0) [ 601.097428][T18087] IPVS: ftp: loaded support on port[0] = 21 01:59:56 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 602.388577][T18116] IPVS: ftp: loaded support on port[0] = 21 [ 602.457655][ T1110] tipc: TX() has been purged, node left! [ 602.466814][ T1110] tipc: TX() has been purged, node left! [ 602.492615][ T1110] tipc: TX() has been purged, node left! 01:59:57 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}]}}]}}, 0x0) 01:59:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:57 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x48, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 01:59:57 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 602.949288][T18137] IPVS: ftp: loaded support on port[0] = 21 01:59:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:58 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x48, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 01:59:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 603.582173][T12497] usb 5-1: new high-speed USB device number 17 using dummy_hcd 01:59:58 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x48, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 603.832789][T12497] usb 5-1: Using ep0 maxpacket: 32 01:59:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 01:59:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) [ 604.123522][T12497] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 604.132893][T12497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.141023][T12497] usb 5-1: Product: syz [ 604.145511][T12497] usb 5-1: Manufacturer: syz [ 604.150249][T12497] usb 5-1: SerialNumber: syz [ 604.306372][T12497] usb 5-1: config 0 descriptor?? [ 604.424672][T12497] option 5-1:0.0: GSM modem (1-port) converter detected [ 604.557856][T12497] usb 5-1: USB disconnect, device number 17 [ 604.566930][T12497] option 5-1:0.0: device disconnected 02:00:00 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) 02:00:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) 02:00:00 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x50, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3a]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 02:00:00 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}]}}]}}, 0x0) [ 606.255970][T18221] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 606.561637][ T3223] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 606.681907][T18229] IPVS: ftp: loaded support on port[0] = 21 [ 606.807978][ T3223] usb 5-1: Using ep0 maxpacket: 32 02:00:01 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:01 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x50, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3a]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) 02:00:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) 02:00:01 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) [ 607.092456][ T3223] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 607.101871][ T3223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.110098][ T3223] usb 5-1: Product: syz [ 607.114555][ T3223] usb 5-1: Manufacturer: syz [ 607.119283][ T3223] usb 5-1: SerialNumber: syz [ 607.240089][T18243] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:02 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x50, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast1={0xff, 0x1, [0x7]}, @remote, [@dstopts={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3a]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}}}, 0x0) [ 607.428672][ T3223] usb 5-1: config 0 descriptor?? [ 607.481598][ T3223] option 5-1:0.0: GSM modem (1-port) converter detected 02:00:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 02:00:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) [ 607.680750][ T8991] usb 5-1: USB disconnect, device number 18 [ 607.689359][ T8991] option 5-1:0.0: device disconnected [ 607.846010][T18264] IPVS: ftp: loaded support on port[0] = 21 02:00:02 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 607.905469][ T1110] tipc: TX() has been purged, node left! [ 608.306422][T18289] IPVS: ftp: loaded support on port[0] = 21 [ 608.490638][T18290] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:03 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:03 executing program 0: ioperm(0x0, 0x4, 0x2) 02:00:03 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}]}}]}}, 0x0) 02:00:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 02:00:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)) 02:00:04 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 609.319292][T18335] IPVS: ftp: loaded support on port[0] = 21 02:00:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, 0x0) [ 609.590419][ T8706] usb 5-1: new high-speed USB device number 19 using dummy_hcd 02:00:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) [ 609.822744][T18352] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 609.833324][ T8706] usb 5-1: Using ep0 maxpacket: 32 02:00:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, 0x0) [ 609.996803][T18356] IPVS: ftp: loaded support on port[0] = 21 [ 610.130722][ T8706] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 610.140121][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.148255][ T8706] usb 5-1: Product: syz [ 610.152765][ T8706] usb 5-1: Manufacturer: syz [ 610.157531][ T8706] usb 5-1: SerialNumber: syz [ 610.355598][ T8706] usb 5-1: config 0 descriptor?? [ 610.429629][ T8706] option 5-1:0.0: GSM modem (1-port) converter detected 02:00:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)) 02:00:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) [ 610.632764][ T8706] usb 5-1: USB disconnect, device number 19 [ 610.644273][ T8706] option 5-1:0.0: device disconnected 02:00:05 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, 0x0) [ 611.005164][T18414] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 611.180421][T18417] IPVS: ftp: loaded support on port[0] = 21 02:00:05 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:06 executing program 4: syz_usb_connect(0x0, 0x117, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) 02:00:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) 02:00:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)) 02:00:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, 0x0) [ 611.958409][T18449] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:06 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0xc00c55ca, 0x0) [ 612.174302][T18455] IPVS: ftp: loaded support on port[0] = 21 02:00:06 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) [ 612.421043][ T8706] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 612.566002][T18459] IPVS: ftp: loaded support on port[0] = 21 02:00:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)) 02:00:07 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0xc00c55ca, 0x0) [ 613.205080][ T8706] usb 5-1: Using ep0 maxpacket: 32 02:00:07 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 613.287996][T18488] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 613.330797][ T8706] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 613.340028][ T8706] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) [ 613.541231][ T8706] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 613.550711][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.558845][ T8706] usb 5-1: Product: syz [ 613.563412][ T8706] usb 5-1: Manufacturer: syz [ 613.568148][ T8706] usb 5-1: SerialNumber: syz [ 613.751331][T18495] IPVS: ftp: loaded support on port[0] = 21 [ 613.841753][ T8706] usb 5-1: config 0 descriptor?? [ 613.887033][ T8706] option 5-1:0.0: GSM modem (1-port) converter detected [ 614.144775][T11613] usb 5-1: USB disconnect, device number 20 [ 614.153443][T11613] option 5-1:0.0: device disconnected [ 614.840081][ T1110] tipc: TX() has been purged, node left! [ 614.874580][ T1110] tipc: TX() has been purged, node left! [ 614.900943][ T1110] tipc: TX() has been purged, node left! [ 614.920040][ T1110] tipc: TX() has been purged, node left! [ 614.928062][ T1110] tipc: TX() has been purged, node left! [ 614.953889][ T1110] tipc: TX() has been purged, node left! 02:00:10 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)) 02:00:10 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0xc00c55ca, 0x0) 02:00:10 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:10 executing program 4: syz_usb_connect(0x0, 0x10e, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0) 02:00:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) 02:00:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x44, 0x1000, 0x1}, 0x20) [ 616.047643][T18547] IPVS: ftp: loaded support on port[0] = 21 [ 616.069065][T18544] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, 0x0) [ 616.319533][ T8706] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 616.344119][T18553] IPVS: ftp: loaded support on port[0] = 21 02:00:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)) 02:00:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) [ 616.568777][ T8706] usb 5-1: Using ep0 maxpacket: 32 [ 616.689846][ T8706] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 616.699099][ T8706] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, 0x0) [ 616.998639][ T8706] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 617.007940][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.016433][ T8706] usb 5-1: Product: syz [ 617.021018][ T8706] usb 5-1: Manufacturer: syz [ 617.025760][ T8706] usb 5-1: SerialNumber: syz [ 617.082358][T18571] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) [ 617.209975][ T8706] usb 5-1: config 0 descriptor?? [ 617.280971][ T8706] option 5-1:0.0: GSM modem (1-port) converter detected [ 617.456124][T11613] usb 5-1: USB disconnect, device number 21 [ 617.465116][T11613] option 5-1:0.0: device disconnected 02:00:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)) 02:00:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) 02:00:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, 0x0) [ 619.538206][T18616] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:14 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:14 executing program 4: syz_usb_connect(0x0, 0xe5, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xc, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}]}}]}}]}}, 0x0) 02:00:14 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0xc00c55ca, 0x0) 02:00:14 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8d4b357591411c81b"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000}, 0x20) 02:00:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)) [ 620.227649][T10231] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 620.288265][T18627] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 620.308042][T18625] IPVS: ftp: loaded support on port[0] = 21 02:00:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000}, 0x20) [ 620.445825][T18636] IPVS: ftp: loaded support on port[0] = 21 02:00:15 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0xc00c55ca, 0x0) [ 620.656501][T10231] usb 5-1: Using ep0 maxpacket: 32 [ 620.809392][T10231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 620.818539][T10231] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)) [ 621.118856][T10231] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 621.128242][T10231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.136353][T10231] usb 5-1: Product: syz [ 621.140860][T10231] usb 5-1: Manufacturer: syz [ 621.145580][T10231] usb 5-1: SerialNumber: syz 02:00:15 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 621.360011][T10231] usb 5-1: config 0 descriptor?? [ 621.405289][T10231] option 5-1:0.0: GSM modem (1-port) converter detected 02:00:16 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x30e, [{0x2, 0x0, 0x20}], "9d"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000}, 0x20) 02:00:16 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0xc00c55ca, 0x0) [ 621.649663][T11613] usb 5-1: USB disconnect, device number 22 [ 621.658739][T11613] option 5-1:0.0: device disconnected [ 621.694692][T18696] IPVS: ftp: loaded support on port[0] = 21 [ 621.714206][T18692] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 622.414335][T18713] IPVS: ftp: loaded support on port[0] = 21 02:00:17 executing program 4: syz_usb_connect(0x0, 0xce, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xb, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) 02:00:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e00000001", 0x1d, 0x400}], 0x0, &(0x7f0000000240)) 02:00:17 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 622.536171][ T1110] tipc: TX() has been purged, node left! 02:00:17 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000440), 0x4) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000003c0)={0x0, 0x13, 0xd, 0xd, 0x0, 0x4, 0x1, 0x0, 0x1}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x9010, 0x0, 0x7f, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x8) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xfffffffa) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x5890, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f0000001240)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="7fcdd9000000000fc31e73ad414254b9173b5acac4df6e00000b6f6e3d3973"]) [ 622.582394][ T1110] tipc: TX() has been purged, node left! 02:00:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet6(0xa, 0x3, 0x6) dup2(r1, r0) [ 623.023100][T18752] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 623.047521][T18751] IPVS: ftp: loaded support on port[0] = 21 02:00:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 623.216895][ T3223] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 623.478097][ T3223] usb 5-1: Using ep0 maxpacket: 32 02:00:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e00000001", 0x1d, 0x400}], 0x0, &(0x7f0000000240)) [ 623.628547][ T3223] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 623.637729][ T3223] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 623.886998][ T3223] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 623.896300][ T3223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.904965][ T3223] usb 5-1: Product: syz [ 623.909342][ T3223] usb 5-1: Manufacturer: syz [ 623.914088][ T3223] usb 5-1: SerialNumber: syz 02:00:18 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 624.136036][ T3223] usb 5-1: config 0 descriptor?? [ 624.210455][T18803] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 624.217965][ T3223] option 5-1:0.0: GSM modem (1-port) converter detected [ 624.385646][T10231] usb 5-1: USB disconnect, device number 23 [ 624.395086][T10231] option 5-1:0.0: device disconnected 02:00:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e00000001", 0x1d, 0x400}], 0x0, &(0x7f0000000240)) [ 624.560550][T18815] IPVS: ftp: loaded support on port[0] = 21 02:00:19 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lstat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./bus\x00', 0xee01, r0) chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) 02:00:19 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:19 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:19 executing program 4: syz_usb_connect(0x0, 0xbe, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xa, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}]}}]}}]}}, 0x0) [ 625.438682][T18843] IPVS: ftp: loaded support on port[0] = 21 [ 625.516161][T18844] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 625.924311][T18855] IPVS: ftp: loaded support on port[0] = 21 02:00:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d225000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)) [ 626.686288][T10231] usb 5-1: new high-speed USB device number 24 using dummy_hcd 02:00:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lstat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./bus\x00', 0xee01, r0) chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) 02:00:21 executing program 3: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6000001, 0x4031, 0xffffffffffffffff, 0xd1ebd000) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) [ 626.924813][T18899] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 626.932769][T10231] usb 5-1: Using ep0 maxpacket: 32 [ 627.056243][T10231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 627.065607][T10231] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:21 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 627.287086][T10231] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 627.296610][T10231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.304775][T10231] usb 5-1: Product: syz [ 627.309307][T10231] usb 5-1: Manufacturer: syz [ 627.314036][T10231] usb 5-1: SerialNumber: syz 02:00:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d225000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)) [ 627.455078][T10231] usb 5-1: config 0 descriptor?? [ 627.566641][T10231] option 5-1:0.0: GSM modem (1-port) converter detected [ 627.758201][T11611] usb 5-1: USB disconnect, device number 24 [ 627.767226][T11611] option 5-1:0.0: device disconnected [ 627.854833][T18923] IPVS: ftp: loaded support on port[0] = 21 02:00:22 executing program 3: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6000001, 0x4031, 0xffffffffffffffff, 0xd1ebd000) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) [ 628.036985][T18933] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:23 executing program 4: syz_usb_connect(0x0, 0xb5, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x9, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}]}}]}}]}}, 0x0) 02:00:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d225000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)) 02:00:23 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6000001, 0x4031, 0xffffffffffffffff, 0xd1ebd000) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) [ 629.139202][T18971] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 629.298106][T11611] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 629.545305][T11611] usb 5-1: Using ep0 maxpacket: 32 [ 629.669061][T11611] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 629.678315][T11611] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 629.791987][ T1110] tipc: TX() has been purged, node left! [ 629.820548][ T1110] tipc: TX() has been purged, node left! [ 629.846451][ T1110] tipc: TX() has been purged, node left! [ 629.848347][T11611] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 629.861521][T11611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.869871][T11611] usb 5-1: Product: syz [ 629.874203][T11611] usb 5-1: Manufacturer: syz [ 629.879034][T11611] usb 5-1: SerialNumber: syz [ 629.890482][ T1110] tipc: TX() has been purged, node left! [ 629.960486][T11611] usb 5-1: config 0 descriptor?? [ 630.014677][T11611] option 5-1:0.0: GSM modem (1-port) converter detected [ 630.216246][T11611] usb 5-1: USB disconnect, device number 25 [ 630.223713][T11611] option 5-1:0.0: device disconnected 02:00:25 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:25 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)) 02:00:25 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) 02:00:25 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6000001, 0x4031, 0xffffffffffffffff, 0xd1ebd000) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) [ 630.571541][T18998] IPVS: ftp: loaded support on port[0] = 21 [ 630.815147][T19000] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 630.908602][T19008] IPVS: ftp: loaded support on port[0] = 21 02:00:26 executing program 4: syz_usb_connect(0x0, 0xac, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x8, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}]}}]}}]}}, 0x0) 02:00:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)) 02:00:26 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6000001, 0x4031, 0xffffffffffffffff, 0xd1ebd000) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) [ 631.818178][T19016] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)) [ 632.138116][T12374] usb 5-1: new high-speed USB device number 26 using dummy_hcd 02:00:27 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) [ 632.394846][T12374] usb 5-1: Using ep0 maxpacket: 32 [ 632.516075][T12374] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 632.525219][T12374] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 632.658975][T19030] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 632.746213][T12374] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 632.755501][T12374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.763623][T12374] usb 5-1: Product: syz [ 632.768085][T12374] usb 5-1: Manufacturer: syz [ 632.772820][T12374] usb 5-1: SerialNumber: syz 02:00:27 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6000001, 0x4031, 0xffffffffffffffff, 0xd1ebd000) [ 633.063788][T12374] usb 5-1: config 0 descriptor?? 02:00:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)) [ 633.147426][T12374] option 5-1:0.0: GSM modem (1-port) converter detected [ 633.325160][ T8706] usb 5-1: USB disconnect, device number 26 [ 633.333932][ T8706] option 5-1:0.0: device disconnected [ 633.762752][T19048] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:30 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:30 executing program 4: syz_usb_connect(0x0, 0x93, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x7, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) 02:00:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)) 02:00:30 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6000001, 0x4031, 0xffffffffffffffff, 0xd1ebd000) 02:00:30 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xb4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x6a0a2100, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x4) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) connect(r1, &(0x7f0000000080)=@in6={0xa, 0x4e23, 0x1, @remote, 0x800}, 0x80) ptrace(0x10, r0) wait4(0x0, 0x0, 0x8, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_SWAP(r2, 0x0, 0x1) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r6, 0x4040ae75, &(0x7f0000000040)) 02:00:30 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 635.990214][T19064] IPVS: ftp: loaded support on port[0] = 21 [ 636.016025][T19071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19071 comm=syz-executor.3 [ 636.053052][T19065] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 636.067099][T19067] ptrace attach of "/root/syz-executor.3"[19064] was attempted by "/root/syz-executor.3"[19067] [ 636.149321][T19076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 636.234777][T10231] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 636.333294][T19081] IPVS: ftp: loaded support on port[0] = 21 [ 636.394479][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 636.458165][T19086] IPVS: ftp: loaded support on port[0] = 21 [ 636.647311][T19071] IPVS: ftp: loaded support on port[0] = 21 [ 636.738201][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 636.793954][T10231] usb 5-1: Using ep0 maxpacket: 32 02:00:31 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) [ 637.005291][T10231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 637.014606][T10231] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:31 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)) [ 637.385203][T10231] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 637.395089][T10231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.403224][T10231] usb 5-1: Product: syz [ 637.407710][T10231] usb 5-1: Manufacturer: syz [ 637.412516][T10231] usb 5-1: SerialNumber: syz [ 637.615800][T10231] usb 5-1: config 0 descriptor?? [ 637.662906][T10231] option 5-1:0.0: GSM modem (1-port) converter detected [ 637.797268][T19139] IPVS: ftp: loaded support on port[0] = 21 02:00:32 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 637.884467][T10231] usb 5-1: USB disconnect, device number 27 [ 637.893184][T10231] option 5-1:0.0: device disconnected [ 637.960989][ T1110] tipc: TX() has been purged, node left! [ 638.088712][T19155] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 638.415701][T19162] IPVS: ftp: loaded support on port[0] = 21 02:00:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)) 02:00:33 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) 02:00:33 executing program 4: syz_usb_connect(0x0, 0x83, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x6, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) 02:00:34 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 639.530534][T19207] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 639.803850][T11611] usb 5-1: new high-speed USB device number 28 using dummy_hcd 02:00:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)) [ 640.043847][T11611] usb 5-1: Using ep0 maxpacket: 32 [ 640.163446][T11611] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 640.172674][T11611] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 640.366094][T19233] IPVS: ftp: loaded support on port[0] = 21 [ 640.477242][T19234] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 640.562597][T11611] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 640.571953][T11611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.580397][T11611] usb 5-1: Product: syz [ 640.585127][T11611] usb 5-1: Manufacturer: syz [ 640.589867][T11611] usb 5-1: SerialNumber: syz 02:00:35 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) signalfd4(r3, &(0x7f0000000040)={[0x3, 0x7fff]}, 0x8, 0x800) [ 640.896138][T11611] usb 5-1: config 0 descriptor?? [ 640.941197][T11611] option 5-1:0.0: GSM modem (1-port) converter detected [ 641.242876][ T8704] usb 5-1: USB disconnect, device number 28 [ 641.251599][ T8704] option 5-1:0.0: device disconnected [ 642.772645][ T1110] tipc: TX() has been purged, node left! [ 642.808478][ T1110] tipc: TX() has been purged, node left! 02:00:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') socket$netlink(0x10, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f00000000c0)={0x0, 0xe1f, 0x10de0000000}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:00:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)) 02:00:37 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:37 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:37 executing program 4: syz_usb_connect(0x0, 0x73, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x5, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}]}}]}}]}}, 0x0) 02:00:37 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) [ 643.054817][T19283] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 643.273891][T19287] IPVS: ftp: loaded support on port[0] = 21 02:00:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)) [ 643.562806][ T8704] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 643.687381][T19301] IPVS: ftp: loaded support on port[0] = 21 [ 643.852647][ T8704] usb 5-1: Using ep0 maxpacket: 32 [ 643.919875][T19316] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 644.012657][ T8704] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 644.021865][ T8704] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)) 02:00:39 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r3, 0x0, 0x1000, 0x80, &(0x7f00000004c0)) [ 644.284792][ T8704] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 644.294124][ T8704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.302548][ T8704] usb 5-1: Product: syz [ 644.306842][ T8704] usb 5-1: Manufacturer: syz [ 644.311560][ T8704] usb 5-1: SerialNumber: syz 02:00:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @empty}, {0x1, @broadcast}, 0x2, {0x2, 0x0, @local}, 'dummy0\x00'}) [ 644.511755][ T8704] usb 5-1: config 0 descriptor?? [ 644.594165][ T8704] option 5-1:0.0: GSM modem (1-port) converter detected [ 644.702294][T19357] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 644.760041][ T8704] usb 5-1: USB disconnect, device number 29 [ 644.769064][ T8704] option 5-1:0.0: device disconnected 02:00:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)) 02:00:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) write$tun(r0, &(0x7f0000000280)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @random="090986251a20", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2900}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x4}}}}}}}}, 0x6a) [ 645.483751][T19392] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:00:40 executing program 4: syz_usb_connect(0x0, 0x68, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}]}}]}}]}}, 0x0) 02:00:40 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) [ 646.494797][T12374] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 646.762238][T12374] usb 5-1: Using ep0 maxpacket: 32 [ 646.892885][T12374] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 646.902062][T12374] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 647.131946][T12374] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 647.141196][T12374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.149689][T12374] usb 5-1: Product: syz [ 647.154144][T12374] usb 5-1: Manufacturer: syz [ 647.158914][T12374] usb 5-1: SerialNumber: syz [ 647.224258][T12374] usb 5-1: config 0 descriptor?? [ 647.269223][T12374] option 5-1:0.0: GSM modem (1-port) converter detected [ 647.467522][T12374] usb 5-1: USB disconnect, device number 30 [ 647.476531][T12374] option 5-1:0.0: device disconnected 02:00:42 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 02:00:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xf0, 0x404) 02:00:42 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sync_file_range(r0, 0xb2, 0xca6, 0x0) 02:00:42 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 648.182388][T19440] IPVS: ftp: loaded support on port[0] = 21 02:00:42 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) [ 648.410586][T19447] IPVS: ftp: loaded support on port[0] = 21 02:00:43 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x0, 0x0, 0x12c, 0xffffffff, 0xffffffff, 0x1e4, 0x1e4, 0x1e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'veth1_to_bond\x00', 'ip_vti0\x00', {}, {}, 0x2, 0x0, 0x45}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6_vti0\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@tos={{0x24, 'tos\x00'}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2d4) getpid() 02:00:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 02:00:43 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) 02:00:44 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 649.301343][T11674] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 649.567891][T11674] usb 5-1: Using ep0 maxpacket: 32 [ 649.578204][ T1110] tipc: TX() has been purged, node left! [ 649.697620][ T29] audit: type=1804 audit(1596852044.409:11): pid=19514 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/194/bus" dev="sda1" ino=16362 res=1 [ 649.722597][T11674] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 649.731899][T11674] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 649.989450][ T29] audit: type=1804 audit(1596852044.449:12): pid=19513 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/194/bus" dev="sda1" ino=16362 res=1 [ 650.014376][ T29] audit: type=1804 audit(1596852044.489:13): pid=19514 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/194/bus" dev="sda1" ino=16362 res=1 02:00:44 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 02:00:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90e000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) [ 650.039367][ T29] audit: type=1804 audit(1596852044.489:14): pid=19518 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/194/bus" dev="sda1" ino=16362 res=1 02:00:44 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 650.081805][T11674] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 650.091315][T11674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.099446][T11674] usb 5-1: Product: syz [ 650.104506][T11674] usb 5-1: Manufacturer: syz [ 650.109242][T11674] usb 5-1: SerialNumber: syz [ 650.261622][T11674] usb 5-1: config 0 descriptor?? [ 650.309493][T11674] option 5-1:0.0: GSM modem (1-port) converter detected [ 650.526301][T11674] usb 5-1: USB disconnect, device number 31 [ 650.535235][T11674] option 5-1:0.0: device disconnected [ 650.643986][T19543] IPVS: ftp: loaded support on port[0] = 21 02:00:45 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) [ 650.808141][ T29] audit: type=1804 audit(1596852045.519:15): pid=19549 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/195/bus" dev="sda1" ino=16366 res=1 [ 650.969719][ T29] audit: type=1804 audit(1596852045.649:16): pid=19553 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/195/bus" dev="sda1" ino=16366 res=1 02:00:46 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x28}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 02:00:46 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) [ 651.669357][T19582] ptrace attach of "/root/syz-executor.5"[19580] was attempted by "/root/syz-executor.5"[19582] [ 652.110671][T11611] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 652.352303][T11611] usb 5-1: Using ep0 maxpacket: 32 02:00:47 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:00:47 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, 0x0, 0x0, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:47 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=')', 0x1}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) [ 652.481842][T11611] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 652.490989][T11611] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:47 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0, 0x0) [ 652.700874][T11611] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 652.710161][T11611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.719262][T11611] usb 5-1: Product: syz [ 652.723643][T11611] usb 5-1: Manufacturer: syz [ 652.728456][T11611] usb 5-1: SerialNumber: syz [ 652.852850][T19598] IPVS: ftp: loaded support on port[0] = 21 [ 652.911790][T19600] IPVS: ftp: loaded support on port[0] = 21 02:00:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capget(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)) [ 652.992475][T19602] ptrace attach of "/root/syz-executor.5"[19607] was attempted by "/root/syz-executor.5"[19602] [ 653.065973][T11611] usb 5-1: config 0 descriptor?? [ 653.206797][T11611] option 5-1:0.0: GSM modem (1-port) converter detected [ 653.337862][T11611] usb 5-1: USB disconnect, device number 32 [ 653.346876][T11611] option 5-1:0.0: device disconnected 02:00:48 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0, 0x0) 02:00:48 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}}, 0x0) 02:00:48 executing program 3: socket$inet(0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8000, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000002380)='y\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x59) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000001c0)="b9800000c03500400000665c0f5d0202f50fdb09fbfb20e035c4e17de74b064000c4636569b3ce0fc7735126660f388077694f4f0f5c19db3a9af342d8868680000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x57}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002400)='/dev/vcs\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002480)={r3, 0x28, &(0x7f0000002440)}, 0x10) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff54, {0x6000, 0xe000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:00:48 executing program 4: syz_usb_connect(0x0, 0x4f, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}]}}]}}]}}, 0x0) [ 654.194710][ T1110] tipc: TX() has been purged, node left! 02:00:49 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, 0x0, 0x0, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:49 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0, 0x0) [ 654.881362][T11611] usb 5-1: new high-speed USB device number 33 using dummy_hcd 02:00:49 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 655.027027][T19691] IPVS: ftp: loaded support on port[0] = 21 [ 655.120478][T11611] usb 5-1: Using ep0 maxpacket: 32 [ 655.241662][T11611] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 655.242798][T19696] IPVS: ftp: loaded support on port[0] = 21 [ 655.250927][T11611] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902040000020000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) [ 655.542026][T11611] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 655.551414][T11611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.559530][T11611] usb 5-1: Product: syz [ 655.564031][T11611] usb 5-1: Manufacturer: syz [ 655.568747][T11611] usb 5-1: SerialNumber: syz [ 655.818270][T11611] usb 5-1: config 0 descriptor?? [ 655.937393][T11611] option 5-1:0.0: GSM modem (1-port) converter detected [ 655.990369][T19729] EXT4-fs (loop3): Invalid log block size: 1026 02:00:50 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:00:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12d, 0x12d, 0x3, [@restrict, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @array, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], 'u'}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x14b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 656.138340][T19729] EXT4-fs (loop3): Invalid log block size: 1026 [ 656.250359][T11611] usb 5-1: USB disconnect, device number 33 [ 656.258969][T11611] option 5-1:0.0: device disconnected 02:00:51 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, 0x0, 0x0, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:51 executing program 3: rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x10804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002e0, 0xe, 0x80000, &(0x7f0000000280)="b95b03b700030005439e40f088a8", 0x0, 0x1a4, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) [ 656.674363][T19751] ptrace attach of "/root/syz-executor.5"[19750] was attempted by "/root/syz-executor.5"[19751] 02:00:51 executing program 4: syz_usb_connect(0x0, 0x4f, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}]}}]}}]}}, 0x0) 02:00:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) prlimit64(0x0, 0xb, &(0x7f00000001c0), 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r2) tkill(r2, 0x14) 02:00:51 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 657.004644][T19755] IPVS: ftp: loaded support on port[0] = 21 [ 657.790321][T11611] usb 5-1: new high-speed USB device number 34 using dummy_hcd 02:00:52 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 658.030214][T11611] usb 5-1: Using ep0 maxpacket: 32 [ 658.150499][T11611] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 658.159776][T11611] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 658.407965][T11611] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 658.417282][T11611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.425585][T11611] usb 5-1: Product: syz [ 658.430032][T11611] usb 5-1: Manufacturer: syz [ 658.434750][T11611] usb 5-1: SerialNumber: syz [ 658.479721][T11611] usb 5-1: config 0 descriptor?? [ 658.515608][ T1110] tipc: TX() has been purged, node left! [ 658.530305][T11611] option 5-1:0.0: GSM modem (1-port) converter detected [ 658.544960][ T1110] tipc: TX() has been purged, node left! [ 658.553189][ T1110] tipc: TX() has been purged, node left! [ 658.581655][ T1110] tipc: TX() has been purged, node left! [ 658.733408][T11611] usb 5-1: USB disconnect, device number 34 [ 658.742067][T11611] option 5-1:0.0: device disconnected 02:00:53 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:53 executing program 3: syz_mount_image$f2fs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 02:00:53 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:53 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 659.091312][T19811] IPVS: ftp: loaded support on port[0] = 21 02:00:54 executing program 4: syz_usb_connect(0x0, 0x46, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) [ 659.610628][T19821] IPVS: ftp: loaded support on port[0] = 21 02:00:54 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:00:54 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x17, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000080)="59a5be2a856f081130d586c3ab40bcf94dbe19fe942f9a", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600}) prctl$PR_CAPBSET_READ(0x17, 0x0) gettid() r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000000)) ptrace$getregset(0x4, 0x0, 0x8048000, 0x0) [ 660.439274][T12497] usb 5-1: new high-speed USB device number 35 using dummy_hcd 02:00:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000080)="59a5be2a856f081130d5", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600}) prctl$PR_CAPBSET_READ(0x17, 0x0) gettid() r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x16, &(0x7f0000000000)) ptrace$getregset(0x4, r1, 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) 02:00:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x7, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000080)="59a5be2a856f08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600}) getpid() 02:00:55 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 660.680335][T12497] usb 5-1: Using ep0 maxpacket: 32 [ 660.800695][T12497] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 660.809938][T12497] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:55 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 661.072380][T19860] IPVS: ftp: loaded support on port[0] = 21 [ 661.128718][T12497] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 661.138057][T12497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.146495][T12497] usb 5-1: Product: syz [ 661.150873][T12497] usb 5-1: Manufacturer: syz [ 661.155614][T12497] usb 5-1: SerialNumber: syz [ 661.265768][T12497] usb 5-1: config 0 descriptor?? [ 661.327615][T12497] option 5-1:0.0: GSM modem (1-port) converter detected [ 661.559675][T12497] usb 5-1: USB disconnect, device number 35 [ 661.568323][T12497] option 5-1:0.0: device disconnected 02:00:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 02:00:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 02:00:56 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:00:57 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:57 executing program 4: syz_usb_connect(0x0, 0x46, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) 02:00:57 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:00:57 executing program 5: ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x41, &(0x7f0000000200)="dfe34f96c1e53bdf77f7f24d3fdfcd8e7dea8c070c451984bf79bb4ba3585d1701329c2dfdc1a6b765a4018b60ce2e4788bdf2c934c42bb0eb7ae6f6816da37139"}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a904000000000000004e2f98b579a782d257146d0e0206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) 02:00:57 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 663.256362][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 663.326314][T19926] IPVS: ftp: loaded support on port[0] = 21 [ 663.434799][T19927] EXT4-fs (loop5): Unrecognized mount option "data=journp" or missing value [ 663.568653][ T8704] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 663.828829][ T8704] usb 5-1: Using ep0 maxpacket: 32 02:00:58 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 663.971637][T19949] IPVS: ftp: loaded support on port[0] = 21 [ 664.049945][ T8704] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 664.059109][ T8704] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:00:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000060bc7d94007d2c0004010000000000000000000000000000ff020000000000000000000000000001"], 0xaf) 02:00:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x8001141042, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ftruncate(r2, 0x0) [ 664.250861][ T8704] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 664.260200][ T8704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.268536][ T8704] usb 5-1: Product: syz [ 664.272838][ T8704] usb 5-1: Manufacturer: syz [ 664.277570][ T8704] usb 5-1: SerialNumber: syz [ 664.444126][ T8704] usb 5-1: config 0 descriptor?? [ 664.499045][ T8704] option 5-1:0.0: GSM modem (1-port) converter detected 02:00:59 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:00:59 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 664.735661][T10231] usb 5-1: USB disconnect, device number 36 [ 664.744762][T10231] option 5-1:0.0: device disconnected [ 664.896583][ T29] audit: type=1804 audit(1596852059.612:17): pid=19994 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/205/bus" dev="sda1" ino=16362 res=1 [ 665.011938][ T29] audit: type=1804 audit(1596852059.672:18): pid=19994 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/205/bus" dev="sda1" ino=16362 res=1 [ 665.031342][T20008] IPVS: ftp: loaded support on port[0] = 21 [ 665.036906][ T29] audit: type=1804 audit(1596852059.682:19): pid=19999 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir868558321/syzkaller.njQrQ3/205/bus" dev="sda1" ino=16362 res=1 02:01:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xeb, &(0x7f0000000580)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e165224897ba4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad84c998bd2f7155d302a7be122bb1609f8b0164eb12c07a0200169c864e1d5f8179cba2e43112cfb22fcd74713b3c6de0592538cbaa3815a784395a80adbe3e983622703c353d66482824849f7292e0b07a3ce8e5928ba8a827a26e6536c0f704bcbc0159fc3e30e4bafef10600a07ce3d96f546e65fab4000b66c7d5f9a96b5557d63adcf56296204d29"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:01:00 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:00 executing program 4: syz_usb_connect(0x0, 0x46, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) 02:01:00 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 665.862912][T20020] IPVS: ftp: loaded support on port[0] = 21 02:01:01 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 666.437419][ T1110] tipc: TX() has been purged, node left! [ 666.462455][ T1110] tipc: TX() has been purged, node left! [ 666.651514][T12371] usb 5-1: new high-speed USB device number 37 using dummy_hcd 02:01:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x29, 0x29, 0x2, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'u'}]}}, 0x0, 0x46}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) [ 666.743060][ T1110] tipc: TX() has been purged, node left! [ 666.899434][T12371] usb 5-1: Using ep0 maxpacket: 32 [ 667.030474][T12371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 667.039606][T12371] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:01:01 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 667.280270][T12371] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 667.289700][T12371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.297985][T12371] usb 5-1: Product: syz [ 667.302293][T12371] usb 5-1: Manufacturer: syz [ 667.307014][T12371] usb 5-1: SerialNumber: syz [ 667.456027][T12371] usb 5-1: config 0 descriptor?? 02:01:02 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 667.523346][T12371] option 5-1:0.0: GSM modem (1-port) converter detected [ 667.704399][T12371] usb 5-1: USB disconnect, device number 37 [ 667.713133][T12371] option 5-1:0.0: device disconnected [ 667.854788][T20078] IPVS: ftp: loaded support on port[0] = 21 02:01:03 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x8d, 0xce, 0x76, 0x0, [], [{}]}}]}}]}}, 0x0) 02:01:03 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 669.250234][T12371] usb 5-1: new high-speed USB device number 38 using dummy_hcd 02:01:04 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000080)="59a5be2a856f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600}) rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0) 02:01:04 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:04 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:04 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 669.508317][T12371] usb 5-1: Using ep0 maxpacket: 32 [ 669.631541][T20116] IPVS: ftp: loaded support on port[0] = 21 [ 669.780304][T12371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 669.789427][T12371] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:01:04 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 670.031105][T20122] IPVS: ftp: loaded support on port[0] = 21 [ 670.087887][T12371] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 670.097269][T12371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.105623][T12371] usb 5-1: Product: syz [ 670.110005][T12371] usb 5-1: Manufacturer: syz [ 670.114753][T12371] usb 5-1: SerialNumber: syz 02:01:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) [ 670.522503][T12371] usb 5-1: config 0 descriptor?? 02:01:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000000)=0x49) 02:01:05 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 670.639783][T12371] option 5-1:0.0: GSM modem (1-port) converter detected [ 670.821295][T12371] usb 5-1: USB disconnect, device number 38 [ 670.860180][T12371] option 5-1:0.0: device disconnected 02:01:06 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 671.245382][T20185] IPVS: ftp: loaded support on port[0] = 21 02:01:06 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x8d, 0xce, 0x76, 0x0, [], [{}]}}]}}]}}, 0x0) 02:01:06 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:01:06 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x130, &(0x7f0000000580)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 671.944845][T20205] IPVS: ftp: loaded support on port[0] = 21 02:01:07 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:07 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:01:07 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 672.537906][T10231] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 672.791176][T10231] usb 5-1: Using ep0 maxpacket: 32 [ 672.907400][T10231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 672.916615][T10231] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:01:07 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 673.022649][T20256] IPVS: ftp: loaded support on port[0] = 21 [ 673.118608][T10231] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 673.128012][T10231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.136132][T10231] usb 5-1: Product: syz [ 673.140677][T10231] usb 5-1: Manufacturer: syz [ 673.145399][T10231] usb 5-1: SerialNumber: syz [ 673.509734][T10231] usb 5-1: config 0 descriptor?? 02:01:08 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, 0x0) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 673.567487][T10231] option 5-1:0.0: GSM modem (1-port) converter detected 02:01:08 executing program 3: [ 673.758704][T11611] usb 5-1: USB disconnect, device number 39 [ 673.767620][T11611] option 5-1:0.0: device disconnected 02:01:08 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 674.136016][T20299] IPVS: ftp: loaded support on port[0] = 21 02:01:09 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:09 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x8d, 0xce, 0x76, 0x0, [], [{}]}}]}}]}}, 0x0) 02:01:09 executing program 3: 02:01:09 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, 0x0) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 675.081134][ T1110] tipc: TX() has been purged, node left! [ 675.187642][T20327] IPVS: ftp: loaded support on port[0] = 21 [ 675.299868][T20330] IPVS: ftp: loaded support on port[0] = 21 02:01:10 executing program 5: 02:01:10 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 675.383305][ T1110] tipc: TX() has been purged, node left! [ 675.394610][ T1110] tipc: TX() has been purged, node left! [ 675.423095][ T1110] tipc: TX() has been purged, node left! [ 675.433911][ T1110] tipc: TX() has been purged, node left! [ 675.491830][ T1110] tipc: TX() has been purged, node left! [ 675.626908][ T3223] usb 5-1: new high-speed USB device number 40 using dummy_hcd 02:01:10 executing program 3: [ 675.876782][ T3223] usb 5-1: Using ep0 maxpacket: 32 [ 676.008108][ T3223] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 676.017237][ T3223] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:01:10 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:11 executing program 5: [ 676.208263][ T3223] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 676.217932][ T3223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.226069][ T3223] usb 5-1: Product: syz [ 676.231062][ T3223] usb 5-1: Manufacturer: syz [ 676.235785][ T3223] usb 5-1: SerialNumber: syz [ 676.418209][ T3223] usb 5-1: config 0 descriptor?? 02:01:11 executing program 3: [ 676.474913][ T3223] option 5-1:0.0: GSM modem (1-port) converter detected [ 676.673419][ T3223] usb 5-1: USB disconnect, device number 40 [ 676.690901][ T3223] option 5-1:0.0: device disconnected 02:01:11 executing program 5: 02:01:11 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:11 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:12 executing program 4: syz_usb_connect(0x0, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 02:01:12 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, 0x0) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:12 executing program 3: [ 677.450699][T20403] IPVS: ftp: loaded support on port[0] = 21 02:01:12 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:12 executing program 5: [ 677.803236][T20407] IPVS: ftp: loaded support on port[0] = 21 02:01:12 executing program 3: [ 678.276333][T12371] usb 5-1: new high-speed USB device number 41 using dummy_hcd 02:01:13 executing program 5: [ 678.516539][T12371] usb 5-1: Using ep0 maxpacket: 32 02:01:13 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:13 executing program 3: 02:01:13 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 678.707446][T12371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 678.716650][T12371] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 678.898299][T12371] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 678.907627][T12371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.915765][T12371] usb 5-1: Product: syz [ 678.920226][T12371] usb 5-1: Manufacturer: syz [ 678.924967][T12371] usb 5-1: SerialNumber: syz 02:01:13 executing program 5: 02:01:13 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, 0x0, 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 679.135436][T12371] usb 5-1: config 0 descriptor?? [ 679.204179][T12371] option 5-1:0.0: GSM modem (1-port) converter detected [ 679.335319][T20468] IPVS: ftp: loaded support on port[0] = 21 [ 679.402521][T12371] usb 5-1: USB disconnect, device number 41 [ 679.411353][T12371] option 5-1:0.0: device disconnected [ 679.659199][T20482] IPVS: ftp: loaded support on port[0] = 21 02:01:14 executing program 4: syz_usb_connect(0x0, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 02:01:14 executing program 3: 02:01:14 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:14 executing program 5: 02:01:15 executing program 3: 02:01:15 executing program 5: 02:01:15 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:15 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 680.867192][ T3223] usb 5-1: new high-speed USB device number 42 using dummy_hcd 02:01:15 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, 0x0, 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 681.115848][ T3223] usb 5-1: Using ep0 maxpacket: 32 [ 681.137100][T20542] IPVS: ftp: loaded support on port[0] = 21 02:01:15 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:16 executing program 5: [ 681.331083][ T3223] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 681.340284][ T3223] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:01:16 executing program 3: [ 681.537745][ T3223] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 681.547432][ T3223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.555747][ T3223] usb 5-1: Product: syz [ 681.560030][ T3223] usb 5-1: Manufacturer: syz [ 681.564752][ T3223] usb 5-1: SerialNumber: syz [ 681.877044][T20546] IPVS: ftp: loaded support on port[0] = 21 [ 682.000144][ T3223] usb 5-1: config 0 descriptor?? [ 682.108105][ T3223] option 5-1:0.0: GSM modem (1-port) converter detected [ 682.374604][ T3223] usb 5-1: USB disconnect, device number 42 [ 682.383497][ T3223] option 5-1:0.0: device disconnected 02:01:17 executing program 4: syz_usb_connect(0x0, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 02:01:17 executing program 3: 02:01:17 executing program 5: 02:01:17 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:17 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, 0x0, 0x0, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:17 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, 0x0, 0x4, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 683.077892][T20615] IPVS: ftp: loaded support on port[0] = 21 [ 683.188714][T20616] IPVS: ftp: loaded support on port[0] = 21 02:01:18 executing program 5: 02:01:18 executing program 3: 02:01:18 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 683.785596][T12374] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 684.077700][T12374] usb 5-1: Using ep0 maxpacket: 32 02:01:18 executing program 3: 02:01:19 executing program 5: [ 684.217888][T12374] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 684.227551][T12374] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:01:19 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 684.436918][T12374] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 684.446227][T12374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.454348][T12374] usb 5-1: Product: syz [ 684.458821][T12374] usb 5-1: Manufacturer: syz [ 684.463586][T12374] usb 5-1: SerialNumber: syz [ 684.594516][T12374] usb 5-1: config 0 descriptor?? [ 684.643785][T12374] option 5-1:0.0: GSM modem (1-port) converter detected [ 684.843692][T12374] usb 5-1: USB disconnect, device number 43 [ 684.852595][T12374] option 5-1:0.0: device disconnected [ 685.202293][ T1110] tipc: TX() has been purged, node left! [ 685.223811][ T1110] tipc: TX() has been purged, node left! [ 685.240380][ T1110] tipc: TX() has been purged, node left! [ 685.249496][ T1110] tipc: TX() has been purged, node left! [ 685.274604][ T1110] tipc: TX() has been purged, node left! [ 685.283548][ T1110] tipc: TX() has been purged, node left! [ 685.299392][ T1110] tipc: TX() has been purged, node left! [ 685.308075][ T1110] tipc: TX() has been purged, node left! [ 685.328507][ T1110] tipc: TX() has been purged, node left! [ 685.347580][ T1110] tipc: TX() has been purged, node left! 02:01:20 executing program 4: syz_usb_connect(0x0, 0x3d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}]}}]}}]}}, 0x0) 02:01:20 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, 0x0, 0x0, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:20 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:20 executing program 5: 02:01:20 executing program 3: 02:01:20 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 685.696152][T20695] IPVS: ftp: loaded support on port[0] = 21 [ 685.837221][T20699] IPVS: ftp: loaded support on port[0] = 21 02:01:21 executing program 5: 02:01:21 executing program 3: [ 686.428939][ T17] usb 5-1: new high-speed USB device number 44 using dummy_hcd 02:01:21 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:21 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, 0x0, 0x0, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 686.702867][ T17] usb 5-1: Using ep0 maxpacket: 32 02:01:21 executing program 3: [ 686.827742][ T17] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 686.838515][ T17] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 02:01:21 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 687.045884][ T17] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 687.055359][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.063490][ T17] usb 5-1: Product: syz [ 687.068003][ T17] usb 5-1: Manufacturer: syz [ 687.072748][ T17] usb 5-1: SerialNumber: syz [ 687.188032][T20748] IPVS: ftp: loaded support on port[0] = 21 [ 687.406098][ T17] usb 5-1: config 0 descriptor?? [ 687.654498][T11613] usb 5-1: USB disconnect, device number 44 02:01:22 executing program 4: syz_usb_connect(0x0, 0x3d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}]}}]}}]}}, 0x0) 02:01:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00'}) [ 688.665797][T11613] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 688.905498][T11613] usb 5-1: Using ep0 maxpacket: 32 [ 689.026161][T11613] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 689.037172][T11613] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 689.215976][T11613] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 689.225416][T11613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.233548][T11613] usb 5-1: Product: syz [ 689.238068][T11613] usb 5-1: Manufacturer: syz [ 689.242796][T11613] usb 5-1: SerialNumber: syz [ 689.284635][T11613] usb 5-1: config 0 descriptor?? [ 689.534107][T11613] usb 5-1: USB disconnect, device number 45 02:01:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:24 executing program 3: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, 0x0, 0x0) 02:01:24 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:24 executing program 5: io_setup(0x20000000002, &(0x7f0000000240)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 02:01:25 executing program 4: syz_usb_connect(0x0, 0x3d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}]}}]}}]}}, 0x0) 02:01:25 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x80000000002) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001300)=0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x48}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x51}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 02:01:25 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 690.635573][T20839] IPVS: ftp: loaded support on port[0] = 21 [ 691.244309][T20608] usb 5-1: new high-speed USB device number 46 using dummy_hcd 02:01:26 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:26 executing program 3: 02:01:26 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, 0x0) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:26 executing program 5: [ 691.484861][T20608] usb 5-1: Using ep0 maxpacket: 32 02:01:26 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 691.605719][T20608] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 691.616517][T20608] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 02:01:26 executing program 3: clone(0x3a3dd40080e41d01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x50, 0x4, 0x3a0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@ipv6={@mcast1, @mcast1, [], [], 'dummy0\x00', 'vcan0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) [ 691.770699][T20877] IPVS: ftp: loaded support on port[0] = 21 [ 691.856018][T20608] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 691.865316][T20608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.873440][T20608] usb 5-1: Product: syz [ 691.877912][T20608] usb 5-1: Manufacturer: syz [ 691.882638][T20608] usb 5-1: SerialNumber: syz [ 692.002303][T20880] IPVS: ftp: loaded support on port[0] = 21 [ 692.209935][T20608] usb 5-1: config 0 descriptor?? [ 692.578992][ T17] usb 5-1: USB disconnect, device number 46 02:01:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000300)="65809592f742b90101", 0x0}, 0x20) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=ANY=[], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006600270d000000000000000000000000af952fe43cd196de829a43ae6f1aaa5ce0f4", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000200)={'vlan1\x00', 0x7}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x4000000000010046) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x9, 0x1fc, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, 0x0, &(0x7f0000000380)=@buf="7f3eb2b6ea922d4c807046014bbda37cf7d85daa2bcdce0b1140e528b38b091a85cda38213e2c90b05b2fd78bc5a4d37176e0a623bc244348cdd499999de63bf368aa215b1ca094af5f00fc400c6164d6393d1fbfd702a5ce36dc197d8a287fd00cc4d0256d8395be80f9e901b0e46490c933f933060ad2ddf671bf42a77c32a9a0221ead2a6015d00"/151}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) 02:01:27 executing program 3: clock_gettime(0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000006000/0x1000)=nil) 02:01:27 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 02:01:28 executing program 4: syz_usb_connect(0x0, 0x46, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0x8d, 0xce, 0x76, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}]}}]}}]}}, 0x0) 02:01:28 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, 0x0) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:28 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f0000000180)='./file0\x00', 0x200001, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x8, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xb) 02:01:28 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0) [ 693.622365][T20953] IPVS: ftp: loaded support on port[0] = 21 [ 693.717642][T20948] IPVS: ftp: loaded support on port[0] = 21 02:01:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000300)="65809592f742b90101", 0x0}, 0x20) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000000)=ANY=[], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000200)={'vlan1\x00', 0x7}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x4000000000010046) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x9, 0x1fc, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, 0x0, &(0x7f0000000380)=@buf="7f3eb2b6ea922d4c807046014bbda37cf7d85daa2bcdce0b1140e528b38b091a85cda38213e2c90b05b2fd78bc5a4d37176e0a623bc244348cdd499999de63bf368aa215b1ca094af5f00fc400c6164d6393d1fbfd702a5ce36dc197d8a287fd00cc4d0256d8395be80f9e901b0e46490c933f933060ad2ddf671bf42a77c32a9a0221ead2"}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)=0x6) [ 694.213274][ T5] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 694.526733][ T5] usb 5-1: Using ep0 maxpacket: 32 02:01:29 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) [ 694.645582][ T5] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 694.654781][ T5] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 02:01:29 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 694.955407][ T5] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52 [ 694.964837][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.973170][ T5] usb 5-1: Product: syz [ 694.977708][ T5] usb 5-1: Manufacturer: syz [ 694.982503][ T5] usb 5-1: SerialNumber: syz 02:01:29 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0) [ 695.196291][ T5] usb 5-1: config 0 descriptor?? 02:01:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 02:01:30 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, 0x0) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 695.242804][ T5] option 5-1:0.0: GSM modem (1-port) converter detected 02:01:30 executing program 5: syz_emit_ethernet(0x26, &(0x7f00000000c0)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1}}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @local, "", @broadcast}}}}, 0x0) [ 695.398138][T21024] IPVS: ftp: loaded support on port[0] = 21 [ 695.472827][ T5] usb 5-1: USB disconnect, device number 47 [ 695.481896][ T5] option 5-1:0.0: device disconnected [ 696.058740][T21061] IPVS: ftp: loaded support on port[0] = 21 02:01:31 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:31 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0) 02:01:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x0, 0x1, 0x0, 0x200}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) 02:01:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x30, &(0x7f0000000580)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac0000000000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:01:31 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c"], 0x70}], 0x1, 0x0) close(r0) close(r1) [ 697.109806][T21094] IPVS: ftp: loaded support on port[0] = 21 02:01:32 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, 0x0, 0x200000d5) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:32 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 697.755096][T21121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 697.763324][T21121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 697.960402][T21135] IPVS: ftp: loaded support on port[0] = 21 02:01:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2db) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x89, 0x0) [ 698.162716][T21121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 698.194597][T21138] IPVS: ftp: loaded support on port[0] = 21 02:01:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 698.776802][T21116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 698.837991][T21116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.056923][ T1110] tipc: TX() has been purged, node left! [ 699.103451][ T1110] tipc: TX() has been purged, node left! [ 699.147584][ T1110] tipc: TX() has been purged, node left! [ 699.185277][ T1110] tipc: TX() has been purged, node left! 02:01:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() [ 699.236691][ T1110] tipc: TX() has been purged, node left! 02:01:34 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:34 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, 0x0, 0x200000d5) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 699.609370][T21201] IPVS: ftp: loaded support on port[0] = 21 02:01:34 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="9199060000000000240012800b0001006970766c616e000014000280060001000300000006000100000000000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB], 0x58}}, 0x0) [ 699.754043][T21204] IPVS: ftp: loaded support on port[0] = 21 02:01:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() 02:01:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:01:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 700.555760][T21233] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 700.574611][T21233] device ipvlan2 entered promiscuous mode 02:01:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3fe, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfaf, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:01:35 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, 0x0, 0x200000d5) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 701.115425][T21270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 701.499141][T21279] IPVS: ftp: loaded support on port[0] = 21 02:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001b00000000000000ff0f0000000000000000000000040000ff0f000000200000000000000000000048004354000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x330, 0x0, 0x0, 0xb0, 0xb8, 0xb0, 0x298, 0x1a8, 0x1a8, 0x298, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, '\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0x1c0, 0x1e0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'macsec0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4}}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[], 0x58) 02:01:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:01:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:01:37 executing program 3: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000061da9af000000000000000150d000000000000000e000000040000009002000000000000c800000060010000c8000000c8000000e8010000f8010000f8010000f8010000f801000504000000118000000000ffff00000000000075e500f4ffffff00000000000000000000000000000000003e7ef2a0a2080000ff000000000000000000000020000027000000849db535fd3542290000000000000000000000000000fff700000000440000a000c800f8ff7f00000000fdff000000000000000000000030006164647274797065000007000000d2590000000000000000000000000000000040c601000f6c0000000000000000280052454a4543540000800000000000020000000000000000000000000000000000000068a30000e09ebca7f181683a9c000400040000006772653000000007000000ddffffff000000fffffffffffffff70093ae4afb000000000000000000000100000f000b0b00000006000000ef0000b8942a9082d4cf0000001d00001370009800ef00000000000000000067c2137b650096ae0000280052454a45435400001bead0de0000000000000000000000000000003f000000000b000000000000000000000000000000020000000000000000000000008000000000000000000000000000000000000a02000000000000000000000000000000000002000000008100000000000000000000000000000000000000b9bf007000980000000000000000000000000002000000800000002800534554000000000000000000000000030000020000000000000000000001000004000000050f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00007000980000020000000000000000000000000000000100002800000002000000000000000000e1ff96a3eb8d13ab7daa1c00000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) 02:01:39 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, 0x0) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:39 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, 0x0, 0x0) 02:01:39 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xb4, 0xb4, 0xb4, 0x18c, 0x18c, 0x18c, 0x18c, 0x18c, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x94, 0xb4, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x30}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x27c) 02:01:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:01:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, &(0x7f00000001c0)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb3bd49a662db4d7224bf2e3460f83db56199f631f0000000000000000000000000000fe8740435800ed62e785"}, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:01:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x109082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x40ee1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3fbcbab16c80fab, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) [ 704.795701][T21344] IPVS: ftp: loaded support on port[0] = 21 [ 704.826718][T21353] xt_ecn: cannot match TCP bits for non-tcp packets 02:01:39 executing program 5: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 02:01:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af865", 0x3e}], 0x2) 02:01:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0xff, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0x4000}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RSTAT(r3, &(0x7f0000000080)={0x3f, 0x7d, 0x2, {0x0, 0x38, 0x2, 0x8, {0x5fd49989675523a1, 0x2, 0x4}, 0xd06825dafa4cf0f5, 0x7a, 0x1, 0xcd5, 0x2, '$\xb0', 0x1, '{', 0x0, '', 0x2, '}('}}, 0x3f) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x2, @loopback, 0x4e20, 0x1, 'sed\x00', 0x14, 0x8001, 0x6}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x2, 'lblcr\x00'}, 0x2c) [ 705.111639][T21356] IPVS: ftp: loaded support on port[0] = 21 02:01:40 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, 0x0) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 705.864059][T21395] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:0 [ 705.896383][T21395] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:0 02:01:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) [ 705.949491][T21391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:01:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0) [ 706.105654][T21411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:01:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000800000003) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x40) getsockopt$inet_mreqsrc(r0, 0xffffffff00000000, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 706.288805][ T753] tipc: TX() has been purged, node left! [ 706.314783][ T753] tipc: TX() has been purged, node left! [ 706.347394][ T753] tipc: TX() has been purged, node left! [ 706.399803][ T753] tipc: TX() has been purged, node left! [ 706.498232][T21424] IPVS: ftp: loaded support on port[0] = 21 02:01:41 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, 0x0, 0x0) [ 706.554330][ T753] tipc: TX() has been purged, node left! 02:01:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0x258, 0x188, 0x0, 0x0, 0x0, 0x310, 0x2d4, 0x2d4, 0x2d4, 0x310, 0x4, 0x0, {[{{@uncond, 0x0, 0x164, 0x188, 0x0, {}, [@common=@inet=@recent0={{0xf4, 'recent\x00'}, {0xfffffffe, 0x0, 0x34, 0x0, 'syz0\x00'}}]}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00'}}, {{@ip={@local, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge0\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24, 'ttl\x00'}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0xfffffffffffffff1) 02:01:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, &(0x7f00000001c0)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb3bd49a662db4d7224bf2e3460f83db56199f631f0000000000000000000000000000fe8740435800ed62e785f623365eed2c991dc675389cc03fc36706fd84dd15405f862b5ce2a3f732f1ca20a3b8f0fd664847ec0101fcecd27e5d63"}, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:01:41 executing program 0: get_mempolicy(0x0, &(0x7f0000000000), 0x80000001, &(0x7f00005ad000/0x1000)=nil, 0x3) r0 = memfd_create(&(0x7f0000000440)='?\x94\xf9xw\xba\xe7\"\x8eHT:/dev/a\xb9\x00\xb2\xb1 \x06\xb0\xba\xe6x2s\x00>\xbc\x9d!\x05\x91\f,\xf3$\xb6\x1c;<\xbd\xb2c\xb1\xf53\xf3R\xbf\x8f\x7f\x14\xc9\xa7\x8f\xd5t\x9e', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) [ 707.184184][T21437] IPVS: ftp: loaded support on port[0] = 21 02:01:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 02:01:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c, 0x0, &(0x7f00000000c0)="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"}, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:01:42 executing program 3: 02:01:42 executing program 5: 02:01:45 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, 0x0) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:45 executing program 3: 02:01:45 executing program 5: 02:01:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)) 02:01:45 executing program 0: get_mempolicy(0x0, &(0x7f0000000000), 0x80000001, &(0x7f00005ad000/0x1000)=nil, 0x3) r0 = memfd_create(&(0x7f0000000440)='?\x94\xf9xw\xba\xe7\"\x8eHT:/dev/a\xb9\x00\xb2\xb1 \x06\xb0\xba\xe6x2s\x00>\xbc\x9d!\x05\x91\f,\xf3$\xb6\x1c;<\xbd\xb2c\xb1\xf53\xf3R\xbf\x8f\x7f\x14\xc9\xa7\x8f\xd5t\x9e', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) 02:01:45 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, 0x0, 0x0) [ 710.810955][T21501] IPVS: ftp: loaded support on port[0] = 21 02:01:46 executing program 3: 02:01:46 executing program 0: [ 711.427209][T21530] IPVS: ftp: loaded support on port[0] = 21 02:01:46 executing program 5: 02:01:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) pipe(&(0x7f0000000040)) 02:01:46 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, 0x0, 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:46 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:46 executing program 5: [ 712.140526][ T753] tipc: TX() has been purged, node left! 02:01:47 executing program 3: 02:01:47 executing program 0: [ 712.668679][T21565] IPVS: ftp: loaded support on port[0] = 21 [ 712.797679][T21567] IPVS: ftp: loaded support on port[0] = 21 02:01:47 executing program 5: 02:01:47 executing program 3: 02:01:48 executing program 0: 02:01:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 02:01:48 executing program 5: 02:01:48 executing program 3: 02:01:48 executing program 0: 02:01:48 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, 0x0, 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 714.421914][T21605] IPVS: ftp: loaded support on port[0] = 21 02:01:50 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:50 executing program 5: 02:01:50 executing program 3: 02:01:50 executing program 0: 02:01:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:01:50 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, 0x0, 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 715.766089][ T753] tipc: TX() has been purged, node left! [ 715.779084][ T753] tipc: TX() has been purged, node left! [ 715.905706][T21634] IPVS: ftp: loaded support on port[0] = 21 02:01:50 executing program 0: 02:01:50 executing program 3: 02:01:50 executing program 5: 02:01:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) [ 716.535371][T21651] IPVS: ftp: loaded support on port[0] = 21 02:01:51 executing program 0: 02:01:51 executing program 3: [ 718.778987][ T753] tipc: TX() has been purged, node left! 02:01:53 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:53 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000040), 0xa) 02:01:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) 02:01:53 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f00000001c0)="a3", 0x1, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)=';', 0x1, 0x0, 0x0, 0x0) 02:01:53 executing program 3: r0 = socket(0x1c, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040), 0x10) [ 719.300911][T21714] IPVS: ftp: loaded support on port[0] = 21 02:01:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) 02:01:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000)=ANY=[], 0x8c) 02:01:54 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1000000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x6819, 0x47}, 0x10) [ 719.912478][T21733] IPVS: ftp: loaded support on port[0] = 21 02:01:54 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001400)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000180)="f5", 0x1}], 0x1}, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r1, r0) 02:01:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:01:55 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) 02:01:55 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x0, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:55 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f00000001c0), 0x4) 02:01:55 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:55 executing program 3: r0 = socket(0x1c, 0x5, 0x0) sendto(r0, &(0x7f0000000000)='\r', 0x1, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c) 02:01:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 721.345200][T21803] IPVS: ftp: loaded support on port[0] = 21 02:01:56 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1000000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup(r0) r2 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000080)=ANY=[], 0x98) [ 721.573195][T21809] IPVS: ftp: loaded support on port[0] = 21 02:01:57 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000140)={r2}, 0x8) 02:01:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:01:57 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x80, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000001700)=0x376) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000001700)=0x376) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000040)={r5}, 0x8) 02:01:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001400)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000180)="f5", 0x1}], 0x1, &(0x7f0000002740)=[{0x10}, {0x10}], 0x20}, 0x0) [ 722.955824][T21856] IPVS: ftp: loaded support on port[0] = 21 02:01:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 724.420727][ T753] tipc: TX() has been purged, node left! [ 724.436352][ T753] tipc: TX() has been purged, node left! [ 724.456164][ T753] tipc: TX() has been purged, node left! 02:01:59 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x0, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:01:59 executing program 0: r0 = socket(0x1c, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000340)=ANY=[@ANYBLOB="1c1c4e2100080000fe"], &(0x7f0000000200)=0x98) 02:01:59 executing program 3: r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000180), 0x8) 02:01:59 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1000000001, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1c1c4e22000000000000000000000000000000000000000100000000000000000000000000330000000000000000000000000000000000000000004078f44caa37f973000000000000000f000000000000000000000000000000000000100000000000000000000000000000000000000000008000000000000000000000000000e49927ee48422122056139ca"], 0x98) 02:01:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:01:59 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, 0x0) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 725.096004][T21908] IPVS: ftp: loaded support on port[0] = 21 [ 725.728843][T21941] IPVS: ftp: loaded support on port[0] = 21 02:02:00 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xf}, 0xc) 02:02:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x8) 02:02:00 executing program 0: 02:02:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:01 executing program 3: 02:02:01 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x0, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:01 executing program 0: 02:02:01 executing program 5: 02:02:01 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:02 executing program 3: [ 727.572302][T22003] IPVS: ftp: loaded support on port[0] = 21 02:02:03 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, 0x0) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:03 executing program 0: 02:02:03 executing program 5: 02:02:03 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:03 executing program 3: 02:02:03 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0x0, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 729.135319][ T753] tipc: TX() has been purged, node left! [ 729.214145][ T753] tipc: TX() has been purged, node left! [ 729.314043][T22034] IPVS: ftp: loaded support on port[0] = 21 02:02:04 executing program 0: 02:02:04 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 729.740077][T22043] IPVS: ftp: loaded support on port[0] = 21 02:02:04 executing program 5: 02:02:04 executing program 3: 02:02:05 executing program 5: 02:02:05 executing program 0: 02:02:05 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, 0x0) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:05 executing program 3: 02:02:05 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0x0, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:05 executing program 5: 02:02:05 executing program 0: [ 731.193670][T22102] IPVS: ftp: loaded support on port[0] = 21 02:02:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:06 executing program 3: 02:02:06 executing program 5: [ 731.653186][T22107] IPVS: ftp: loaded support on port[0] = 21 02:02:06 executing program 0: 02:02:07 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0x0, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:07 executing program 3: [ 732.919162][T22158] IPVS: ftp: loaded support on port[0] = 21 02:02:07 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:07 executing program 0: 02:02:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:07 executing program 5: 02:02:07 executing program 3: 02:02:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 733.744615][T22190] IPVS: ftp: loaded support on port[0] = 21 02:02:08 executing program 0: 02:02:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 02:02:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='wchan\x00') r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040), 0x10) sendfile(r4, r3, 0x0, 0x10008004) [ 734.494637][T22216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:02:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:09 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43"}, 0x58) 02:02:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 02:02:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1550], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fanotify_init(0x10, 0x400) 02:02:09 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r2, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x87) sendfile(r2, r2, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) pipe(&(0x7f0000000340)) [ 735.280080][T22233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 735.617818][T22248] IPVS: ftp: loaded support on port[0] = 21 02:02:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 02:02:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902006c00010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) [ 736.090612][T22257] IPVS: ftp: loaded support on port[0] = 21 02:02:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:11 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43"}, 0x58) 02:02:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1550], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fanotify_init(0x10, 0x400) [ 736.930297][T22301] EXT4-fs (loop3): Invalid log block size: 7077890 02:02:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003440200bfa30000000000001702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff3d640200000000005502faff037202000404000001007d60b6030000001000006a0a00fe390000ce850000002b0000009c000000000000009500000000000000a81bbfa3982de7b0efc5733ed236e4add6de01800000aaa6912a8b2ce571c4580000f7000000e3a99d574d2eb38a548355f0b886bd001362df1d4fdd860db5808922033e3e0f242a46b3009a54f40780b089bd9d5fdb68832e986440ff0a7edfa0cb231ccd0000000000000000000000529c58a47777e27060493073807c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a02fa0892729507982d90e116bba29bb744af70a4cd8f3ad2db451de058226c4e31a27bf456c04c58bdd0b424ac416e66af9ebcfea905d37cf226312cb81ec843bcea06e7fa5e5b3596301460142f83b465d9e57dfdb06dcf91fd0600000000000000d2110cf2e1f4682c24a314447c5e0807f0b1766ec7ecbd061772daa52a38539295d3fea7a7e669441e1ff041143ecfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc745415c42d3d2dd356e205585e30a64830a5796cd7ce18b68bc37e061d33357d6a39d33c702576cc2a8881663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d4326968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367652700000000000000b148a9000000000000000000000000000000e02739ccd50523d36032d38f5cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7b9bae9b1698e19eb0e6d5244c1ff3237ad1fe10f7035489179fc8f6c673e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2818206ce5fba6fca8b270d76191b43ab4cbdd4dbcccdc644fe65e7bd90a5fc16387bcb5e1e028d7d2a33c78cb8fe48ddcf6adfc9417bd42909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9538eb067b21111dbaa58b19a52f3f12880108d08eb477ad349c2214bc7f8378b7e5b5415f3da911411ed6655c6b66beaf92e416313dfe58e88fbfa825114227c2f6cfd14902a5678af7277e6cde25737b058ba3ca60696bc1d4df56b6f544f57ddc35f3c1b5904def348912e1fefe8164c3341b91913718593085d2a9a260663c11f5484cad2de673f9a1fcac868ff6cb20122f76531881165f4d46e1a23ce0dc462ff47e1fb4a8e2a1f6e3b8134031eb29e068c831dc2d825b82749063a85bf6c1bcf4ccf798e49000000000000000000009e664603220bf1e47cfdc28f5cc38b3d66751a524081f961f3a6bec7b84976ae5fc7a8d29dc65277f6a47422bcf49b3f399fb3b10967ef66d63e4404d66f6ac1c6d0d57dd3e55dc62e58b25a34d1a482652315813e92188263a93f13dde4dd81dfe32af06f6f3fcd73789cc69925a3211955290f85e42dabf19d40f717edd7361ad3801f6642046376000000000000005581a3b65fc336f7011e6810cd8efb4cc5f6a2d89d6d2dee563cbe281ff8b0c285a1b8a99afbb2f4271dd4b0acf21fe6d837ed5c208970b52130b5a7e13d5465e9ec069c1b2e97d2c4cbf7b02a15c87bd23626c8ad221c62177dbeec3bbfc9203cd4d0e1b91cc2eaaa198d2815c5dda45f7fe16cf750d14ef045c8d84174f7744eafc2525359892d5a7f45120306681798fa630ff7ffb9803353373ff9043baefd7996e085d3115cf80976ca5b60897cacd2ec9827b1c70730dc8628685e1f00e5e9c6516ba9d6f275d89b075cd8d9fe753c95e98c7abdba69c6087d3381e93e64695d9ff622a5f60df40d61065c101af6f57033522d17cc5c39451f7a9c8f3acc11624de44fd461c8af3b49d0e33b709a36dbd96620189684599bedd24439ee6c455b5b2c731b6a3ad1d1d3dafc01381814cbc31bcd94d9fff28c279d405d5e2227d915a4b00190b99999db07426b119ffbfe389034546ed8bacc0f1b6b471dd4200f5caa790095c903c261eec301de8b4c3e00"/1550], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fanotify_init(0x10, 0x400) [ 737.048429][T22301] EXT4-fs (loop3): Invalid log block size: 7077890 02:02:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 737.099954][T22304] IPVS: ftp: loaded support on port[0] = 21 [ 737.201645][ T753] tipc: TX() has been purged, node left! [ 737.254351][ T753] tipc: TX() has been purged, node left! [ 737.299819][ T753] tipc: TX() has been purged, node left! 02:02:12 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 737.341075][ T753] tipc: TX() has been purged, node left! [ 737.372869][ T753] tipc: TX() has been purged, node left! 02:02:12 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}}, 0x0) [ 737.405459][ T753] tipc: TX() has been purged, node left! [ 738.208947][T22353] IPVS: ftp: loaded support on port[0] = 21 02:02:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1550], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fanotify_init(0x10, 0x400) 02:02:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:13 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x3, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:02:13 executing program 3: init_module(0x0, 0x47, &(0x7f0000000000)='/\x06\x8b\xe3\xf9\xa1\xa0\xc1z\xf9e\xd0\x00\x03\x14\x12q\xe8\xc4\xa6z\xcf\xb1l\xbd\xa9') 02:02:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:13 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43"}, 0x58) 02:02:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time'}}]}) 02:02:14 executing program 3: init_module(0x0, 0x47, &(0x7f0000000000)='/\x06\x8b\xe3\xf9\xa1\xa0\xc1z\xf9e\xd0\x00\x03\x14\x12q\xe8\xc4\xa6z\xcf\xb1l\xbd\xa9') [ 739.706529][T22372] IPVS: ftp: loaded support on port[0] = 21 02:02:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 739.956019][T22376] EXT4-fs (loop0): Can't read superblock on 2nd try 02:02:14 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) dup2(0xffffffffffffffff, r3) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 02:02:16 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, 0x0, 0x0) 02:02:16 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/4096}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 02:02:16 executing program 3: init_module(0x0, 0x47, &(0x7f0000000000)='/\x06\x8b\xe3\xf9\xa1\xa0\xc1z\xf9e\xd0\x00\x03\x14\x12q\xe8\xc4\xa6z\xcf\xb1l\xbd\xa9') 02:02:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0xa, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}}, &(0x7f0000000180)='GPL\x00', 0x2, 0xfd13, &(0x7f0000000000)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2bd}, 0x48) 02:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x100000, 0x2000000}) 02:02:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:16 executing program 3: init_module(0x0, 0x47, &(0x7f0000000000)='/\x06\x8b\xe3\xf9\xa1\xa0\xc1z\xf9e\xd0\x00\x03\x14\x12q\xe8\xc4\xa6z\xcf\xb1l\xbd\xa9') [ 742.247822][T22427] IPVS: ftp: loaded support on port[0] = 21 02:02:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000), &(0x7f0000000140)=0x4) 02:02:17 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110700000000000000000800000008000300", @ANYRES32=r2], 0x24}}, 0x0) 02:02:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:17 executing program 3: init_module(0x0, 0x0, 0x0) 02:02:18 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, 0x0, 0x0) 02:02:18 executing program 0: 02:02:18 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) dup2(r4, r2) 02:02:18 executing program 1: 02:02:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:18 executing program 3: init_module(0x0, 0x0, 0x0) [ 743.894109][T22471] IPVS: ftp: loaded support on port[0] = 21 02:02:18 executing program 1: 02:02:19 executing program 5: 02:02:19 executing program 3: init_module(0x0, 0x0, 0x0) 02:02:19 executing program 0: 02:02:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="01"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x7}]}}]}, 0x4c}}, 0x0) 02:02:20 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, 0x0, 0x0) 02:02:20 executing program 1: 02:02:20 executing program 3: 02:02:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:20 executing program 0: 02:02:20 executing program 5: [ 745.805903][T22521] IPVS: ftp: loaded support on port[0] = 21 02:02:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:20 executing program 3: 02:02:20 executing program 1: 02:02:20 executing program 0: 02:02:21 executing program 5: 02:02:21 executing program 3: 02:02:21 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:21 executing program 1: [ 746.616138][ T753] tipc: TX() has been purged, node left! [ 746.639147][ T753] tipc: TX() has been purged, node left! [ 746.690371][ T753] tipc: TX() has been purged, node left! [ 746.729959][ T753] tipc: TX() has been purged, node left! 02:02:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:21 executing program 0: [ 747.129496][T22556] IPVS: ftp: loaded support on port[0] = 21 02:02:21 executing program 3: 02:02:22 executing program 1: 02:02:22 executing program 5: 02:02:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:22 executing program 3: 02:02:22 executing program 0: 02:02:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:22 executing program 5: 02:02:23 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:23 executing program 1: 02:02:23 executing program 3: 02:02:23 executing program 0: 02:02:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:23 executing program 5: 02:02:23 executing program 3: 02:02:23 executing program 0: [ 749.054703][T22599] IPVS: ftp: loaded support on port[0] = 21 02:02:23 executing program 1: 02:02:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:24 executing program 5: 02:02:24 executing program 3: 02:02:24 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:24 executing program 0: 02:02:24 executing program 1: 02:02:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:24 executing program 5: 02:02:25 executing program 3: 02:02:25 executing program 0: 02:02:25 executing program 1: [ 750.648812][T22638] IPVS: ftp: loaded support on port[0] = 21 02:02:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:25 executing program 5: 02:02:25 executing program 3: 02:02:26 executing program 0: 02:02:26 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x0, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:26 executing program 1: 02:02:26 executing program 3: 02:02:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:26 executing program 5: 02:02:26 executing program 0: 02:02:26 executing program 1: 02:02:27 executing program 3: [ 752.390518][T22677] IPVS: ftp: loaded support on port[0] = 21 02:02:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:27 executing program 5: 02:02:27 executing program 0: unshare(0x600) open(&(0x7f00000000c0)='./bus\x00', 0x8001141042, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 02:02:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @const, @datasec={0x0, 0x9, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}], 'u'}]}, {0x0, [0x0]}}, 0x0, 0x10f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 753.243877][ T29] audit: type=1804 audit(1596852147.974:20): pid=22708 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir326983282/syzkaller.JAN9Qg/379/bus" dev="sda1" ino=16034 res=1 [ 753.268966][ T29] audit: type=1804 audit(1596852147.974:21): pid=22708 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir326983282/syzkaller.JAN9Qg/379/bus" dev="sda1" ino=16034 res=1 [ 753.293551][ T29] audit: type=1804 audit(1596852147.974:22): pid=22709 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir326983282/syzkaller.JAN9Qg/379/bus" dev="sda1" ino=16034 res=1 02:02:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @window], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:28 executing program 1: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x107}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:02:28 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x0, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:28 executing program 0: unshare(0x600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIONCLEX(r1, 0x5450) [ 753.771246][ T753] tipc: TX() has been purged, node left! [ 753.789994][ T753] tipc: TX() has been purged, node left! [ 753.828237][ T753] tipc: TX() has been purged, node left! [ 753.852674][ T753] tipc: TX() has been purged, node left! 02:02:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:28 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast1}, @address_request}}}}, 0x0) 02:02:28 executing program 1: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 754.170348][T22731] IPVS: ftp: loaded support on port[0] = 21 02:02:29 executing program 1: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:29 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x0, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 755.402410][T22767] IPVS: ftp: loaded support on port[0] = 21 02:02:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @const, @datasec={0x0, 0x9, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}], 'u'}]}, {0x0, [0x0]}}, 0x0, 0x10f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:02:31 executing program 0: unshare(0x600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 02:02:31 executing program 1: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}]}, 0x34}}, 0x0) 02:02:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @mss, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:31 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0x0, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:31 executing program 1: unshare(0x600) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:02:31 executing program 0: unshare(0x600) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x8001141042, 0x0) pread64(r0, 0x0, 0x0, 0x0) [ 757.063179][T22802] IPVS: ftp: loaded support on port[0] = 21 02:02:32 executing program 1: unshare(0x600) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:02:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 757.381516][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 02:02:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1049}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 757.754832][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 02:02:32 executing program 1: unshare(0x600) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 758.901289][ T753] tipc: TX() has been purged, node left! 02:02:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000007c0)={'veth0_to_hsr\x00', @ifru_addrs=@l2={0x1f, 0x4, @none}}) 02:02:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000000601"], 0x14}}, 0x0) 02:02:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x2c}}, 0x0) 02:02:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 759.665524][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 759.795331][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:35 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0x0, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @timestamp, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x2c}}, 0x0) 02:02:35 executing program 5: unshare(0x600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) flock(r0, 0x0) 02:02:35 executing program 3: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='macvlan1\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x20008000, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x5e) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e) [ 760.554179][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:02:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 760.885156][T22897] IPVS: ftp: loaded support on port[0] = 21 02:02:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x4, [@datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], "92"}, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @ptr]}, {0x0, [0x0, 0x0]}}, 0x0, 0xd4}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:02:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 760.944186][T22899] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 02:02:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$setperm(0x5, 0x0, 0x4a401026) 02:02:35 executing program 1: unshare(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc00278dcff47d01000080ca99f847605e03127172c61d79cf4dd76745a4298063acf2678cef3380b9ea5c364f0e78fc064d8a3a9a14e7b2738e4907dc4e4c672d0f00c2f009b6d2a78423354046e32f08cac9559d76305fe1fcf8c0813d97f42f19414eaedd9d2ae5a27c", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:02:36 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0x0, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 02:02:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 02:02:36 executing program 1: unshare(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:36 executing program 0: unshare(0x600) open(&(0x7f00000000c0)='./bus\x00', 0x8001141042, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 02:02:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @mss, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) [ 762.537044][T22948] IPVS: ftp: loaded support on port[0] = 21 02:02:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x100) readv(r0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540b, 0x0) [ 762.612116][ T753] tipc: TX() has been purged, node left! 02:02:37 executing program 1: unshare(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:37 executing program 0: unshare(0x600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) flock(r0, 0x2) 02:02:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:02:38 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43"}, 0x58) 02:02:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:38 executing program 1: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x7, 0x0, 0x0) 02:02:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x115, 0x115, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @array, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}]}, {0x0, [0x0]}}, 0x0, 0x133}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:02:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000000601"], 0x14}}, 0x0) 02:02:39 executing program 1: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @timestamp, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:39 executing program 3: r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000780)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1000000000016) [ 764.557268][T23017] IPVS: ftp: loaded support on port[0] = 21 02:02:39 executing program 5: unshare(0x600) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000051) inotify_rm_watch(r0, r1) 02:02:39 executing program 1: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 02:02:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:40 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43"}, 0x58) 02:02:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 02:02:40 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@setlink={0x20, 0x13, 0xe3b2eb0b124b69fd}, 0x20}}, 0x0) 02:02:40 executing program 1: unshare(0x600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 766.392981][T23068] IPVS: ftp: loaded support on port[0] = 21 [ 767.077950][ T753] tipc: TX() has been purged, node left! [ 767.090851][ T753] tipc: TX() has been purged, node left! 02:02:42 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x80005) splice(r0, 0x0, r1, 0x0, 0x105, 0x0) 02:02:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x490c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:02:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @remote}, 0xc) close(r2) 02:02:42 executing program 1: unshare(0x600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:02:42 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43"}, 0x58) [ 767.635525][T23101] IPVS: ftp: loaded support on port[0] = 21 02:02:42 executing program 5: unshare(0x600) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 02:02:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss={0x2, 0x500}, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000007c0)={'veth0_to_hsr\x00', @ifru_addrs=@l2={0x1f, 0x0, @none}}) 02:02:42 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 02:02:43 executing program 1: unshare(0x600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:02:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x2, [@volatile, @func, @datasec={0x0, 0x5, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}], "04"}]}}, 0x0, 0x7e, 0x0, 0x1}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:02:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x1d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'bridge_slave_0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "e75b57915059423fe51abe7f846c230ed826875176935ef0b6d0a0c73034"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 02:02:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:43 executing program 0: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 02:02:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002e00298900"/20, @ANYRES32], 0x2c}}, 0x0) 02:02:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfffffffffffffffe) 02:02:44 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1000000001, 0x84) bind(r0, &(0x7f0000000180)=ANY=[], 0xa) 02:02:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:44 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252962cb18f6e2e2aba000000012e8b3836005404b0e0301a4ce875f2e3ff5f003ee340b767b6db2d7e8140554a000101013c585bf5ff1b0816f3f6db1c000100000000000000ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x1200, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:02:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_LOCK(0x0, 0xb) [ 769.948171][T23163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:02:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x36, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x5c0}, {&(0x7f0000000040)='n', 0x1}], 0x2}}], 0x1, 0x8000) 02:02:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x4, [@datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], "92"}, @ptr]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:02:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bridge_slave_0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 02:02:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x4, [@datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], "92"}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:02:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x0, 0x0) 02:02:45 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='[\xdbX\xae[\x1a\xa9\xfd\xfe\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x90\x93\x12l\xb6Z\x95\xab\x00{\xe9\xc2Y\xd1c\x81\x9eG\xf9,\xe2\xc6a\x8b\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x8a\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\x95\xd2q#\xc6\xca\x97!*\x886Ka\x13\xf9\x0fSe\x9c.\xf1\xcd\xd7\xdf< K\\\xb7\xa0\xfbf', 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96780ce27b90300060000c00200000000b738000000000035f4c38422a3bc822000050000000402030000000000000040000400b3d7c52ebf31a897ffff0300000000090014f8ffffffffffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 02:02:45 executing program 5: unshare(0x2000600) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 02:02:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) [ 771.193044][T23190] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/3' not defined. 02:02:46 executing program 2: unshare(0x600) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1) 02:02:46 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x0) 02:02:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe5, 0xe5, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}]}, {0x0, [0x0]}}, 0x0, 0x103}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:02:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:46 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='[\xdbX\xae[\x1a\xa9\xfd\xfe\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x90\x93\x12l\xb6Z\x95\xab\x00{\xe9\xc2Y\xd1c\x81\x9eG\xf9,\xe2\xc6a\x8b\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x8a\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\x95\xd2q#\xc6\xca\x97!*\x886Ka\x13\xf9\x0fSe\x9c.\xf1\xcd\xd7\xdf< K\\\xb7\xa0\xfbf', 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96780ce27b90300060000c00200000000b738000000000035f4c38422a3bc822000050000000402030000000000000040000400b3d7c52ebf31a897ffff0300000000090014f8ffffffffffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 02:02:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x1, 0x4) 02:02:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000280)='sec,\xb5Gur\x1e\x00}\xe2\xe8N\x8c\x92\xefuxF\xf5wp\x1a', 0x0) pwrite64(r2, 0x0, 0x0, 0x0) 02:02:46 executing program 0: unshare(0x600) open(&(0x7f00000000c0)='./bus\x00', 0x8001141042, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 772.280457][ T753] tipc: TX() has been purged, node left! 02:02:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:47 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:02:47 executing program 1: unshare(0x600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) tee(r0, r1, 0x7513e9b4, 0x0) 02:02:47 executing program 2: [ 772.685805][ T29] audit: type=1804 audit(1596852167.426:23): pid=23228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir326983282/syzkaller.JAN9Qg/397/bus" dev="sda1" ino=15910 res=1 [ 772.711126][ T29] audit: type=1804 audit(1596852167.426:24): pid=23228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir326983282/syzkaller.JAN9Qg/397/bus" dev="sda1" ino=15910 res=1 [ 772.735723][ T29] audit: type=1804 audit(1596852167.426:25): pid=23229 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir326983282/syzkaller.JAN9Qg/397/bus" dev="sda1" ino=15910 res=1 02:02:47 executing program 0: 02:02:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:49 executing program 5: 02:02:49 executing program 3: 02:02:49 executing program 1: 02:02:49 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202"], 0x1) r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[], 0x10) close(r0) 02:02:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00dfffffff0000000000000a00006e943418f2a7ef"], 0x24}}, 0x0) 02:02:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380), 0x4) 02:02:49 executing program 1: 02:02:50 executing program 3: 02:02:50 executing program 0: 02:02:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @timestamp, @mss, @timestamp, @mss, @window, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 02:02:50 executing program 5: 02:02:50 executing program 2: 02:02:50 executing program 1: 02:02:50 executing program 3: 02:02:50 executing program 4: 02:02:50 executing program 0: 02:02:50 executing program 5: 02:02:51 executing program 2: 02:02:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @remote}, 0xc) close(r2) 02:02:51 executing program 3: 02:02:51 executing program 4: 02:02:51 executing program 0: 02:02:51 executing program 5: 02:02:51 executing program 2: 02:02:51 executing program 1: 02:02:51 executing program 3: 02:02:51 executing program 4: 02:02:51 executing program 0: 02:02:52 executing program 5: 02:02:52 executing program 2: 02:02:52 executing program 1: 02:02:52 executing program 0: 02:02:52 executing program 4: 02:02:52 executing program 3: 02:02:52 executing program 5: 02:02:52 executing program 2: 02:02:53 executing program 0: 02:02:53 executing program 4: 02:02:53 executing program 1: 02:02:53 executing program 5: 02:02:53 executing program 3: 02:02:53 executing program 2: 02:02:53 executing program 0: 02:02:53 executing program 4: 02:02:53 executing program 5: 02:02:53 executing program 1: 02:02:53 executing program 3: 02:02:54 executing program 2: 02:02:54 executing program 0: 02:02:54 executing program 1: 02:02:54 executing program 4: 02:02:54 executing program 3: 02:02:54 executing program 5: 02:02:54 executing program 2: 02:02:54 executing program 4: 02:02:54 executing program 0: 02:02:54 executing program 1: 02:02:54 executing program 5: 02:02:54 executing program 3: 02:02:54 executing program 2: 02:02:55 executing program 0: 02:02:55 executing program 4: 02:02:55 executing program 3: 02:02:55 executing program 1: 02:02:55 executing program 5: 02:02:55 executing program 2: 02:02:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1) 02:02:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc00278dcff47d01000080ca99f847605e03127172c61d79cf4dd76745a4298063acf2678cef3380b9ea5c364f0e78fc064d8a3a9a14e7b2738e4907dc4e4c672d0f00c2f009b6d2a78423354046e32f08cac9559d76305fe1fcf8c0813d97f42f19414eaedd9d2ae5a27c579b20b4796bf296a9c169caa8e7414097844aa0", 0x97}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:02:55 executing program 3: getpid() sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="660f6414e32626f3410f10828000c0fec4e1e1fb68050fc72cdb0f20e035000020000f22e0b959080000b8ae0f0000ba000000000f3066baf80cb80c9a8d88ef66bafc0c66edc4817f122926660f38818c1300800000b99c0100000f32", 0x66}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:02:56 executing program 1: 02:02:56 executing program 5: 02:02:56 executing program 2: 02:02:56 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write(r0, &(0x7f0000000000), 0x52698b21) 02:02:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) 02:02:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x6, [@datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], "92"}, @ptr, @fwd]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x9a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:02:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000018c0)="1981dbc34b03e935a6ed8ebe3380b8653a9e064b3f9b84e8411bb6b73d7ea1dd0fea2aaef187cf22341e22f6785ee5903c0561a181176575b2c7edb4e181439bcd74d71fb903d4699a12075499ddd0fbfd45012d6de50b09294d5d074e6e1cbbe2c64c2048bc741648a6aed631539777574d9633d269223e1f90c4a31b25f41bccc1c00ede7b57408e56f7c1315475952adbd869da585b950af18c6620aa6222668f58dcb8f5854f3e7ab26aa784ff1ef37e20c7e7782c7c9ea65a10e79fadc825bf4b619ba1b801e7117fd1f84dab781029fa7bcc6a9326244b05162f9dbb08ea3fb355aac0df8c15ea0309b76b9e7f3090e1d37342398762a6208893121f6afb35981c4c64c1776746672002f6e5067c45fe3554e49c69160cc861ae0ea0c2428c5ef1bfc5034864786b4b4851faff90a5b83c34b72dce747e472263852ea2e178ec91352090e4013d8c95b29c92ed124dfb100e0a9e7f2c011be5025b9430374086f3e1d33283675987c93b18cb8304164ad91ef2af4c1f3f243eac91328b947b19e94e5d5186d88e887b1cd833576ff80bd380ef2ed7fc3aaf9cae95aa7fe4e1f8ccf32939afbacd3552846204f8f2ffa4f2b9108b7937115b10922a5789e91fa8a9c782bd80c03e909267eceb8ada244c69e82a0170cea93ff323b14e221ec382f196f241ca3c1957767d9c063648d358433192c3a8acb35a5582cf32dae00860258165419de01d9cad7c21e3d24cdcd4428f47b60bdac61c12622674e5a819262448d0fcf2e061b9ee254dd016027829703f1af988a9187f026bf3f65f83dadf1f1fd5dc3722bfe63d2663a1812f29a4805454d6afe4bf175e64191bab6eed114614f740446dbbbf4f65bbc0cecf3e8cc68e66bc739f1e10c447dcf5db6e2ec53b60ee14e36a42359c9d92226e91f51c9a00b3d2044ec6426afd5f7300cc4618c4d65558c9ea038e497a7f90a8c5e60e66b2ff3363fd17d583c0a01de7bf3e20ecaf2d27d320e5e78c632aa2aed77f527a13e9c1dc1185e1abb85c07b74b9a322ae53f6a90c7c56a7047984779fef72d5d49f2874bbcc97f7720dfbf6dc5a0b01038b7e102225f1d02da81ed255800cf489eade1e0433a2e844d29ea0891983d6fe347499e1d5a9714600e9e840fa394f38fdcf6213de677e88be155bb55b6cdd3311ea60e73ad22366d097326f065ae5361585c3ede42487a4f46cd9db7c745f0e516cb3df54be01a554a1f97f16d22662bb1615750351c6e5d067e035b2d2f4b8b91ae20ec0a6a581542dc8680276af9f28ebc8862b2649921cb3403e77d8751bb9098d442da5bf5068f4d864ec85726cf75d485ca05e991a40eafc8e84cd9f039e4829abc84e0109c8c2422fd09173ede5e7a47124424941e95b53629f069a1d7656f9a6b9900fe83ebb476b0566eb319131766ca76611905f2182b5af6c4218683a24218f11b03d925d8b16c6a936921c43019137d6fb02d310bd64400aa96ca5b2da21ed3cd967038b3c42ddd012699e5b817475c4dbbc6af30bd4891942be6d0a6333a945cf48592179d8eaef9ff65f4c653c2ce03a405a0e3532e508b2fb9a3f63d5c7befc49b32181a798b0ad5389c22a604115e4340ca2fc8b018926b3628a342b80a2342bc2d1c807b849e6e66851a58396b0cd54c0ca1606060468acecfc6de4849ef8bfcc34d632d8cfedba6913f7c935939c00e213bbc735f0f6b1e0fb942408a544f4c65dd7f0674126756f55821b8cc4828ec92679351c344782cf341e58948e0c2264104462c468b6954aa69be60ad03fd5df7eb80bdc81b450872dc016a59bfdc98969add11695c7620b9e69f59ee75dca4f70d98f08c574297489851fffa0ad3dacfe0e256977abe7f8c383e27007f85f277f0ff5f5f08e666047580dcb2cc95540d282fb576eede1e6d1c62fdba0c7dd445ffdd3e3ebe32b647f6e9b2e0d0dd26f3c63b54fe9829dc9b843a788bff3ced853ba9b2", 0x581}], 0x1}}], 0x1, 0x604d800) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) 02:02:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000580)="c40262f5c10f01d10f78408dc4e18dfaeb64430f7817c4a3e15dec00b805000000b90a0000000f01d9660fc731b9800000c00f3235000800000f3048b80a000000000000000f23c80f21f835040010000f23f8", 0x53}], 0x1d, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:02:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x600, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) [ 782.348156][T23366] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:02:57 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000003280)=[{&(0x7f0000000000)="580000001400192340834b49043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 02:02:57 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000580)="c40262f5c10f01d10f78408dc4e18dfaeb64430f7817c4a3e15dec00b805000000b90a0000000f01d9660fc731b9800000c00f3235000800000f3048b80a000000000000000f23c80f21f835040010000f23f8", 0x53}], 0x1d, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:02:57 executing program 4: clone(0x3a3dd4008580ad01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x0) 02:02:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 02:02:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:02:58 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000003280)=[{&(0x7f0000000000)="580000001400192340834b49043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 02:02:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 02:02:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') lseek(r0, 0x0, 0x2) 02:02:58 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:02:58 executing program 2: syz_open_procfs(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 02:02:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:02:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 02:02:59 executing program 4: sysinfo(&(0x7f0000000240)=""/192) [ 784.570571][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:02:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:02:59 executing program 5: clone(0x3a3dd4008580ad01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x3, 0x480000000002) bind(r0, &(0x7f0000000680)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0xfffffffffffffffd, 0xb}, 0x2000020000b85d, 0x187f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)='nfs\x00', 0x0, &(0x7f0000000000)) 02:03:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 02:03:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 02:03:00 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000100)="92dc2299fd8d122bf4bd98d752ad23", 0xf, 0xfffffffffffffff8) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb) [ 785.469756][T23443] NFS: Device name not specified [ 785.542996][T23448] NFS: Device name not specified 02:03:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f0000000540)) 02:03:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write(r0, &(0x7f0000000000), 0x52698b21) [ 785.959293][T23456] dns_resolver: Unsupported server list version (0) [ 785.991466][T23459] dns_resolver: Unsupported server list version (0) 02:03:01 executing program 2: r0 = socket(0x1c, 0x5, 0x0) connect$unix(r0, &(0x7f0000000040)=ANY=[], 0x10) 02:03:01 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 02:03:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}]}}, 0x0, 0x46}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 786.328663][T23466] F2FS-fs (loop5): Unable to read 1th superblock [ 786.335603][T23466] F2FS-fs (loop5): Unable to read 2th superblock 02:03:01 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:01 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000640), &(0x7f0000000700)=0x98) 02:03:01 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x7, 0x1, "ae"}, 0x9) 02:03:01 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1202d4c900b4"], 0x10) 02:03:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:03:01 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:01 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r0, &(0x7f00000000c0)={r3}) 02:03:02 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendto(r1, 0x0, 0x0, 0x40101, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 02:03:02 executing program 3: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 02:03:02 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 02:03:02 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:02 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) 02:03:02 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket(0x2, 0x5, 0x0) connect$unix(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12023dd4c9"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040)=ANY=[@ANYBLOB="01", @ANYRES32=0x0], &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000000)={r3}, 0x8) 02:03:02 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@empty}, 0x14) 02:03:02 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x100) 02:03:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:04 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 02:03:04 executing program 2: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12023dd4c9"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040), &(0x7f0000000200)=0x4) 02:03:04 executing program 3: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000100), &(0x7f0000000000)=0xa0) 02:03:04 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12023dd4c9"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)=0x8) 02:03:04 executing program 4: r0 = socket(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 02:03:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:05 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0xc) 02:03:05 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12023dd4c9"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) 02:03:05 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket(0x2, 0x5, 0x0) connect$unix(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12023dd4c9"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000000)={r3}, 0x8) 02:03:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000080), 0x4) 02:03:05 executing program 0: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:03:06 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 02:03:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000040)='\xbb\x02\xb1\xed\x96\xdb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xe8HB\x00\x00\xd7h\xa4\x06jt\xea\xf9l\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "4695f5e2f7f3609f45d282a899c6bf59a6082c7aa8664f0de8feab4fc4c48a4a07fa7187d18044e9411b889204cf23f3526acbe260858a7477896113f21bff77", "001f7aaf21a5f8455e1e1941e6aa8634faaf52c65e5251e4e2d2ae6ce17a4901000000000000008cd1ddb5cbde841b2ff4e600", "f1d37aeef0bb42ba4dc68d4b19126e4349af3e75aaa31620a397f54e3f4e91fe"}) 02:03:06 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 02:03:06 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x1) 02:03:06 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 02:03:06 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:06 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') 02:03:07 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x82a01, 0x0) write$binfmt_elf64(r0, 0x0, 0x36d) 02:03:07 executing program 2: 02:03:07 executing program 4: 02:03:07 executing program 0: 02:03:07 executing program 3: 02:03:07 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 02:03:07 executing program 5: 02:03:07 executing program 2: 02:03:07 executing program 0: 02:03:07 executing program 4: 02:03:08 executing program 2: 02:03:08 executing program 4: 02:03:08 executing program 5: 02:03:08 executing program 0: 02:03:08 executing program 3: 02:03:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 02:03:09 executing program 5: 02:03:09 executing program 4: 02:03:09 executing program 2: 02:03:09 executing program 3: 02:03:09 executing program 0: 02:03:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 02:03:09 executing program 5: 02:03:09 executing program 2: 02:03:09 executing program 4: 02:03:09 executing program 3: 02:03:09 executing program 0: 02:03:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 02:03:10 executing program 2: 02:03:10 executing program 4: 02:03:10 executing program 0: 02:03:10 executing program 5: 02:03:10 executing program 3: 02:03:10 executing program 2: 02:03:10 executing program 1: 02:03:10 executing program 4: 02:03:10 executing program 5: 02:03:10 executing program 0: 02:03:10 executing program 3: 02:03:11 executing program 2: 02:03:11 executing program 1: 02:03:11 executing program 4: 02:03:11 executing program 5: 02:03:11 executing program 0: 02:03:11 executing program 3: 02:03:11 executing program 2: 02:03:11 executing program 1: 02:03:11 executing program 4: 02:03:11 executing program 5: 02:03:11 executing program 0: 02:03:12 executing program 3: 02:03:12 executing program 2: 02:03:12 executing program 1: 02:03:12 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 02:03:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@utf8no='utf8=0'}]}) 02:03:12 executing program 0: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 02:03:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5502, 0x0) 02:03:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) unshare(0x60040600) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5404, 0x0) 02:03:12 executing program 2: [ 798.130429][T23697] FAT-fs (loop5): bogus number of reserved sectors [ 798.137227][T23697] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write(r0, &(0x7f0000000000), 0x52698b21) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) [ 798.212893][T23697] FAT-fs (loop5): bogus number of reserved sectors [ 798.219566][T23697] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:13 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 02:03:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:13 executing program 3: rt_sigaction(0x28, 0x0, 0x0, 0x8, &(0x7f00000000c0)) [ 798.540619][T23711] IPVS: ftp: loaded support on port[0] = 21 02:03:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)='\f', 0x1, 0x11, 0x0, 0x0) [ 799.174072][T23743] FAT-fs (loop5): bogus number of FAT sectors [ 799.180603][T23743] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:14 executing program 3: writev(0xffffffffffffffff, 0x0, 0x0) [ 799.336576][T23714] IPVS: ftp: loaded support on port[0] = 21 [ 799.449049][ T753] tipc: TX() has been purged, node left! [ 799.496079][T23743] FAT-fs (loop5): bogus number of FAT sectors [ 799.503188][T23743] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:14 executing program 4: dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810302000000000905820200020000000905030040"], 0x0) 02:03:14 executing program 1: prctl$PR_SET_MM_MAP(0xf, 0x400000, 0x0, 0x0) 02:03:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x5}, {}]}) 02:03:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x401070c9, 0xffffffffffffffff) [ 800.570551][T23785] FAT-fs (loop5): bogus number of FAT sectors [ 800.576937][T23785] FAT-fs (loop5): Can't find a valid FAT filesystem [ 800.692481][T12371] usb 5-1: new high-speed USB device number 48 using dummy_hcd 02:03:15 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x5415, 0x0) [ 800.952352][T12371] usb 5-1: Using ep0 maxpacket: 8 02:03:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) [ 801.086418][T12371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.273432][T12371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 801.282709][T12371] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 801.291016][T12371] usb 5-1: Product: syz [ 801.295490][T12371] usb 5-1: Manufacturer: syz [ 801.300222][T12371] usb 5-1: SerialNumber: syz [ 801.476318][T12371] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 801.605630][T23800] FAT-fs (loop5): bogus number of FAT sectors [ 801.611947][T23800] FAT-fs (loop5): Can't find a valid FAT filesystem [ 801.678495][T12371] usb 5-1: USB disconnect, device number 48 02:03:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x545c, 0x0) 02:03:16 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x4) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 02:03:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@rodir='rodir'}]}) 02:03:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c08, 0xffffffffffffffff) 02:03:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) [ 801.958469][T23814] FAT-fs (loop1): bogus number of reserved sectors [ 801.965399][T23814] FAT-fs (loop1): Can't find a valid FAT filesystem [ 802.152864][T23814] FAT-fs (loop1): bogus number of reserved sectors [ 802.159631][T23814] FAT-fs (loop1): Can't find a valid FAT filesystem [ 802.263757][T23820] FAT-fs (loop5): bogus number of FAT sectors [ 802.270031][T23820] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:17 executing program 4: dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810302000000000905820200020000000905030040"], 0x0) 02:03:17 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 02:03:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x313, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x29}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 02:03:17 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = epoll_create1(0x0) dup2(r1, r0) 02:03:17 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:17 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x540a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a2f3c89fa6eda89464d0311b5f5372d30f4dd6"}) 02:03:17 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 803.100662][ T753] tipc: TX() has been purged, node left! [ 803.107263][T20608] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 803.353424][T20608] usb 5-1: Using ep0 maxpacket: 8 [ 803.473224][T20608] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 02:03:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:03:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x127e, 0xffffffffffffffff) 02:03:18 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x108}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:03:18 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 803.652946][T20608] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.663042][T20608] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 803.671386][T20608] usb 5-1: Product: syz [ 803.675876][T20608] usb 5-1: Manufacturer: syz [ 803.680615][T20608] usb 5-1: SerialNumber: syz [ 803.825972][T20608] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 804.230447][T20608] usb 5-1: USB disconnect, device number 49 02:03:19 executing program 4: dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810302000000000905820200020000000905030040"], 0x0) 02:03:19 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@uni_xlateno='uni_xlate=0'}]}) 02:03:19 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 02:03:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x5427, 0x0) 02:03:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101287, 0xffffffffffffffff) [ 804.980571][T23879] FAT-fs (loop3): bogus number of reserved sectors [ 804.987422][T23879] FAT-fs (loop3): Can't find a valid FAT filesystem 02:03:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101287, 0xffffffffffffffff) [ 805.073978][T23879] FAT-fs (loop3): bogus number of reserved sectors [ 805.080696][T23879] FAT-fs (loop3): Can't find a valid FAT filesystem 02:03:20 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 02:03:20 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 02:03:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', 0x0, 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) dup2(r4, r2) [ 805.691814][T12371] usb 5-1: new high-speed USB device number 50 using dummy_hcd 02:03:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101287, 0xffffffffffffffff) [ 805.942015][T12371] usb 5-1: Using ep0 maxpacket: 8 [ 806.062938][T12371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.242794][T12371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 806.252092][T12371] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 806.260381][T12371] usb 5-1: Product: syz [ 806.264837][T12371] usb 5-1: Manufacturer: syz [ 806.269574][T12371] usb 5-1: SerialNumber: syz [ 806.390032][T12371] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 806.623901][T12371] usb 5-1: USB disconnect, device number 50 02:03:21 executing program 4: dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810302000000000905820200020000000905030040"], 0x0) 02:03:21 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) ioctl$TCSETSF(r0, 0x5453, 0x0) 02:03:21 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 02:03:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', 0x0, 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:21 executing program 3: prctl$PR_SET_MM_MAP(0x10, 0x741000, 0x0, 0x0) 02:03:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101287, 0xffffffffffffffff) 02:03:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', 0x0, 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:22 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) ioctl$TCSETSF(r0, 0x5453, 0x0) 02:03:22 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x40101287, 0xffffffffffffffff) 02:03:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF2(r2, 0x5427, 0x0) 02:03:22 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) [ 807.821854][T12371] usb 5-1: new high-speed USB device number 51 using dummy_hcd 02:03:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) [ 808.082064][T12371] usb 5-1: Using ep0 maxpacket: 8 [ 808.214313][T12371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.392865][T12371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 808.402286][T12371] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 808.410588][T12371] usb 5-1: Product: syz [ 808.415045][T12371] usb 5-1: Manufacturer: syz [ 808.419783][T12371] usb 5-1: SerialNumber: syz [ 808.491669][T23955] FAT-fs (loop5): bogus number of reserved sectors [ 808.498352][T23955] FAT-fs (loop5): Can't find a valid FAT filesystem [ 808.635833][T12371] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 808.868348][T12371] usb 5-1: USB disconnect, device number 51 02:03:24 executing program 4: dup(0xffffffffffffffff) 02:03:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) ioctl$TCSETSF(r0, 0x5453, 0x0) 02:03:24 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x40101287, 0xffffffffffffffff) 02:03:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x426}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:03:24 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 02:03:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) 02:03:24 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) [ 809.676984][T23980] FAT-fs (loop5): bogus number of reserved sectors [ 809.683900][T23980] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:24 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 02:03:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) ioctl$TCSETSF(r0, 0x5453, 0x0) [ 809.874659][T23988] kvm [23977]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 [ 809.909157][T23988] kvm [23977]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000007e [ 809.975812][T23988] kvm [23977]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000052 02:03:24 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x40101287, 0xffffffffffffffff) [ 810.062198][T23988] kvm [23977]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000016 02:03:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, &(0x7f00000000c0)) [ 810.134812][T23988] kvm [23977]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000006a 02:03:25 executing program 4: dup(0xffffffffffffffff) 02:03:25 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 02:03:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x100, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), 0x4) 02:03:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r2, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) [ 810.740005][T24007] FAT-fs (loop5): bogus number of reserved sectors [ 810.746805][T24007] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:25 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101287, 0xffffffffffffffff) 02:03:25 executing program 4: dup(0xffffffffffffffff) 02:03:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 02:03:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r2, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:26 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810302000000000905820200020000000905030040"], 0x0) 02:03:26 executing program 2: r0 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) 02:03:26 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101287, 0xffffffffffffffff) [ 811.510363][T24027] FAT-fs (loop5): bogus number of reserved sectors [ 811.517229][T24027] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r2, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 811.821072][T20608] usb 5-1: new high-speed USB device number 52 using dummy_hcd 02:03:26 executing program 2: r0 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) 02:03:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="3800ac185ed5bb564b31000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900014046c5606300000000080002b90e601c9402f5946eea800f6ae440d0c650be61b3aa82e9c6df6ec655ed9ea5e6bc7e4744f35de2a784378089eee4294f253fdd7bb15fe6105740ee8ab7271186b18dda5c57a5560175b017855d044a3b40ea9778179d534211"], 0x38}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x51, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x4, 0x4) 02:03:26 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101287, 0xffffffffffffffff) [ 812.061990][T20608] usb 5-1: Using ep0 maxpacket: 8 02:03:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r2, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) [ 812.182224][T20608] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.199631][T24045] FAT-fs (loop5): bogus number of reserved sectors [ 812.206470][T24045] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:27 executing program 2: r0 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) 02:03:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 812.372900][T20608] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.382207][T20608] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 812.390520][T20608] usb 5-1: Product: syz [ 812.394970][T20608] usb 5-1: Manufacturer: syz [ 812.399737][T20608] usb 5-1: SerialNumber: syz [ 812.616551][T20608] cdc_ether: probe of 5-1:1.0 failed with error -22 02:03:27 executing program 0: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x40101287, 0xffffffffffffffff) [ 812.819555][T12371] usb 5-1: USB disconnect, device number 52 [ 812.917397][T24063] FAT-fs (loop5): bogus number of reserved sectors [ 812.924295][T24063] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:28 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) 02:03:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$midi(0xffffffffffffffff, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:28 executing program 2: r0 = epoll_create1(0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 02:03:28 executing program 0: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x40101287, 0xffffffffffffffff) 02:03:28 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) [ 814.160715][T24083] FAT-fs (loop5): bogus number of reserved sectors [ 814.167521][T24083] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:28 executing program 2: r0 = epoll_create1(0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 02:03:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f7c208dac29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e218a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)="bd", 0x1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r2, r0, r0}, &(0x7f0000000740)=""/243, 0xf3, &(0x7f0000000300)={&(0x7f0000000700)={'blake2b-160-generic\x00'}}) 02:03:30 executing program 0: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x40101287, 0xffffffffffffffff) 02:03:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$midi(0xffffffffffffffff, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:30 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 02:03:30 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) 02:03:30 executing program 2: r0 = epoll_create1(0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 02:03:30 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) [ 815.546094][T24097] FAT-fs (loop5): bogus number of reserved sectors [ 815.553222][T24097] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:30 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 02:03:30 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f00000000c0)={r1}) 02:03:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$midi(0xffffffffffffffff, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:31 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) 02:03:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f7c208dac29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e218a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)="bd", 0x1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r2, r0, r0}, &(0x7f0000000740)=""/243, 0xf3, &(0x7f0000000300)={&(0x7f0000000700)={'blake2b-160-generic\x00'}}) 02:03:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) [ 816.423469][T24111] FAT-fs (loop5): bogus number of reserved sectors [ 816.430156][T24111] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:31 executing program 0: 02:03:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f00000000c0)) 02:03:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r1, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:31 executing program 1: 02:03:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 02:03:32 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[], 0x0) [ 817.279760][T24129] FAT-fs (loop5): bogus number of reserved sectors [ 817.286678][T24129] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:32 executing program 0: 02:03:32 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f00000000c0)) 02:03:32 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 02:03:32 executing program 1: 02:03:32 executing program 0: [ 817.970582][T20608] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 817.971587][T24145] FAT-fs (loop5): bogus number of reserved sectors [ 817.985320][T24145] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:32 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 02:03:32 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:32 executing program 1: [ 818.241085][T20608] usb 5-1: device descriptor read/64, error 18 02:03:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f00000000c0)) 02:03:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) [ 818.631437][T20608] usb 5-1: device descriptor read/64, error 18 [ 818.910598][T20608] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 819.180274][T20608] usb 5-1: device descriptor read/64, error 18 [ 819.329334][T24163] FAT-fs (loop5): bogus number of reserved sectors [ 819.336381][T24163] FAT-fs (loop5): Can't find a valid FAT filesystem [ 819.580532][T20608] usb 5-1: device descriptor read/64, error 18 [ 819.700611][T20608] usb usb5-port1: attempt power cycle [ 820.411189][T20608] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 820.581604][T20608] usb 5-1: device descriptor read/8, error -61 02:03:35 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[], 0x0) 02:03:35 executing program 0: 02:03:35 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:35 executing program 1: 02:03:35 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) 02:03:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f00000000c0)) [ 820.801488][T20608] usb 5-1: device descriptor read/8, error -71 [ 820.918448][T24185] FAT-fs (loop5): bogus number of reserved sectors [ 820.925379][T24185] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:35 executing program 1: 02:03:35 executing program 0: 02:03:35 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:35 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) 02:03:36 executing program 0: 02:03:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f00000000c0)) [ 821.600292][T20608] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 821.758393][T24201] FAT-fs (loop5): bogus number of reserved sectors [ 821.765274][T24201] FAT-fs (loop5): Can't find a valid FAT filesystem [ 821.770370][T20608] usb 5-1: device descriptor read/8, error -61 [ 822.040314][T20608] usb 5-1: device descriptor read/8, error -61 [ 822.160206][T20608] usb usb5-port1: unable to enumerate USB device 02:03:38 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[], 0x0) 02:03:38 executing program 1: 02:03:38 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:38 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) 02:03:38 executing program 0: 02:03:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f00000000c0)) [ 824.363305][T24234] FAT-fs (loop5): bogus number of reserved sectors [ 824.370263][T24234] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:39 executing program 0: 02:03:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 02:03:39 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:39 executing program 1: 02:03:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174", 0xb}], 0x0, &(0x7f00000000c0)) [ 824.810014][ T17] usb 5-1: new high-speed USB device number 57 using dummy_hcd 02:03:39 executing program 0: [ 825.048573][T24248] FAT-fs (loop5): bogus number of reserved sectors [ 825.055551][T24248] FAT-fs (loop5): Can't find a valid FAT filesystem [ 825.079882][ T17] usb 5-1: device descriptor read/64, error 18 [ 825.470624][ T17] usb 5-1: device descriptor read/64, error 18 [ 825.740642][ T17] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 826.009919][ T17] usb 5-1: device descriptor read/64, error 18 [ 826.402887][ T17] usb 5-1: device descriptor read/64, error 18 [ 826.520111][ T17] usb usb5-port1: attempt power cycle [ 827.240578][ T17] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 827.410882][ T17] usb 5-1: device descriptor read/8, error -61 02:03:42 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 02:03:42 executing program 1: 02:03:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 02:03:42 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174", 0xb}], 0x0, &(0x7f00000000c0)) 02:03:42 executing program 0: [ 827.622924][ T17] usb 5-1: device descriptor read/8, error -71 [ 827.763929][T24282] FAT-fs (loop5): bogus number of reserved sectors [ 827.770848][T24282] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:42 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:42 executing program 1: 02:03:42 executing program 0: 02:03:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 02:03:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174", 0xb}], 0x0, &(0x7f00000000c0)) [ 828.432650][ T17] usb 5-1: new high-speed USB device number 60 using dummy_hcd 02:03:43 executing program 0: [ 828.594365][T24297] FAT-fs (loop5): bogus number of reserved sectors [ 828.601301][T24297] FAT-fs (loop5): Can't find a valid FAT filesystem [ 828.623314][ T17] usb 5-1: device descriptor read/8, error -61 [ 828.902913][ T17] usb 5-1: device descriptor read/8, error -61 [ 829.031536][ T17] usb usb5-port1: unable to enumerate USB device 02:03:45 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 02:03:45 executing program 1: 02:03:45 executing program 0: 02:03:45 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a10", 0x11}], 0x0, &(0x7f00000000c0)) 02:03:45 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) [ 831.284626][T24329] FAT-fs (loop5): invalid media value (0x00) [ 831.290939][T24329] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:46 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) 02:03:46 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 02:03:46 executing program 1: 02:03:46 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 02:03:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a10", 0x11}], 0x0, &(0x7f00000000c0)) 02:03:46 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed75", 0x68) [ 831.769915][T12371] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 832.166744][T12371] usb 5-1: device descriptor read/64, error 18 [ 832.254636][T24348] FAT-fs (loop5): invalid media value (0x00) [ 832.261024][T24348] FAT-fs (loop5): Can't find a valid FAT filesystem [ 832.579020][T12371] usb 5-1: device descriptor read/64, error 18 [ 832.849217][T12371] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 833.119022][T12371] usb 5-1: device descriptor read/64, error 18 [ 833.509029][T12371] usb 5-1: device descriptor read/64, error 18 [ 833.629257][T12371] usb usb5-port1: attempt power cycle [ 834.349561][T12371] usb 5-1: new high-speed USB device number 63 using dummy_hcd 02:03:49 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 02:03:49 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) pipe2(0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x401, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x4) listen(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0xf}) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x178, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5e6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x317}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x47}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x98dd2c31f741db1b) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x168, r3, 0x520, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x550}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1b590c23ab83f55eb9734f852f23fabbe082bd4e1976bb"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "4d56ebfd18e9decc2d89f871ef3bf70706684f912dd821f55d2a1b40c5f1f1"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3c81ff9f65576a42205837f37d3727286974e8b"}}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "f09abe4202b3f15c5e1b44a59efcd815e0481e2e714d4be6"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8081}, 0x804) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004409d}, 0x4048880) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040), 0x10) sendfile(r4, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdb05000000000000000400430d0000a29c05457048d605b54f3000d08be5bc79c7437a277153bc83d23a8c4c00"/61], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) 02:03:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc020000) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/285], 0xd8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsa(0x0, 0x1, 0x0) ioctl$TCSETX(r3, 0x5433, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x0, 0xfffffffa}, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="696e6465783d6f66662c6d657461636f70793d6f6e2c78696e6f3d6171746f2c696e6465783d6f66662c78696e6fa2386e2c64656661056c745f5065726d08000000000000006f626a5f747970653d73797a6b616c6c657230002c726f6f74636f6e746578743d73746166665f752c0053f5d9367a257983f01bd745541dca1e194868243d48d9dbc825"]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000002c0)={{0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, 0x80000000, 0x0, 0x0, 0x410030, 0x0, 0xfdfdf7ff, 0x0, [0x0, 0x0, 0x8000000]}) openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40, 0x0) 02:03:49 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 02:03:49 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, 0x0, 0x0) 02:03:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a10", 0x11}], 0x0, &(0x7f00000000c0)) [ 834.541961][T12371] usb 5-1: device descriptor read/8, error -71 [ 834.655850][T24374] FAT-fs (loop5): invalid media value (0x00) [ 834.662308][T24374] FAT-fs (loop5): Can't find a valid FAT filesystem [ 834.763166][T12371] usb 5-1: device descriptor read/8, error -71 02:03:49 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, 0x0, 0x0) 02:03:49 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6fec154d, 0xfffffffffffff1bc}, 0x0, 0x8, 0x401, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x4) listen(r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0xf}) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x170, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5e6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x317}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x47}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x98dd2c31f741db1b) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14c, r4, 0x520, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1b590c23ab83f55eb9734f852f23fabbe082bd4e1976bb"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "4d56ebfd18e9decc2d89f871ef3bf70706684f912dd821f55d2a1b40c5f1f1"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3c81ff9f65576a42205837f37d3727286974e8b"}}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "f09abe4202b3f15c5e1b44a59efcd815e0481e2e714d4be6"}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8081}, 0x804) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004409d}, 0x4048880) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040), 0x10) sendfile(r5, r3, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdb05000000000000000400430d0000a29c05457048d605b54f3000d08be5bc79c7437a277153bc83d23a8c4c00"/61], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) 02:03:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a10000274", 0x14}], 0x0, &(0x7f00000000c0)) 02:03:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2d, 0x28, 0x5, [@datasec={0x0, 0x2, 0x0, 0xf, 0x3ee, [{}], "9d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '%LA'}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000600)=""/4096, 0x45, 0x1000, 0x1}, 0x20) 02:03:50 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, 0x0, 0x0) [ 835.631595][T12371] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 835.703729][T24395] FAT-fs (loop5): invalid media value (0x00) [ 835.710113][T24395] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a10000274", 0x14}], 0x0, &(0x7f00000000c0)) [ 835.869064][T12371] usb 5-1: device descriptor read/8, error -61 [ 836.148886][T12371] usb 5-1: device descriptor read/8, error -61 [ 836.269244][T12371] usb usb5-port1: unable to enumerate USB device [ 836.395914][T24409] FAT-fs (loop5): invalid media value (0x00) [ 836.402597][T24409] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:52 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef0103010902440001010000000904000003020600000524060000"], 0x0) 02:03:52 executing program 1: clock_adjtime(0x0, &(0x7f0000000340)) 02:03:53 executing program 0: bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:03:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00460030de5a9bc70e676467603bdb797880867a0fc480899b00bb9241c1298e48caecc3154dd0918bd2ef4ee5e7a2ec1cd00b8bd710e593ecdf2c0abde70886fae807041e4efda791a1798036ea9987b6bb0154fea86dcd3f79ed69c57831d63ebc11654517397141c3924e58c675e14206a30fc49185f67eb2dfd0c010ec11448bfdafb13ad46dcbaf871927d2d4dcf2d6bb489f75dcf55b2a", @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x2000c821) r0 = memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4001008}, 0xc, &(0x7f0000000280)={0x0, 0x424}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:03:53 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040), 0x0) 02:03:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a10000274", 0x14}], 0x0, &(0x7f00000000c0)) 02:03:53 executing program 1: clock_adjtime(0x0, &(0x7f0000000340)) [ 838.717170][T12371] usb 5-1: new high-speed USB device number 65 using dummy_hcd 02:03:53 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040), 0x0) [ 838.837568][T24431] FAT-fs (loop5): invalid media value (0x00) [ 838.844035][T24431] FAT-fs (loop5): Can't find a valid FAT filesystem [ 838.974879][T12371] usb 5-1: Using ep0 maxpacket: 8 [ 839.127467][T12371] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.137845][T12371] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 02:03:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:03:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x1}) 02:03:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400", 0x15}], 0x0, &(0x7f00000000c0)) [ 839.461293][T12371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.470632][T12371] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 839.479310][T12371] usb 5-1: Product: syz [ 839.483605][T12371] usb 5-1: Manufacturer: syz [ 839.488465][T12371] usb 5-1: SerialNumber: syz 02:03:54 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040), 0x0) [ 839.681774][T12371] usb 5-1: bad CDC descriptors [ 839.902087][T12371] usb 5-1: USB disconnect, device number 65 [ 840.106326][T24449] FAT-fs (loop5): invalid media value (0x00) [ 840.112929][T24449] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:55 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef0103010902440001010000000904000003020600000524060000"], 0x0) 02:03:55 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6d", 0x34) 02:03:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:03:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ocfs2_control\x00', 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x0, 0x0, r1, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0xffffffffffffff1c) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00460030de5a9bc70e676467603bdb797880867a0fc480899b00bb9241c1298e48caecc3154dd0918bd2ef4ee5e7a2ec1cd00b8bd710e593ecdf2c0abde70886fae807041e4efda791a1798036ea9987b6bb0154fea86dcd3f79ed69c57831d63ebc11654517397141c3924e58c675e14206a30fc49185f67eb2dfd0c010ec11448bfdafb13ad46dcbaf871927d2d4dcf2d6bb489f75dcf55b2a", @ANYRES16=0x0, @ANYBLOB="00020000000000000000150000000400018004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x2000c821) memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000200)={0x7, 0x0, 0x7fffffff, 0xc34e, 0x0, 0xd8d4}) prctl$PR_SET_DUMPABLE(0x4, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:03:55 executing program 2: 02:03:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400", 0x15}], 0x0, &(0x7f00000000c0)) 02:03:55 executing program 1: [ 840.904617][T24468] FAT-fs (loop5): invalid media value (0x00) [ 840.910993][T24468] FAT-fs (loop5): Can't find a valid FAT filesystem 02:03:55 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6d", 0x34) 02:03:55 executing program 2: 02:03:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400", 0x15}], 0x0, &(0x7f00000000c0)) 02:03:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) [ 841.238471][T12371] usb 5-1: new high-speed USB device number 66 using dummy_hcd 02:03:56 executing program 1: [ 841.457893][T24483] FAT-fs (loop5): invalid media value (0x00) [ 841.464266][T24483] FAT-fs (loop5): Can't find a valid FAT filesystem [ 841.480184][T12371] usb 5-1: Using ep0 maxpacket: 8 [ 841.619647][T12371] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.630265][T12371] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.859596][T12371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.869191][T12371] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 841.877497][T12371] usb 5-1: Product: syz [ 841.881954][T12371] usb 5-1: Manufacturer: syz [ 841.886689][T12371] usb 5-1: SerialNumber: syz [ 841.951868][T12371] usb 5-1: bad CDC descriptors [ 842.153788][T12371] usb 5-1: USB disconnect, device number 66 02:03:57 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef0103010902440001010000000904000003020600000524060000"], 0x0) 02:03:57 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6d", 0x34) 02:03:57 executing program 2: 02:03:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:03:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, 0x0) 02:03:57 executing program 1: 02:03:57 executing program 2: 02:03:57 executing program 1: 02:03:57 executing program 2: 02:03:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, 0x0) 02:03:58 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:03:58 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25", 0x4e) [ 843.478931][T20608] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 843.718260][T20608] usb 5-1: Using ep0 maxpacket: 8 [ 843.839643][T20608] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.850158][T20608] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.080199][T20608] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.089620][T20608] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 844.098280][T20608] usb 5-1: Product: syz [ 844.102583][T20608] usb 5-1: Manufacturer: syz [ 844.107271][T20608] usb 5-1: SerialNumber: syz [ 844.202544][T20608] usb 5-1: bad CDC descriptors [ 844.403586][T20608] usb 5-1: USB disconnect, device number 67 02:03:59 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581"], 0x0) 02:03:59 executing program 2: 02:03:59 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:03:59 executing program 1: 02:03:59 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25", 0x4e) 02:03:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f0", 0x16}], 0x0, 0x0) 02:04:00 executing program 1: 02:04:00 executing program 2: 02:04:00 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25", 0x4e) 02:04:00 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:00 executing program 5: [ 845.701813][T20608] usb 5-1: new high-speed USB device number 68 using dummy_hcd 02:04:00 executing program 1: [ 845.948369][T20608] usb 5-1: Using ep0 maxpacket: 8 [ 846.082251][T20608] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.092716][T20608] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.102921][T20608] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 846.309243][T20608] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.318540][T20608] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 846.326832][T20608] usb 5-1: Product: syz [ 846.331387][T20608] usb 5-1: Manufacturer: syz [ 846.336142][T20608] usb 5-1: SerialNumber: syz [ 846.398552][T20608] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 846.602845][T20817] usb 5-1: USB disconnect, device number 68 02:04:01 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581"], 0x0) 02:04:01 executing program 2: 02:04:01 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b", 0x5b) 02:04:01 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:01 executing program 5: 02:04:01 executing program 1: 02:04:02 executing program 1: 02:04:02 executing program 2: 02:04:02 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:02 executing program 5: 02:04:02 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b", 0x5b) [ 848.077696][ T8705] usb 5-1: new high-speed USB device number 69 using dummy_hcd 02:04:02 executing program 1: [ 848.338188][ T8705] usb 5-1: Using ep0 maxpacket: 8 [ 848.459623][ T8705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.470134][ T8705] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.480475][ T8705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 848.697907][ T8705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.707055][ T8705] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 848.715549][ T8705] usb 5-1: Product: syz [ 848.719991][ T8705] usb 5-1: Manufacturer: syz [ 848.724983][ T8705] usb 5-1: SerialNumber: syz [ 848.800445][ T8705] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 849.007236][ T8705] usb 5-1: USB disconnect, device number 69 02:04:04 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581"], 0x0) 02:04:04 executing program 2: 02:04:04 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:04 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b", 0x5b) 02:04:04 executing program 5: 02:04:04 executing program 1: 02:04:04 executing program 5: 02:04:04 executing program 2: 02:04:04 executing program 1: 02:04:04 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b", 0x62) 02:04:04 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) [ 850.330273][ T8705] usb 5-1: new high-speed USB device number 70 using dummy_hcd 02:04:05 executing program 5: [ 850.607517][ T8705] usb 5-1: Using ep0 maxpacket: 8 [ 850.751767][ T8705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.762188][ T8705] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.772325][ T8705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 850.978208][ T8705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.987889][ T8705] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 850.996207][ T8705] usb 5-1: Product: syz [ 851.000661][ T8705] usb 5-1: Manufacturer: syz [ 851.005399][ T8705] usb 5-1: SerialNumber: syz [ 851.091830][ T8705] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 851.300367][ T8705] usb 5-1: USB disconnect, device number 70 02:04:06 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103020000000009058202"], 0x0) 02:04:06 executing program 1: 02:04:06 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) lseek(r0, 0xfffffc0000000001, 0x0) 02:04:06 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:06 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b", 0x62) 02:04:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x4e, &(0x7f0000000200)="c4c691019919daf8a16ef39b3ef12e0c853597183c2336efcd9459ac65e1bee34299695967189471e800ea792eca381d0d45e4b975ddfff6e111d9ade9e862732561b98543654202d57f557951fb"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) 02:04:07 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b", 0x62) 02:04:07 executing program 2: 02:04:07 executing program 1: 02:04:07 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:07 executing program 5: [ 852.630055][T12375] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 852.877144][T12375] usb 5-1: Using ep0 maxpacket: 8 02:04:07 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2", 0x65) [ 853.018664][T12375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.029022][T12375] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.040214][T12375] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.050177][T12375] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 853.060150][T12375] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.328701][T12375] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.337998][T12375] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 853.346302][T12375] usb 5-1: Product: syz [ 853.350770][T12375] usb 5-1: Manufacturer: syz [ 853.355498][T12375] usb 5-1: SerialNumber: syz [ 853.413785][T12375] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 853.617438][T12375] usb 5-1: USB disconnect, device number 71 02:04:08 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103020000000009058202"], 0x0) 02:04:08 executing program 1: 02:04:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x185, 0x0, 0x0) 02:04:08 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1}) 02:04:08 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2", 0x65) 02:04:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:09 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2", 0x65) 02:04:09 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008000400", @ANYRES32=r4], 0x24}}, 0x0) 02:04:09 executing program 5: syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e6e200", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 02:04:09 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 855.017916][T20817] usb 5-1: new high-speed USB device number 72 using dummy_hcd 02:04:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) [ 855.258161][T20817] usb 5-1: Using ep0 maxpacket: 8 [ 855.378492][T20817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 855.389186][T20817] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.400418][T20817] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.410472][T20817] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 855.420514][T20817] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.507149][ T17] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 855.647686][T20817] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.656987][T20817] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 855.665282][T20817] usb 5-1: Product: syz [ 855.669769][T20817] usb 5-1: Manufacturer: syz [ 855.674497][T20817] usb 5-1: SerialNumber: syz [ 855.757669][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 855.861741][T20817] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 855.877727][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 855.885986][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 855.895427][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 855.905728][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 855.915689][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 855.925630][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 855.935664][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 856.086482][ T8705] usb 5-1: USB disconnect, device number 72 [ 856.088176][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 856.101918][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 856.110333][ T17] usb 3-1: Product: syz [ 856.178829][ T17] usb 3-1: config 0 descriptor?? [ 856.200901][T24710] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 856.315833][ T17] rsi_91x: rsi_probe: Initialized os intf ops 02:04:11 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103020000000009058202"], 0x0) 02:04:11 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed", 0x67) 02:04:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 02:04:11 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000540), 0x8c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000000540)=ANY=[], &(0x7f0000000600)=0x44b) 02:04:11 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) [ 856.726832][ T17] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 856.734781][ T17] rsi_91x: rsi_hal_prepare_fwload: REGOUT read failed [ 856.741824][ T17] rsi_91x: rsi_probe: Failed in device init [ 856.842595][ T17] rsi_91x: rsi_probe: Failed in probe...Exiting [ 856.849761][ T17] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 856.989838][ T17] usb 3-1: USB disconnect, device number 2 02:04:11 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed", 0x67) 02:04:11 executing program 0: syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 02:04:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001740)=""/4115, 0x1013}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/109, 0x6d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x2ec, 0x0, 0x0, 0x800e00596) shutdown(r3, 0x0) shutdown(r4, 0x0) [ 857.396940][T20608] usb 5-1: new high-speed USB device number 73 using dummy_hcd 02:04:12 executing program 0: syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) [ 857.556816][ T17] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 857.637507][T20608] usb 5-1: Using ep0 maxpacket: 8 [ 857.758173][T20608] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.768889][T20608] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.780314][T20608] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 857.790352][T20608] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 857.800401][T20608] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.836745][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 857.958544][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 857.967014][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 857.976065][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 857.986639][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 857.996562][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 858.006395][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 858.016413][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 02:04:13 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:13 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) write$midi(r0, &(0x7f0000000040)="843dfee6e9848d6a066792ff86484ade6d3d559328bfd333f717539af7461da0a168efe50a4d3178b86a7506d9fefd50ee9faf6dc41723e17da8fb4d3b835c050e4fcdb4a5d1ec193e7545f78b25e4cdc27555aa6cb2efdca1dd9b78bf2b3d7dbe9b545cc2f9ed", 0x67) [ 858.278689][T20608] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.288534][T20608] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 858.297078][T20608] usb 5-1: Product: syz [ 858.301391][T20608] usb 5-1: Manufacturer: syz [ 858.306129][T20608] usb 5-1: SerialNumber: syz [ 858.350173][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 858.359511][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 858.392829][ T17] usb 3-1: config 0 descriptor?? [ 858.420883][ T17] usb 3-1: can't set config #0, error -71 [ 858.439266][ T17] usb 3-1: USB disconnect, device number 3 [ 858.451278][T20608] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 858.676340][T20608] usb 5-1: USB disconnect, device number 73 [ 859.017099][ T17] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 859.257055][ T17] usb 3-1: Using ep0 maxpacket: 8 02:04:14 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581030200000000090582020002000000"], 0x0) 02:04:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xff59, 0x0, 0x0, 0x800e00518) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 02:04:14 executing program 0: syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) 02:04:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000440)=[{&(0x7f0000002100)=""/4112, 0x1010}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xff59, 0x0, 0x0, 0x800e00518) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 02:04:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x6e, 0x2}, 0x44) [ 859.378294][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 859.386995][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 859.396058][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 859.406785][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 859.416721][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 859.426648][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 859.436634][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 02:04:14 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 02:04:14 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, 0x0) [ 859.768731][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 859.778136][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 859.786781][ T17] usb 3-1: Product: syz [ 859.854217][ T17] usb 3-1: config 0 descriptor?? [ 859.879544][T24792] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 859.955934][ T17] rsi_91x: rsi_probe: Initialized os intf ops [ 860.050741][ T8705] usb 5-1: new high-speed USB device number 74 using dummy_hcd 02:04:15 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, 0x0) 02:04:15 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) dup2(r1, r0) [ 860.336628][ T8705] usb 5-1: Using ep0 maxpacket: 8 [ 860.396918][ T17] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 860.405003][ T17] rsi_91x: rsi_hal_prepare_fwload: REGOUT read failed [ 860.412078][ T17] rsi_91x: rsi_probe: Failed in device init [ 860.478447][ T8705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.488951][ T8705] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.500325][ T8705] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 860.515515][ T17] rsi_91x: rsi_probe: Failed in probe...Exiting [ 860.522301][ T17] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 02:04:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000001c0)=""/30, 0x1e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) read(r3, &(0x7f0000000200)=""/227, 0xe3) shutdown(r3, 0x0) [ 860.604288][ T17] usb 3-1: USB disconnect, device number 4 [ 860.848161][ T8705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.857588][ T8705] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 860.865925][ T8705] usb 5-1: Product: syz [ 860.870413][ T8705] usb 5-1: Manufacturer: syz [ 860.875150][ T8705] usb 5-1: SerialNumber: syz [ 860.960318][ T8705] cdc_ether: probe of 5-1:1.0 failed with error -22 02:04:15 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:15 executing program 1: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x2) [ 861.185590][ T3223] usb 5-1: USB disconnect, device number 74 [ 861.727033][ T17] usb 3-1: new high-speed USB device number 5 using dummy_hcd 02:04:16 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581030200000000090582020002000000"], 0x0) 02:04:16 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, 0x0) 02:04:16 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x23, &(0x7f0000000000), 0xfe6a) 02:04:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/100, 0x62}], 0x1, 0x0, 0x31}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) readv(r2, &(0x7f0000000300)=[{&(0x7f0000005cc0)=""/102391, 0x18ff7}], 0x1) recvfrom$inet(r1, 0x0, 0xff0b, 0x0, 0x0, 0x800e00360) shutdown(r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r3, r3) recvfrom$unix(r4, &(0x7f0000000040)=""/197, 0xc5, 0x2, 0x0, 0x0) shutdown(r1, 0x0) 02:04:16 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) [ 861.967806][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 862.087778][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 862.096406][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 862.105587][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 862.116024][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 862.125918][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 862.136485][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 862.146524][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 02:04:17 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) [ 862.288542][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 862.298474][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 862.307128][ T17] usb 3-1: Product: syz 02:04:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/4081, 0xff1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/114, 0x72}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/47, 0x2f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="a9c3936d6ee888a2fff1dec76466cce89de782d2bef3928a50e1a8837889ff725a605aa7139b10ee8edae1428549a53ac722e62c67eb746d1739a7375040ab87fdc41f903e762c8a8b8b0a23e57e03066b343f1f2365e5732d90fc2716ef6f8a3de94b65c2243e662a4a201a8f908809dfef527a5ea60a4b974b66e1087dc2eb242ff47c2e9de07c04c51728833ffcbe", 0xffffff5a, 0x105, &(0x7f0000000000)={0xfffffffffffffea3, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) [ 862.428466][ T17] usb 3-1: config 0 descriptor?? [ 862.450341][T24867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 862.554844][ T17] rsi_91x: rsi_probe: Initialized os intf ops [ 862.786610][T12375] usb 5-1: new high-speed USB device number 75 using dummy_hcd 02:04:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/4081, 0xff1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/114, 0x72}, {0x0}], 0x2}, 0x2) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000040), 0x15) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="a9c3936d6ee888a2fff1dec76466cce89de782d2bef3928a50e1a8837889ff725a605aa7139b10ee8edae1428549a53ac722e62c67eb746d1739a7375040ab87fdc41f903e762c8a8b8b0a23e57e03066b343f1f2365e5732d90fc2716ef6f8a3de94b65c2243e662a4a201a8f908809dfef527a5ea60a4b974b66e1087dc2eb242ff47c2e9de07c04c51728833ffcbe", 0xffffff5a, 0x105, &(0x7f0000000000)={0xfffffffffffffea3, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) [ 862.976695][ T17] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 862.984772][ T17] rsi_91x: rsi_hal_prepare_fwload: REGOUT read failed [ 862.991852][ T17] rsi_91x: rsi_probe: Failed in device init 02:04:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000001c0)=""/30, 0x1e}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) read(r3, &(0x7f0000000200)=""/227, 0xe3) shutdown(r3, 0x0) [ 863.066196][T12375] usb 5-1: Using ep0 maxpacket: 8 [ 863.083312][ T17] rsi_91x: rsi_probe: Failed in probe...Exiting [ 863.090446][ T17] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 02:04:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/100, 0x62}], 0x1, 0x0, 0x31}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) readv(r2, &(0x7f0000000300)=[{&(0x7f0000005cc0)=""/102391, 0x18ff7}], 0x1) recvfrom$inet(r1, 0x0, 0xff0b, 0x0, 0x0, 0x800e00360) shutdown(r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r3, r3) recvfrom$unix(r4, &(0x7f0000000040)=""/197, 0xc5, 0x2, 0x0, 0x0) shutdown(r1, 0x0) [ 863.190495][ T17] usb 3-1: USB disconnect, device number 5 [ 863.211296][T12375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.221711][T12375] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.232943][T12375] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.491929][T12375] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.501225][T12375] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 863.509781][T12375] usb 5-1: Product: syz [ 863.514117][T12375] usb 5-1: Manufacturer: syz [ 863.518961][T12375] usb 5-1: SerialNumber: syz [ 863.580407][T12375] cdc_ether: probe of 5-1:1.0 failed with error -22 02:04:18 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/100, 0x62}], 0x1, 0x0, 0x31}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) readv(r2, &(0x7f0000000300)=[{&(0x7f0000005cc0)=""/102391, 0x18ff7}], 0x1) recvfrom$inet(r1, 0x0, 0xff0b, 0x0, 0x0, 0x800e00360) shutdown(r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r3, r3) recvfrom$unix(r4, &(0x7f0000000040)=""/197, 0xc5, 0x2, 0x0, 0x0) shutdown(r1, 0x0) [ 863.784661][ T8706] usb 5-1: USB disconnect, device number 75 [ 864.222486][T12375] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 864.486846][T12375] usb 3-1: Using ep0 maxpacket: 8 02:04:19 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581030200000000090582020002000000"], 0x0) 02:04:19 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 02:04:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 02:04:19 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) [ 864.607037][T12375] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 864.615317][T12375] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 864.624582][T12375] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 864.634852][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 864.644725][T12375] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 864.654759][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 864.664717][T12375] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 02:04:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422b", 0x51}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001580)={0x1f98, 0x14, 0x200, 0x70bd26, 0x25dfdbfc, {0x1e, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xf80, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1f98}, 0x1, 0x0, 0x0, 0x20000010}, 0x40008a3) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000, 0x40240}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) 02:04:19 executing program 3: r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) [ 865.116212][T12375] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 865.125446][T12375] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 865.134066][T12375] usb 3-1: Product: syz 02:04:19 executing program 5: clone(0x80200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'wg2\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 02:04:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c80)={0x4, 0x0, [{0x1000, 0x27, &(0x7f0000000000)=""/39}, {0x6000, 0xd7, &(0x7f0000000340)=""/215}, {0x4, 0x7f, &(0x7f0000000840)=""/127}, {0x2, 0xc6, &(0x7f0000000b80)=""/198}]}) r2 = dup3(r0, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) [ 865.229650][T12375] usb 3-1: config 0 descriptor?? [ 865.258556][T24958] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 865.266337][ T8706] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 865.337407][T12375] rsi_91x: rsi_probe: Initialized os intf ops [ 865.398446][T24997] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 865.515993][ T8706] usb 5-1: Using ep0 maxpacket: 8 02:04:20 executing program 3: r0 = syz_io_uring_setup(0x6b52, &(0x7f0000000580), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x81be, 0x1, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @xdp, @hci}) io_uring_enter(r0, 0x25f2, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000080)=0x7f) [ 865.640199][ T8706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.650685][ T8706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.661991][ T8706] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 02:04:20 executing program 5: r0 = syz_io_uring_setup(0x6b52, &(0x7f0000000580)={0x0, 0x0, 0x1}, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @xdp, @hci}) io_uring_enter(r0, 0x119, 0x0, 0x3, 0x0, 0x3a) [ 865.780695][T12375] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 865.788696][T12375] rsi_91x: rsi_hal_prepare_fwload: REGOUT read failed [ 865.795601][T12375] rsi_91x: rsi_probe: Failed in device init [ 865.893281][T12375] rsi_91x: rsi_probe: Failed in probe...Exiting [ 865.899888][T12375] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 866.012818][T12375] usb 3-1: USB disconnect, device number 6 [ 866.108247][ T8706] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.117651][ T8706] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 866.126650][ T8706] usb 5-1: Product: syz [ 866.130954][ T8706] usb 5-1: Manufacturer: syz [ 866.135827][ T8706] usb 5-1: SerialNumber: syz [ 866.279525][ T8706] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 866.509586][ T17] usb 5-1: USB disconnect, device number 76 02:04:21 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) 02:04:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r5, r4) 02:04:21 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581030200000000090582020002000000090503"], 0x0) 02:04:21 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c80)={0x4, 0x0, [{0x1000, 0x27, &(0x7f0000000000)=""/39}, {0x6000, 0xd7, &(0x7f0000000340)=""/215}, {0x4, 0x7f, &(0x7f0000000840)=""/127}, {0x2, 0xc6, &(0x7f0000000b80)=""/198}]}) r2 = dup3(r0, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) 02:04:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c", 0x2c}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e", 0xbb}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000086fff4)) r1 = getpid() r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) [ 867.186133][T12371] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 867.436465][T12371] usb 3-1: Using ep0 maxpacket: 8 [ 867.579918][T12371] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 867.588255][T12371] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 867.597451][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 867.607590][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 867.617460][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 02:04:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0xd7cc4500, &(0x7f0000000280)={0x0, r0+10000000}, 0x0) [ 867.627386][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 867.637345][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 02:04:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r5, r4) 02:04:22 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x84801, 0x0) 02:04:22 executing program 0: [ 867.826562][T12371] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 867.835869][T12371] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 867.844175][T12371] usb 3-1: Product: syz [ 867.928151][T12371] usb 3-1: config 0 descriptor?? [ 867.958377][T25051] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 868.014427][T12375] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 868.061086][T12371] rsi_91x: rsi_probe: Initialized os intf ops [ 868.226668][T12371] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 868.253553][T12371] rsi_91x: rsi_probe: Failed in probe...Exiting [ 868.260349][T12371] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 02:04:23 executing program 0: [ 868.277821][T12375] usb 5-1: Using ep0 maxpacket: 8 [ 868.383314][T12371] usb 3-1: USB disconnect, device number 7 [ 868.417418][T12375] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.428710][T12375] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 02:04:23 executing program 1: 02:04:23 executing program 0: [ 868.661590][T12375] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.670984][T12375] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 868.679526][T12375] usb 5-1: Product: syz [ 868.683824][T12375] usb 5-1: Manufacturer: syz [ 868.688628][T12375] usb 5-1: SerialNumber: syz [ 868.869240][T12375] cdc_ether: probe of 5-1:1.0 failed with error -22 02:04:23 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) 02:04:23 executing program 3: [ 869.100339][T12375] usb 5-1: USB disconnect, device number 77 [ 869.635633][T12371] usb 3-1: new high-speed USB device number 8 using dummy_hcd 02:04:24 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581030200000000090582020002000000090503"], 0x0) 02:04:24 executing program 5: 02:04:24 executing program 1: 02:04:24 executing program 0: 02:04:24 executing program 3: 02:04:24 executing program 5: [ 869.891243][T12371] usb 3-1: Using ep0 maxpacket: 8 [ 870.017230][T12371] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 870.025591][T12371] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 870.034702][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 870.044969][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 870.054906][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 02:04:24 executing program 0: 02:04:24 executing program 3: [ 870.064772][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 870.074732][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 02:04:24 executing program 1: 02:04:25 executing program 5: [ 870.365758][T12834] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 870.367349][T12371] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 870.382991][T12371] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 870.391382][T12371] usb 3-1: Product: syz [ 870.569425][T12371] usb 3-1: config 0 descriptor?? [ 870.591318][T25104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 870.606267][T12834] usb 5-1: Using ep0 maxpacket: 8 [ 870.693283][T12371] rsi_91x: rsi_probe: Initialized os intf ops [ 870.726989][T12834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.738143][T12834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 870.858523][T12371] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 870.868711][T12371] rsi_91x: rsi_probe: Failed in probe...Exiting [ 870.875546][T12371] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 870.897805][T12834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.907430][T12834] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 870.909386][T12371] usb 3-1: USB disconnect, device number 8 [ 870.915903][T12834] usb 5-1: Product: syz [ 870.916013][T12834] usb 5-1: Manufacturer: syz [ 870.930713][T12834] usb 5-1: SerialNumber: syz [ 871.013242][T12834] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 871.211620][T12834] usb 5-1: USB disconnect, device number 78 02:04:26 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) 02:04:26 executing program 3: 02:04:26 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581030200000000090582020002000000090503"], 0x0) 02:04:26 executing program 0: 02:04:26 executing program 5: 02:04:26 executing program 1: 02:04:26 executing program 3: [ 871.825507][ T3223] usb 3-1: new high-speed USB device number 9 using dummy_hcd 02:04:26 executing program 1: [ 872.085331][ T3223] usb 3-1: Using ep0 maxpacket: 8 02:04:26 executing program 0: 02:04:26 executing program 3: 02:04:26 executing program 5: [ 872.226764][ T3223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 872.235050][ T3223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 872.244484][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 872.254787][ T3223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 872.264708][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 872.274620][ T3223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 872.284628][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 872.445552][ T9943] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 872.467490][ T3223] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 872.476870][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 872.485614][ T3223] usb 3-1: Product: syz [ 872.573211][ T3223] usb 3-1: config 0 descriptor?? [ 872.601167][T25145] raw-gadget gadget: fail, usb_ep_enable returned -22 02:04:27 executing program 3: [ 872.696136][ T3223] rsi_91x: rsi_probe: Initialized os intf ops [ 872.710399][ T9943] usb 5-1: Using ep0 maxpacket: 8 [ 872.849308][ T9943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.860595][ T9943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 872.885483][ T3223] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 872.913564][ T3223] rsi_91x: rsi_probe: Failed in probe...Exiting [ 872.920490][ T3223] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 872.983912][ T3223] usb 3-1: USB disconnect, device number 9 [ 873.107472][ T9943] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.116917][ T9943] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 873.125394][ T9943] usb 5-1: Product: syz [ 873.129700][ T9943] usb 5-1: Manufacturer: syz [ 873.134424][ T9943] usb 5-1: SerialNumber: syz [ 873.222551][ T9943] cdc_ether: probe of 5-1:1.0 failed with error -22 02:04:28 executing program 2: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:28 executing program 0: [ 873.431420][ T9943] usb 5-1: USB disconnect, device number 79 02:04:28 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103020000000009058202000200000009050300"], 0x0) 02:04:28 executing program 1: 02:04:28 executing program 5: 02:04:28 executing program 3: 02:04:28 executing program 0: 02:04:29 executing program 5: 02:04:29 executing program 1: 02:04:29 executing program 2: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:29 executing program 0: 02:04:29 executing program 3: [ 874.738363][ T17] usb 5-1: new high-speed USB device number 80 using dummy_hcd 02:04:29 executing program 5: 02:04:29 executing program 1: [ 874.985203][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 875.106702][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.118025][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 875.331386][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.341121][ T17] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 875.349725][ T17] usb 5-1: Product: syz [ 875.354031][ T17] usb 5-1: Manufacturer: syz [ 875.359159][ T17] usb 5-1: SerialNumber: syz [ 875.458794][ T17] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 875.661768][ T17] usb 5-1: USB disconnect, device number 80 02:04:30 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103020000000009058202000200000009050300"], 0x0) 02:04:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000580)=""/241, 0xf1}], 0x1, 0x0, 0x0) 02:04:30 executing program 0: 02:04:30 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc100, 0x0) 02:04:30 executing program 2: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:30 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000c000000090001"], 0x3c}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 876.389624][T25226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:04:31 executing program 0: 02:04:31 executing program 5: [ 876.915058][T12834] usb 5-1: new high-speed USB device number 81 using dummy_hcd 02:04:31 executing program 0: 02:04:31 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 877.180969][T25238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 877.191021][T12834] usb 5-1: Using ep0 maxpacket: 8 02:04:32 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x4}}, 0x26) [ 877.315117][T12834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.327146][T12834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 02:04:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) [ 877.516472][T12834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 877.525848][T12834] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 877.534153][T12834] usb 5-1: Product: syz [ 877.538767][T12834] usb 5-1: Manufacturer: syz [ 877.543524][T12834] usb 5-1: SerialNumber: syz [ 877.776396][T12834] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 878.062781][T12834] usb 5-1: USB disconnect, device number 81 02:04:33 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000ef010301090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103020000000009058202000200000009050300"], 0x0) 02:04:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)) 02:04:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:33 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:33 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 02:04:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 02:04:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) fchmod(r0, 0x0) 02:04:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) [ 879.323324][T25281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 879.328719][ T17] usb 5-1: new high-speed USB device number 82 using dummy_hcd 02:04:34 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x0) [ 879.522646][T25287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 879.574926][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 879.697039][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.708276][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 879.830558][T25291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 879.906718][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.916041][ T17] usb 5-1: New USB device strings: Mfr=239, Product=1, SerialNumber=3 [ 879.924352][ T17] usb 5-1: Product: syz [ 879.928837][ T17] usb 5-1: Manufacturer: syz [ 879.933561][ T17] usb 5-1: SerialNumber: syz [ 879.948632][T25298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 880.049513][ T17] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 880.252389][ T9943] usb 5-1: USB disconnect, device number 82 02:04:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 02:04:35 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x2000000000000071, 0x2, r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) dup3(r2, r1, 0x0) 02:04:35 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, 0x0) 02:04:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 02:04:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)) [ 881.404616][ T9943] usb 3-1: new high-speed USB device number 10 using dummy_hcd 02:04:36 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) [ 881.694864][ T9943] usb 3-1: device descriptor read/64, error 18 02:04:36 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x2e) 02:04:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 02:04:36 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 02:04:36 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:36 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) [ 882.094748][ T9943] usb 3-1: device descriptor read/64, error 18 02:04:37 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={0x2}) [ 882.374554][ T9943] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 882.644900][ T9943] usb 3-1: device descriptor read/64, error 18 [ 883.034436][ T9943] usb 3-1: device descriptor read/64, error 18 [ 883.154564][ T9943] usb usb3-port1: attempt power cycle [ 883.875126][ T9943] usb 3-1: new high-speed USB device number 12 using dummy_hcd 02:04:38 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 02:04:38 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:38 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) [ 884.105234][ T9943] usb 3-1: device descriptor read/8, error -71 [ 884.314473][ T9943] usb 3-1: device descriptor read/8, error -71 02:04:39 executing program 4: socket$inet6(0xa, 0x0, 0x0) fanotify_init(0x0, 0x0) 02:04:39 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:39 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:39 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 02:04:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) [ 884.884571][ T9943] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 885.096038][ T9943] usb 3-1: device descriptor read/8, error -61 02:04:39 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) [ 885.405246][ T9943] usb 3-1: device descriptor read/8, error -61 [ 885.537447][ T9943] usb usb3-port1: unable to enumerate USB device 02:04:42 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:42 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:42 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 02:04:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 02:04:42 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:42 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 02:04:42 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:42 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:42 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 888.493829][ T17] usb 3-1: new high-speed USB device number 14 using dummy_hcd 02:04:43 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) [ 888.764132][ T17] usb 3-1: device descriptor read/64, error 18 [ 889.170404][ T17] usb 3-1: device descriptor read/64, error 18 [ 889.444541][ T17] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 889.724276][ T17] usb 3-1: device descriptor read/64, error 18 [ 890.113995][ T17] usb 3-1: device descriptor read/64, error 18 [ 890.235052][ T17] usb usb3-port1: attempt power cycle [ 890.954962][ T17] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 891.123983][ T17] usb 3-1: device descriptor read/8, error -61 02:04:46 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 02:04:46 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:46 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:46 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x2000000000000071, 0x2, r0, 0x0) fanotify_mark(r1, 0x80, 0x0, 0xffffffffffffffff, 0x0) 02:04:46 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) [ 891.414037][ T17] usb 3-1: device descriptor read/8, error -71 02:04:46 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:46 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:46 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 02:04:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 892.203621][ T17] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 892.385113][ T17] usb 3-1: device descriptor read/8, error -61 02:04:47 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) [ 892.655133][ T17] usb 3-1: device descriptor read/8, error -61 [ 892.779015][ T17] usb usb3-port1: unable to enumerate USB device 02:04:49 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:49 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:49 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:04:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 02:04:49 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:50 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:50 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 02:04:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) 02:04:50 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:50 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 895.833767][T20817] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 896.113108][T20817] usb 3-1: device descriptor read/64, error 18 02:04:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) [ 896.503114][T20817] usb 3-1: device descriptor read/64, error 18 [ 896.773293][T20817] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 897.055102][T20817] usb 3-1: device descriptor read/64, error 18 [ 897.443843][T20817] usb 3-1: device descriptor read/64, error 18 [ 897.563869][T20817] usb usb3-port1: attempt power cycle [ 898.283638][T20817] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 898.454261][T20817] usb 3-1: device descriptor read/8, error -61 02:04:53 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:53 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:53 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 02:04:53 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:53 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:04:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) [ 898.773329][T20817] usb 3-1: device descriptor read/8, error -71 02:04:54 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:54 executing program 4: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:04:54 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 02:04:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:54 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:54 executing program 4: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 899.783558][T20817] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 900.003339][T20817] usb 3-1: device descriptor read/8, error -61 [ 900.283123][T20817] usb 3-1: device descriptor read/8, error -61 [ 900.406779][T20817] usb usb3-port1: unable to enumerate USB device 02:04:57 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:04:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:57 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="9d", 0x1}], 0x1}], 0x1, 0x0) 02:04:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:57 executing program 4: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:04:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) 02:04:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:04:58 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:04:58 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:04:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x9]}, 0x5c) [ 903.802741][ T3223] usb 3-1: new high-speed USB device number 22 using dummy_hcd 02:04:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) [ 904.053429][ T3223] usb 3-1: Using ep0 maxpacket: 8 [ 904.193755][ T3223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 904.202013][ T3223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.213251][ T3223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 904.333880][ T3223] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 904.343382][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 904.351624][ T3223] usb 3-1: Product: syz [ 904.399513][ T3223] usb 3-1: config 0 descriptor?? [ 904.454887][ T3223] RSI-USB WLAN 3-1:0.0: missing wlan bulk endpoints [ 904.461638][ T3223] rsi_91x: rsi_probe: Failed to init usb interface [ 904.501177][ T3223] rsi_91x: rsi_probe: Failed in probe...Exiting [ 904.508080][ T3223] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:01 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)) 02:05:01 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:01 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:05:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e997963db2cc45735c4f86342c7b16f0"}) 02:05:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) [ 906.650548][T20608] usb 3-1: USB disconnect, device number 22 02:05:02 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:05:02 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 02:05:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) 02:05:02 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)) [ 907.952167][T12371] usb 3-1: new high-speed USB device number 23 using dummy_hcd 02:05:02 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) [ 908.202585][T12371] usb 3-1: Using ep0 maxpacket: 8 [ 908.323723][T12371] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 908.332045][T12371] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.342448][T12371] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 908.466076][T12371] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 908.475473][T12371] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 908.483958][T12371] usb 3-1: Product: syz [ 908.563559][T12371] usb 3-1: config 0 descriptor?? [ 908.627481][T12371] RSI-USB WLAN 3-1:0.0: missing wlan bulk endpoints [ 908.634808][T12371] rsi_91x: rsi_probe: Failed to init usb interface [ 908.649399][T12371] rsi_91x: rsi_probe: Failed in probe...Exiting [ 908.656492][T12371] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 [ 910.749578][ T17] usb 3-1: USB disconnect, device number 23 02:05:05 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2015b00d104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:05:05 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000001380)={0x0, 0x0, 0x0}) 02:05:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)) 02:05:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) [ 911.185958][T25638] IPVS: ftp: loaded support on port[0] = 21 [ 911.201709][ T29] audit: type=1400 audit(1596852305.918:26): avc: denied { sys_admin } for pid=25630 comm="syz-executor.0" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 02:05:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:05:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)) 02:05:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd11}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x478}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 02:05:06 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 911.951956][ T3223] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 912.110683][ T753] tipc: TX() has been purged, node left! [ 912.205062][ T3223] usb 3-1: Using ep0 maxpacket: 8 [ 912.259651][T25669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 912.343731][ T3223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 912.352121][ T3223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.362671][ T3223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 912.443973][T25676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:05:07 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)) [ 912.528682][ T3223] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 912.538652][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 912.547109][ T3223] usb 3-1: Product: syz [ 912.639042][ T3223] usb 3-1: config 0 descriptor?? 02:05:07 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) [ 912.731024][ T3223] RSI-USB WLAN 3-1:0.0: missing wlan bulk endpoints [ 912.738479][ T3223] rsi_91x: rsi_probe: Failed to init usb interface [ 912.862794][ T3223] rsi_91x: rsi_probe: Failed in probe...Exiting [ 912.869371][ T3223] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:09 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e030000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "69d06dd4025a1ee386f4ec3870652801ff42c6"}) 02:05:09 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd11}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x478}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 02:05:09 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)) 02:05:09 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x158}}, 0x0) recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)=""/102400, 0x19000}], 0x1}, 0x0) [ 914.597250][T20817] usb 3-1: USB disconnect, device number 24 [ 914.893191][T25711] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:05:09 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 02:05:09 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)) 02:05:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, 0x0) 02:05:10 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000280)) 02:05:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@ipv6_delrule={0x6c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10001}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) [ 915.462295][ T17] usb 3-1: new high-speed USB device number 25 using dummy_hcd 02:05:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) [ 915.712911][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 915.832832][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 915.841810][ T17] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.852271][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 915.861466][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 915.871638][ T17] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 916.214169][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 916.223635][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 916.232151][ T17] usb 3-1: Product: syz [ 916.290342][ T17] usb 3-1: config 0 descriptor?? [ 916.314094][T25725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.372689][ T17] RSI-USB WLAN 3-1:0.0: missing wlan bulk endpoints [ 916.379435][ T17] rsi_91x: rsi_probe: Failed to init usb interface [ 916.465750][ T17] rsi_91x: rsi_probe: Failed in probe...Exiting [ 916.472952][ T17] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 [ 918.349863][T12834] usb 3-1: USB disconnect, device number 25 02:05:13 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e030000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:13 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) 02:05:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, 0x0) 02:05:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 02:05:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000002c0)={0x0, 0x0, 0x0, [], 0x0}) 02:05:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 02:05:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, 0x0) 02:05:13 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) 02:05:13 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) 02:05:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) [ 919.521763][ T17] usb 3-1: new high-speed USB device number 26 using dummy_hcd 02:05:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 919.761117][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 919.882309][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 919.890580][ T17] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.901123][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 919.910168][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 919.920570][ T17] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 920.392496][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 920.402003][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 920.410306][ T17] usb 3-1: Product: syz [ 920.527724][ T17] usb 3-1: config 0 descriptor?? [ 920.554810][T25766] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 920.678287][ T17] RSI-USB WLAN 3-1:0.0: missing wlan bulk endpoints [ 920.685229][ T17] rsi_91x: rsi_probe: Failed to init usb interface [ 920.803984][ T17] rsi_91x: rsi_probe: Failed in probe...Exiting [ 920.810795][ T17] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5437) 02:05:17 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) 02:05:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 02:05:17 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e030000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 922.264953][ T3223] usb 3-1: USB disconnect, device number 26 02:05:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 02:05:17 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)) 02:05:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 923.271923][ T3223] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 923.470265][T25822] input: syz0 as /devices/virtual/input/input13 [ 923.513721][ T3223] usb 3-1: Using ep0 maxpacket: 8 [ 923.643173][ T3223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 923.651600][ T3223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.661940][ T3223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 923.671042][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 02:05:18 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)) [ 923.681179][ T3223] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 02:05:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 924.031378][ T3223] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 924.040817][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 924.049127][ T3223] usb 3-1: Product: syz [ 924.185603][ T3223] usb 3-1: config 0 descriptor?? 02:05:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 924.217794][T25813] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 924.297490][T25839] input: syz0 as /devices/virtual/input/input15 [ 924.313161][ T3223] RSI-USB WLAN 3-1:0.0: missing wlan bulk endpoints [ 924.320000][ T3223] rsi_91x: rsi_probe: Failed to init usb interface [ 924.365400][ T3223] rsi_91x: rsi_probe: Failed in probe...Exiting [ 924.372275][ T3223] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:20 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e03000000090505020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:20 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)) 02:05:20 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:05:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 925.981443][ T3223] usb 3-1: USB disconnect, device number 27 [ 926.242422][T25870] input: syz0 as /devices/virtual/input/input16 02:05:21 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) 02:05:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:05:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) 02:05:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 926.930704][T20817] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 927.095395][T25889] input: syz0 as /devices/virtual/input/input17 [ 927.171232][T20817] usb 3-1: Using ep0 maxpacket: 8 02:05:21 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) [ 927.291062][T20817] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 927.299330][T20817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.310185][T20817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 927.319225][T20817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 927.329635][T20817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 927.339616][T20817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 927.349605][T20817] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.702431][T20817] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 927.712131][T20817] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 927.720841][T20817] usb 3-1: Product: syz [ 927.792591][T20817] usb 3-1: config 0 descriptor?? [ 927.813123][T25881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 927.877235][T20817] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 927.884259][T20817] rsi_91x: rsi_probe: Failed to init usb interface [ 927.900392][T20817] rsi_91x: rsi_probe: Failed in probe...Exiting [ 927.906935][T20817] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:24 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e03000000090505020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:24 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200}) 02:05:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) 02:05:24 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) 02:05:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) [ 929.670604][ T3223] usb 3-1: USB disconnect, device number 28 02:05:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000d0601040000000000000000000000000e0003006269746d3f703a69700000000500010006000000050005"], 0x34}}, 0x0) 02:05:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 02:05:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)) 02:05:25 executing program 1: ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 930.620178][ T3223] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 930.795861][T25939] Can't find ip_set type bitm?p:ip [ 930.870389][ T3223] usb 3-1: Using ep0 maxpacket: 8 [ 931.010316][ T3223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 931.018647][ T3223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.029124][ T3223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 931.038313][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 931.048452][ T3223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 02:05:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 931.058903][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 931.068781][ T3223] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 931.511319][ T3223] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 931.520620][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 931.528921][ T3223] usb 3-1: Product: syz [ 931.573125][ T3223] usb 3-1: config 0 descriptor?? [ 931.593355][T25931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 931.637387][ T3223] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 931.644486][ T3223] rsi_91x: rsi_probe: Failed to init usb interface [ 931.681631][ T3223] rsi_91x: rsi_probe: Failed in probe...Exiting [ 931.688200][ T3223] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:28 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e03000000090505020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f446dc355997294b502048fa4b18e1eded50675253120a6a4c6a6a5b2ba2"}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'hsr0\x00', 'caif0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 02:05:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)) [ 933.490812][T20610] usb 3-1: USB disconnect, device number 29 02:05:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:28 executing program 1: ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24, 0x2}) 02:05:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) [ 933.812822][T25973] input: syz0 as /devices/virtual/input/input21 02:05:28 executing program 1: ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24, 0x2}) 02:05:28 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) 02:05:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 02:05:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)) 02:05:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 934.420715][ T3223] usb 3-1: new high-speed USB device number 30 using dummy_hcd 02:05:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, 0x0) [ 934.691474][ T3223] usb 3-1: Using ep0 maxpacket: 8 [ 934.780451][T25992] input: syz0 as /devices/virtual/input/input22 [ 934.811827][ T3223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 934.820306][ T3223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.830744][ T3223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 934.839931][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 934.850106][ T3223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 934.860009][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 934.869935][ T3223] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.311659][ T3223] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 935.321088][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 935.329685][ T3223] usb 3-1: Product: syz [ 935.411135][ T3223] usb 3-1: config 0 descriptor?? [ 935.432402][T25980] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 935.456493][ T3223] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 935.463462][ T3223] rsi_91x: rsi_probe: Failed to init usb interface [ 935.477932][ T3223] rsi_91x: rsi_probe: Failed in probe...Exiting [ 935.484663][ T3223] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:31 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) 02:05:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000d0601040000000000000000000000000e0003006269746d3f703a69700000000500010006000000050005"], 0x34}}, 0x0) 02:05:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, 0x0) 02:05:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) [ 937.133391][T20610] usb 3-1: USB disconnect, device number 30 [ 937.418891][T26021] input: syz0 as /devices/virtual/input/input23 02:05:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) 02:05:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, 0x0) 02:05:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) 02:05:32 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:05:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) [ 937.929547][T12375] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 938.170118][T12375] usb 3-1: Using ep0 maxpacket: 8 02:05:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 938.290852][T12375] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 938.299521][T12375] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 938.308544][T12375] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 938.318762][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 938.328633][T12375] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 938.338560][T12375] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.491178][T12375] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 938.500460][T12375] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 938.508761][T12375] usb 3-1: Product: syz [ 938.593922][T12375] usb 3-1: config 0 descriptor?? [ 938.635389][T26030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 938.683254][T12375] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 938.690256][T12375] rsi_91x: rsi_probe: Failed to init usb interface [ 938.733818][T12375] rsi_91x: rsi_probe: Failed in probe...Exiting [ 938.740628][T12375] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:35 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) 02:05:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = gettid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r3) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0xfffffff8}}}, 0x32) 02:05:35 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:05:35 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24, 0x2}) [ 940.680326][T12375] usb 3-1: USB disconnect, device number 31 02:05:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) 02:05:36 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24, 0x2}) 02:05:36 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:05:36 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) dup(0xffffffffffffffff) [ 941.718970][ T17] usb 3-1: new high-speed USB device number 32 using dummy_hcd 02:05:36 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24, 0x2}) 02:05:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 941.969172][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 942.090364][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 942.098644][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 942.108005][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 942.118280][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 942.128779][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 942.138593][ T17] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.344277][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 942.353749][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 942.363472][ T17] usb 3-1: Product: syz [ 942.404589][ T17] usb 3-1: config 0 descriptor?? [ 942.432559][T26076] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 942.494362][ T17] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 942.501209][ T17] rsi_91x: rsi_probe: Failed to init usb interface [ 942.524589][ T17] rsi_91x: rsi_probe: Failed in probe...Exiting [ 942.531278][ T17] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:39 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = gettid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r3) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0xfffffff8}}}, 0x32) 02:05:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 02:05:39 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) dup(0xffffffffffffffff) 02:05:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 944.417941][T12371] usb 3-1: USB disconnect, device number 32 02:05:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 02:05:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:39 executing program 3: syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) dup(0xffffffffffffffff) 02:05:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) [ 945.148616][T12371] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 945.398654][T12371] usb 3-1: Using ep0 maxpacket: 8 [ 945.529935][T12371] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 945.538216][T12371] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 945.547437][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 945.557590][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 945.567881][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 945.577769][T12371] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 02:05:40 executing program 3: syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) dup(0xffffffffffffffff) 02:05:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) [ 945.900670][T12371] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 945.910067][T12371] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 945.918555][T12371] usb 3-1: Product: syz [ 946.027078][T12371] usb 3-1: config 0 descriptor?? [ 946.051347][T26124] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 946.104699][T12371] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 946.111549][T12371] rsi_91x: rsi_probe: Failed to init usb interface [ 946.158647][T12371] rsi_91x: rsi_probe: Failed in probe...Exiting [ 946.165196][T12371] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:42 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = gettid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r3) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0xfffffff8}}}, 0x32) 02:05:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x0, 0x2}) 02:05:42 executing program 3: syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) dup(0xffffffffffffffff) [ 947.844886][T20610] usb 3-1: USB disconnect, device number 33 [ 948.019941][T26160] input: syz0 as /devices/virtual/input/input24 02:05:43 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68001) dup(0xffffffffffffffff) 02:05:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x0, 0x2}) 02:05:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) [ 948.648511][T12371] usb 3-1: new high-speed USB device number 34 using dummy_hcd 02:05:43 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68001) dup(0xffffffffffffffff) [ 948.909189][T12371] usb 3-1: Using ep0 maxpacket: 8 [ 948.985973][T26182] input: syz0 as /devices/virtual/input/input25 [ 949.049638][T12371] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 949.057911][T12371] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 949.067153][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 949.077438][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 949.087316][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 02:05:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = gettid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r3) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0xfffffff8}}}, 0x32) [ 949.097191][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 949.379861][T12371] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 949.389135][T12371] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 949.397427][T12371] usb 3-1: Product: syz [ 949.452776][T12371] usb 3-1: config 0 descriptor?? [ 949.491351][T26172] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 949.628348][T12371] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 949.635012][T12371] rsi_91x: rsi_probe: Failed to init usb interface [ 949.659327][T12371] rsi_91x: rsi_probe: Failed in probe...Exiting [ 949.665803][T12371] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) pipe(&(0x7f0000000200)) 02:05:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x0, 0x2}) 02:05:46 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:46 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68001) dup(0xffffffffffffffff) [ 951.408311][ T17] usb 3-1: USB disconnect, device number 34 [ 951.629598][T26223] input: syz0 as /devices/virtual/input/input26 02:05:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:46 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) dup(0xffffffffffffffff) 02:05:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 952.359436][ T17] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 952.415687][T26246] input: syz0 as /devices/virtual/input/input27 02:05:47 executing program 5: ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24}) 02:05:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) [ 952.599344][ T17] usb 3-1: Using ep0 maxpacket: 8 02:05:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 952.719572][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 952.727940][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 952.736965][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 952.747462][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.757387][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 952.768564][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 952.979152][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 952.988503][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 952.996814][ T17] usb 3-1: Product: syz [ 953.134107][ T17] usb 3-1: config 0 descriptor?? [ 953.161357][T26236] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 953.272375][ T17] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 953.279725][ T17] rsi_91x: rsi_probe: Failed to init usb interface [ 953.307531][ T17] rsi_91x: rsi_probe: Failed in probe...Exiting [ 953.314257][ T17] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:49 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:49 executing program 5: ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24}) 02:05:49 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) dup(0xffffffffffffffff) 02:05:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) gettid() recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 955.057933][T20610] usb 3-1: USB disconnect, device number 35 [ 955.344425][T26286] input: syz0 as /devices/virtual/input/input28 02:05:50 executing program 1: 02:05:50 executing program 5: ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24}) 02:05:50 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) dup(0xffffffffffffffff) 02:05:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:50 executing program 1: [ 955.900220][T26306] input: syz0 as /devices/virtual/input/input29 [ 955.908146][ T3223] usb 3-1: new high-speed USB device number 36 using dummy_hcd 02:05:50 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) [ 956.152687][ T3223] usb 3-1: Using ep0 maxpacket: 8 [ 956.299051][ T3223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 956.307327][ T3223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 956.316778][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 956.326913][ T3223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 956.336779][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 956.346625][ T3223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 956.445184][ T3223] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 956.454453][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 956.462904][ T3223] usb 3-1: Product: syz [ 956.514105][ T3223] usb 3-1: config 0 descriptor?? [ 956.550489][T26298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 956.594872][ T3223] RSI-USB WLAN 3-1:0.0: missing bt bulk-in endpoint [ 956.601923][ T3223] rsi_91x: rsi_probe: Failed to init usb interface [ 956.616073][ T3223] rsi_91x: rsi_probe: Failed in probe...Exiting [ 956.622832][ T3223] RSI-USB WLAN: probe of 3-1:0.0 failed with error -22 02:05:53 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) gettid() recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:05:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:53 executing program 1: 02:05:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:53 executing program 3: [ 958.493412][T20817] usb 3-1: USB disconnect, device number 36 02:05:53 executing program 1: 02:05:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x24}) 02:05:53 executing program 3: 02:05:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 959.283275][ T3223] usb 3-1: new high-speed USB device number 37 using dummy_hcd 02:05:54 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24}) 02:05:54 executing program 3: [ 959.527680][ T3223] usb 3-1: Using ep0 maxpacket: 8 [ 959.648556][ T3223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 959.656840][ T3223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 959.666113][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 959.676309][ T3223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 959.686194][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 959.696051][ T3223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 959.706007][ T3223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 959.898566][ T3223] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 959.907944][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 959.916252][ T3223] usb 3-1: Product: syz [ 959.971743][ T3223] usb 3-1: config 0 descriptor?? [ 960.003761][T26350] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 960.110395][ T3223] rsi_91x: rsi_probe: Initialized os intf ops [ 960.290792][ T3223] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 960.303344][ T3223] rsi_91x: rsi_probe: Failed in probe...Exiting [ 960.310145][ T3223] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 960.339235][ T3223] usb 3-1: USB disconnect, device number 37 02:05:55 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) gettid() recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:05:55 executing program 1: 02:05:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:55 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24}) 02:05:55 executing program 3: 02:05:55 executing program 3: 02:05:55 executing program 1: 02:05:56 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0x24}) 02:05:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:56 executing program 1: [ 961.617521][ T17] usb 3-1: new high-speed USB device number 38 using dummy_hcd 02:05:56 executing program 3: [ 961.857049][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 961.980047][ T17] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 961.988512][ T17] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 961.997759][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 962.008088][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 962.018078][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 962.028060][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 962.038105][ T17] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 962.149571][ T17] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 962.158985][ T17] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 962.167509][ T17] usb 3-1: Product: syz [ 962.249930][ T17] usb 3-1: config 0 descriptor?? [ 962.270107][T26394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 962.314071][ T17] rsi_91x: rsi_probe: Initialized os intf ops [ 962.537304][ T17] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 962.556408][ T17] rsi_91x: rsi_probe: Failed in probe...Exiting [ 962.563812][ T17] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 962.586387][ T17] usb 3-1: USB disconnect, device number 38 02:05:58 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:05:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 02:05:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:05:58 executing program 3: 02:05:58 executing program 1: 02:05:58 executing program 1: 02:05:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 02:05:58 executing program 3: 02:05:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 963.990497][T12375] usb 3-1: new high-speed USB device number 39 using dummy_hcd 02:05:58 executing program 1: 02:05:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x30, 0x20, 0x1, 0x0, 0x0, "", [@nested={0xa, 0x0, 0x0, 0x1, [@generic="880200020010"]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}], 0x1}, 0x0) [ 964.256884][T12375] usb 3-1: Using ep0 maxpacket: 8 [ 964.381502][T12375] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 964.390129][T12375] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 964.399353][T12375] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 964.409499][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 964.419382][T12375] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 964.429259][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 964.439297][T12375] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 964.617430][T26445] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 964.698956][T12375] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 964.708432][T12375] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 964.716878][T12375] usb 3-1: Product: syz [ 964.768774][T12375] usb 3-1: config 0 descriptor?? [ 964.810046][T26433] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 964.891498][T12375] rsi_91x: rsi_probe: Initialized os intf ops [ 965.090125][T12375] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 965.099589][T12375] rsi_91x: rsi_probe: Failed in probe...Exiting [ 965.106254][T12375] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 965.138729][T12375] usb 3-1: USB disconnect, device number 39 02:06:00 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 02:06:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 02:06:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:06:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:06:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x30, 0x20, 0x1, 0x0, 0x0, "", [@nested={0xa, 0x0, 0x0, 0x1, [@generic="8802b6000010"]}, @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@mcast1={0xff, 0x1, [0x0, 0x2]}}]}, 0x30}], 0x1}, 0x0) 02:06:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @volatile={0x0, 0x0, 0x0, 0xd}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0xa}, 0x20) 02:06:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)) 02:06:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)=ANY=[@ANYBLOB="1c0000000200010000000000fddbdf250a0000808802000200100f0062904772a409d3dc8afdaccb2c73246be33b59a5105ad58ed67179d21c9db77d1634c18b70331451c4f4a8d1c6a920bf9adcfa6d9ec6beaf30fdd3eaf897ddf7b4d5f5f1e43055964f6de64f8a412b59fe77ea05cf3111a204371152252ee480b50ff237f8dbcd5abfcd8a0f0bfb0fa78813821cf503c17599a4abd8b50364c50c42dc286a4c7389e7d41d2ebe922e215bcdbf70e222502dadd5b1ea2fdbc14a4a4e9079f7f5c2cfad771105"], 0x1c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = clone3(&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x20}, 0x0) 02:06:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:06:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000000000)={0x1c, 0x30, 0x123, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) [ 966.234895][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:01 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/212, 0xd4) [ 966.457177][ T9943] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 966.468296][T26484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26484 comm=syz-executor.1 02:06:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)) [ 966.726710][ T9943] usb 3-1: Using ep0 maxpacket: 8 [ 966.848811][ T9943] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 966.857154][ T9943] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 966.866197][ T9943] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 966.876462][ T9943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 966.886263][ T9943] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 966.896158][ T9943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 966.906117][ T9943] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 967.114518][T26488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26488 comm=syz-executor.1 [ 967.207980][ T9943] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 967.217392][ T9943] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 967.225687][ T9943] usb 3-1: Product: syz [ 967.341225][ T9943] usb 3-1: config 0 descriptor?? [ 967.379731][T26476] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 967.456776][ T9943] rsi_91x: rsi_probe: Initialized os intf ops [ 967.627016][ T9943] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 967.648044][ T9943] rsi_91x: rsi_probe: Failed in probe...Exiting [ 967.654445][ T9943] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 967.709539][ T9943] usb 3-1: USB disconnect, device number 40 02:06:02 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 02:06:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:06:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:06:02 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@x25={0x9, @remote={[], 0x3}}, 0x80, 0x0}, 0x0, 0x4044000}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), 0x0) io_uring_enter(r0, 0x7725, 0x0, 0x0, 0x0, 0x0) 02:06:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)) 02:06:02 executing program 1: r0 = syz_io_uring_setup(0x6b52, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @remote, 0x3}}, 0x0) io_uring_enter(r0, 0x56b0, 0x0, 0x0, 0x0, 0x0) [ 968.546087][T26527] input: syz0 as /devices/virtual/input/input38 02:06:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000100000000000000000080"], 0x1c}], 0x1}, 0x0) 02:06:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:06:03 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x3f00, 0x400}) 02:06:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00012f"], 0x24}], 0x1}, 0x0) [ 969.026506][T20608] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 969.266496][T20608] usb 3-1: Using ep0 maxpacket: 8 02:06:04 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x640, 0x0) 02:06:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 969.387710][T20608] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 969.395994][T20608] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 969.406106][T20608] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 969.416334][T20608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.426243][T20608] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 969.436054][T20608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 969.446040][T20608] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 969.737573][T20608] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 969.746933][T20608] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 969.755235][T20608] usb 3-1: Product: syz [ 969.832647][T20608] usb 3-1: config 0 descriptor?? [ 969.859125][T26548] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 969.937714][T20608] rsi_91x: rsi_probe: Initialized os intf ops [ 970.136681][T20608] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 970.171071][T20608] rsi_91x: rsi_probe: Failed in probe...Exiting [ 970.177612][T20608] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 970.200408][T20608] usb 3-1: USB disconnect, device number 41 02:06:05 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 02:06:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:06:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x10}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 02:06:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x30, 0x20, 0x1, 0x0, 0x0, "", [@nested={0xa, 0x0, 0x0, 0x1, [@generic="8802b6000010"]}, @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}], 0x1}, 0x0) 02:06:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r1, 0x62b, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x59}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x50}}, 0x0) 02:06:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:06:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000010e00000000000000000a"], 0x1c}], 0x1}, 0x0) 02:06:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x2c}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:06:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) write(r0, &(0x7f0000000100)="27000000010ad107050e0000128e160013ef00000c078a141f75080039000536b3b16dcb6e08a2", 0x27) 02:06:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 971.530510][T12371] usb 3-1: new high-speed USB device number 42 using dummy_hcd 02:06:06 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38, 'devgroup\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [], [], 'bond_slave_1\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r1, 0xd29}, 0x70}}, 0x0) [ 971.797862][T12371] usb 3-1: Using ep0 maxpacket: 8 02:06:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 971.937616][T12371] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 971.946183][T12371] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 971.955218][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 971.965617][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 971.975506][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 971.985389][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 971.995371][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 972.127566][T12371] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 972.136940][T12371] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 972.145245][T12371] usb 3-1: Product: syz [ 972.241426][T12371] usb 3-1: config 0 descriptor?? [ 972.274297][T26596] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 972.416998][T12371] rsi_91x: rsi_probe: Initialized os intf ops [ 972.589567][T12371] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 972.603001][T12371] rsi_91x: rsi_probe: Failed in probe...Exiting [ 972.609769][T12371] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 972.657167][T12371] usb 3-1: USB disconnect, device number 42 02:06:07 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:07 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x10000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000080)=0x100, 0x7, 0x0) 02:06:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) 02:06:07 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="9f", 0xfffffdef) 02:06:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = clone3(&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x20}, 0x0) 02:06:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 973.348155][T26641] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 973.641683][T26645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26645 comm=syz-executor.5 02:06:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) [ 974.246163][T20817] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 974.486373][T20817] usb 3-1: Using ep0 maxpacket: 8 [ 974.606206][T20817] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 974.614624][T20817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 974.623853][T20817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 974.634131][T20817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 974.644028][T20817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 974.653969][T20817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 974.664724][T20817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 975.497625][T20817] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 975.507178][T20817] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 975.515474][T20817] usb 3-1: Product: syz [ 975.879247][T20817] usb 3-1: config 0 descriptor?? [ 975.899344][T26651] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 976.318699][T26679] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 977.561826][T26685] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 978.537298][T26701] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 978.838979][T20817] rsi_91x: rsi_probe: Initialized os intf ops [ 978.867735][T20817] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 978.933628][T20817] rsi_91x: rsi_probe: Failed in probe...Exiting [ 978.940359][T20817] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 979.064031][T20817] usb 3-1: USB disconnect, device number 43 [ 979.535549][T20817] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 979.778316][T20817] usb 3-1: Using ep0 maxpacket: 8 [ 979.898324][T20817] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 979.906857][T20817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 979.916173][T20817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 979.926409][T20817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.936323][T20817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 979.946309][T20817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 979.956344][T20817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 980.449521][T20817] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 980.458838][T20817] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 980.467401][T20817] usb 3-1: Product: syz [ 980.646952][T20817] usb 3-1: config 0 descriptor?? [ 980.668495][T26694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 980.808142][T20817] rsi_91x: rsi_probe: Initialized os intf ops [ 980.967224][T20817] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 981.011585][T20817] rsi_91x: rsi_probe: Failed in probe...Exiting [ 981.018498][T20817] RSI-USB WLAN: probe of 3-1:0.0 failed with error -71 [ 981.163425][T20817] usb 3-1: USB disconnect, device number 44 02:06:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:06:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x30, 0x20, 0x1, 0x0, 0x0, "", [@nested={0xa, 0x0, 0x0, 0x1, [@generic="8802af000010"]}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}], 0x1}, 0x0) 02:06:11 executing program 5: r0 = syz_io_uring_setup(0x6b52, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) io_uring_enter(r0, 0x56b0, 0x0, 0x0, 0x0, 0x0) 02:06:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) 02:06:12 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) 02:06:14 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x10000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000080)=0x100, 0x7, 0x0) 02:06:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r1) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:06:19 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x81, 0x6, 0x0, 0x0, [0x0, 0x0, 0x7]}) 02:06:19 executing program 3: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) 02:06:19 executing program 5: 02:06:19 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x10000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000080)=0x100, 0x7, 0x0) 02:06:19 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000784e52081816139172ec00c8000109022d0000000000010904000003dfa6e90009058daa3e0300000009050502000000000009058a1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r1) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:06:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r1) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:06:19 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x7]}) 02:06:19 executing program 3: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) [ 985.198715][T12371] usb 3-1: new high-speed USB device number 45 using dummy_hcd 02:06:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}}, 0x0) 02:06:20 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x10000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000080)=0x100, 0x7, 0x0) [ 985.505193][T12371] usb 3-1: Using ep0 maxpacket: 8 [ 985.626253][T12371] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 985.634524][T12371] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 985.643695][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 830 [ 985.654475][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 985.664366][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 985.674284][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 985.684242][T12371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 02:06:20 executing program 3: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) 02:06:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 02:06:20 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xff01) r2 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) splice(r0, 0x0, r2, 0x0, 0xfdef, 0x0) 02:06:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, 0xfffffffffffffffe) [ 986.119437][T12371] usb 3-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=ec.72 [ 986.128772][T12371] usb 3-1: New USB device strings: Mfr=0, Product=200, SerialNumber=0 [ 986.137279][T12371] usb 3-1: Product: syz [ 986.216211][T12371] usb 3-1: config 0 descriptor?? [ 986.238242][T26745] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.341167][T12371] rsi_91x: rsi_probe: Initialized os intf ops [ 986.505727][T12371] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-32 [ 986.561997][T12371] rsi_91x: rsi_probe: Failed in probe...Exiting [ 986.568778][T12371] RSI-USB WLAN: probe of 3-1:0.0 failed with error -32 02:06:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) [ 986.730545][T12371] usb 3-1: USB disconnect, device number 45 02:06:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000240)=""/229, 0xe5}], 0x2) 02:06:21 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x10000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) 02:06:21 executing program 0: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)}) 02:06:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x20, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}], 0x1}, 0x0) 02:06:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 987.368128][T26805] ===================================================== [ 987.375184][T26805] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 987.382644][T26805] CPU: 0 PID: 26805 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 987.391301][T26805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.401343][T26805] Call Trace: [ 987.404657][T26805] dump_stack+0x21c/0x280 [ 987.408984][T26805] kmsan_report+0xf7/0x1e0 [ 987.413397][T26805] kmsan_internal_check_memory+0x358/0x3d0 [ 987.419202][T26805] kmsan_copy_to_user+0x81/0x90 [ 987.424054][T26805] _copy_to_user+0x18e/0x260 [ 987.428708][T26805] fb_read+0xa30/0xcf0 [ 987.432783][T26805] ? fb_seq_show+0x1a0/0x1a0 [ 987.437423][T26805] do_iter_read+0xa95/0x1020 [ 987.442030][T26805] __se_compat_sys_readv+0x2d8/0x6c0 [ 987.447322][T26805] ? kmsan_get_metadata+0x116/0x180 [ 987.452519][T26805] ? kmsan_set_origin_checked+0x95/0xf0 [ 987.458060][T26805] ? kmsan_get_metadata+0x116/0x180 [ 987.463251][T26805] __ia32_compat_sys_readv+0x4a/0x70 [ 987.468554][T26805] __do_fast_syscall_32+0x2af/0x480 [ 987.473761][T26805] do_fast_syscall_32+0x6b/0xd0 [ 987.478606][T26805] do_SYSENTER_32+0x73/0x90 [ 987.483110][T26805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.489421][T26805] RIP: 0023:0xf7fd6549 [ 987.493468][T26805] Code: Bad RIP value. [ 987.497519][T26805] RSP: 002b:00000000f55d00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 987.505917][T26805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 987.513875][T26805] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.521832][T26805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.529810][T26805] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 987.537881][T26805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.545849][T26805] [ 987.548165][T26805] Uninit was created at: [ 987.552401][T26805] kmsan_internal_poison_shadow+0x66/0xd0 [ 987.558110][T26805] kmsan_slab_alloc+0x8a/0xe0 [ 987.562830][T26805] __kmalloc+0x312/0x410 [ 987.567066][T26805] fb_read+0x71a/0xcf0 [ 987.571123][T26805] do_iter_read+0xa95/0x1020 [ 987.575703][T26805] __se_compat_sys_readv+0x2d8/0x6c0 [ 987.580981][T26805] __ia32_compat_sys_readv+0x4a/0x70 [ 987.586260][T26805] __do_fast_syscall_32+0x2af/0x480 [ 987.591447][T26805] do_fast_syscall_32+0x6b/0xd0 [ 987.596287][T26805] do_SYSENTER_32+0x73/0x90 [ 987.600783][T26805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.607088][T26805] [ 987.609402][T26805] Bytes 0-30 of 31 are uninitialized [ 987.614667][T26805] Memory access of size 31 starts at ffff888107623400 [ 987.621409][T26805] Data copied to user address 0000000020000080 [ 987.627538][T26805] ===================================================== [ 987.634449][T26805] Disabling lock debugging due to kernel taint [ 987.640581][T26805] Kernel panic - not syncing: panic_on_warn set ... [ 987.647161][T26805] CPU: 0 PID: 26805 Comm: syz-executor.5 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 987.657200][T26805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.667236][T26805] Call Trace: [ 987.670521][T26805] dump_stack+0x21c/0x280 [ 987.674904][T26805] panic+0x4d7/0xef7 [ 987.678805][T26805] ? add_taint+0x17c/0x210 [ 987.683216][T26805] kmsan_report+0x1df/0x1e0 [ 987.687716][T26805] kmsan_internal_check_memory+0x358/0x3d0 [ 987.693519][T26805] kmsan_copy_to_user+0x81/0x90 [ 987.698370][T26805] _copy_to_user+0x18e/0x260 [ 987.702991][T26805] fb_read+0xa30/0xcf0 [ 987.707064][T26805] ? fb_seq_show+0x1a0/0x1a0 [ 987.711646][T26805] do_iter_read+0xa95/0x1020 [ 987.716248][T26805] __se_compat_sys_readv+0x2d8/0x6c0 [ 987.721542][T26805] ? kmsan_get_metadata+0x116/0x180 [ 987.726737][T26805] ? kmsan_set_origin_checked+0x95/0xf0 [ 987.732278][T26805] ? kmsan_get_metadata+0x116/0x180 [ 987.737470][T26805] __ia32_compat_sys_readv+0x4a/0x70 [ 987.742760][T26805] __do_fast_syscall_32+0x2af/0x480 [ 987.747955][T26805] do_fast_syscall_32+0x6b/0xd0 [ 987.752796][T26805] do_SYSENTER_32+0x73/0x90 [ 987.757310][T26805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.763632][T26805] RIP: 0023:0xf7fd6549 [ 987.767685][T26805] Code: Bad RIP value. [ 987.771740][T26805] RSP: 002b:00000000f55d00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 987.780143][T26805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 987.788101][T26805] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.796058][T26805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.804013][T26805] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 987.811969][T26805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.821101][T26805] Kernel Offset: disabled [ 987.825461][T26805] Rebooting in 86400 seconds..