, &(0x7f0000002440)=[{&(0x7f0000002200)="a8c0e9e8b22ff0b86126bb860e53069f1b9e8859f7603d8fbe947cc8314730cc6095c9d189d369064728fea38754681ebbb766cbb8f0e8521ae92bd9323fe39c4cfbf896c4e9b51d5d21383db01609035db70cb14addfd5a45141ee8c712b5a5b7d8031ecc9ff166ab33252a232b6e5f87b1f4ee540b6e4ad7fc2e23f6e84c9641592c0ee95f3fe5dac0d7e0c6220bdc3811412ee9ae91da817a2fbbfe990a91a93a3c5d4df131f99a6ecbff2fbee4ed7028ad5bbf3a89139826d3b107bda87d2b73b00b28238849db60e057afdb51bc6782b7b04af5829e40c569a05f79fcc6", 0xe0}, {&(0x7f0000002300)="e56496a809a4b0f76c091685e75649fe0030bad6d2f6708d9ee799c3cc29c26531cd2cf1f486daf6bc34f5609406a56920192c8cb17121e796c1224219f946166b02dc95628d3e2d0ab12e309fd3a2c9b27a7d6a608d191d9e24287e95d6008cc9b184adbfb7c2990af6202d77453d84c22e02f1e1f00384f881ee26d925c72bda5b321886ba7c5f13aaa37aa4b5c80ef66f1d8b88deca4b5a2fb0a44553c17a622274dd47e568bc34b5a7da1ce162672815966b293af68e", 0xb8}, {&(0x7f00000023c0)="e4e9d0fecbf5defe2a3fd04f9b7b71117a72094be567a40bb69b91049a96f761b6311b43dbebb714ba01312892f3aca489a65cb8fbf549f4b6d1d49876a3b791665598af9bee2ee4379d7f5624263b2f1e2b09b63838275b4ecc5e2b50c79da8e558afdd5383", 0x66}], 0x3, 0x0, 0x0, 0x11}}, {{&(0x7f0000002480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002500)="b047d22075bfe4dc3cb658caa0aecda2", 0x10}], 0x1, &(0x7f0000002640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x68, 0x80}}, {{&(0x7f00000026c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002740)="e96ca3389b2de32d600a32c15073bf212cff7ff06a36bf16a880eef68bf80137a6898b03fb280deaba33d03e2c65121018ddd871896c5188901e769bab90f2e75e2c84f7f0aa9eae3c0deb0ffa0bf10f8d9e7638398af1ed3b840ec5ca4e4bac66de6dce", 0x64}], 0x1, 0x0, 0x0, 0x8804}}, {{&(0x7f0000002800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000002880)="934bd810cf3057649d250c93196ef10f901c2e7dafcf04e7e1060eb2abad0ee29c595a9afa4d1d2d8d752cf913b5d9f9ea1a8275764a1dd73267400f93bc5897b4dbe6e4221cdc469d409c1c813f3cfbeba374066af823b7ec4b5a74bd358908f11fde7aff082d93b42d17588ad52834befce9063180c68a9e", 0x79}, {&(0x7f0000002900)="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", 0x1000}, {&(0x7f0000003900)="f036b19adcbddab12faf97faf6197cc61665be2e58b4853d6dd3d7e8624ebbcdccc86ae72c63f8a6af9584fcbe1314371719a896c2d107f9e2f71765e5aeedf53c2ed02f62f31444f5ec84c3d1c37224a854ded5ddfed0d31836b95e090ea5f63697db5c615b384f79d5362c9b9b1b508c86b927f9ad86bab81a070e7224976161848f99da990f684acc80612e7e3de8b07ee329c8ef15313873fe1ee67f2932a44cc627a705850f0a36ed3f00f32e48a8ada7f6ba24f141a0433cd2911da9d55667d82b", 0xc4}], 0x3, &(0x7f0000003a40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x40, 0x20008000}}, {{&(0x7f0000003a80)=@abs={0x477ebb6cb20146e6, 0x0, 0x4e24}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000003b00)="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", 0x1000}, {&(0x7f0000004b00)="30c072b509246f79ca4f0f914d204b0f5d5d42415230a99f8440c6cc705316", 0x1f}, {&(0x7f0000004b40)="43beb5abf48d72622122f5bad82b3c6b11b9376ca7a368acabf049c92b4b7cba35debd8061dc89aa3063b0", 0x2b}, {&(0x7f0000004b80)="ae70558874c1782eb1f2151b07f5ab10e1161729efe6fe108c7972", 0x1b}], 0x4, &(0x7f0000004d40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20004800}}], 0x8, 0x10) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) signalfd(r0, &(0x7f00000018c0)={[0x6]}, 0x8) (async) memfd_secret(0x0) (async) io_submit(0x0, 0x9, &(0x7f0000001a00)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x8001, r2, &(0x7f0000000180)="da43deaabb5103e53cd14127fb01b92268ae085bef400875ac8aa984653c99465fda9b242780edbdb5a6ca4b62300a5ae9dfa7dc40eff5f4004e790c1a876ac959386a296724b8", 0x47, 0x4830, 0x0, 0x0, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000340)="496fa1914ebd6b4de504002392fb4d2052", 0x11, 0xffff, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x55, 0xffffffffffffffff, &(0x7f0000000440)="9216b8e00a60813d3fc5e2d5bdbe8f61aec2ac180637d2939636a1201960391593d5ae0242d0f265caabdc97151ff43885fe297d452d38", 0x37, 0x81}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0xfd91, 0xffffffffffffffff, &(0x7f0000000500)="bba0ea63cd194cf8b86882e0f5269e4fbf9c1986b0fdaba2104e26e1f6289bb23702fa9c3f44b3b6387f7430290b70308d12bd0602d3bf2bd3c18f0d57e3fc25df5af785af62abe8396fa16a965fdb01a843879cf8053d05d33995f11a7b86f1cd6278b82834abf4439ec6ee9b3b7bac", 0x70, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000600)="a2d76be5c12e8e9382fd69774f1e7c5c97b3fb58b526210f47a3ffa6494875a92232ddf06dc882f41481af18b28522e6490b26c3cf55350379217078b2360e4cb792374d4fdffbb70d54e7d691bbafda3c711081e30f5a6c8f7f3fecadbdbffee4ded060a47eae409053f0e7f815d5d2cfc4371788535828f52f4535562e99b80100e77947e505f3384ef3b6288f2f6fe265b9fb87f102ac7fb2b330c6df1fb04ebc180791331f55542ccd8df101562dc3", 0xb1, 0x0, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000000740)="ae810647bb1d15a45c9f574a8cd9803abce1adf9cadbd40b92555270953f4b7235dc08cdef81126f", 0x28, 0x4, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000800)="473c05582b10ed2aeb4b4a334aea7d90b830993bbe", 0x15, 0x200, 0x0, 0x3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x8, 0xe1, r0, &(0x7f00000008c0)="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", 0x1000, 0x8000000000000001, 0x0, 0x2, r3}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x3f, r4, &(0x7f0000001940)="2dd79c2de3f4b2c8af3e7405d6c3d293a4c25e93279dbd4d54b1d4fd139b11b7e5abecab5932042e92087185be4fcd4660e25fc435602ed5c0c7babf928cae6fba0a166994b28983abe7effa54537ec0fdcb58b2d86dc34f77a9ed7218499ae4d7e8", 0x62, 0x0, 0x0, 0x3}]) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r8, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r5, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:02:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0x80a) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r4 = syz_io_uring_setup(0x99f, &(0x7f0000000080)={0x0, 0xbdc4, 0x4, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index, 0xffff, 0x0, 0x7, 0x7, 0x0, {0x0, r9}}, 0x1858) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private=0xa010102}}, 0x0) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:02:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 45) 15:02:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x4}}, 0x10) 15:02:54 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x4) 15:02:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x9}}, 0x10) [ 2372.375811][ T3927] FAULT_INJECTION: forcing a failure. [ 2372.375811][ T3927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.433449][ T3927] CPU: 0 PID: 3927 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2372.443567][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2372.453707][ T3927] Call Trace: [ 2372.456985][ T3927] [ 2372.459907][ T3927] dump_stack_lvl+0xcd/0x134 [ 2372.464494][ T3927] should_fail.cold+0x5/0xa [ 2372.469000][ T3927] _copy_from_user+0x2a/0x170 [ 2372.473672][ T3927] move_addr_to_kernel.part.0+0x31/0x110 [ 2372.479304][ T3927] move_addr_to_kernel+0x4f/0x70 [ 2372.484246][ T3927] io_connect+0x3c9/0x4b0 [ 2372.488588][ T3927] ? io_connect_prep+0x220/0x220 [ 2372.493548][ T3927] ? __fget_files+0x26a/0x440 [ 2372.498431][ T3927] ? io_connect_prep+0x220/0x220 [ 2372.503400][ T3927] io_issue_sqe+0x69d/0xd00 [ 2372.507905][ T3927] io_submit_sqes+0x936/0x1d10 [ 2372.512670][ T3927] __do_sys_io_uring_enter+0xadb/0x2430 [ 2372.518217][ T3927] ? lock_acquire+0x480/0x570 [ 2372.522891][ T3927] ? lock_release+0x560/0x780 [ 2372.527557][ T3927] ? rcu_read_lock_sched_held+0xd/0x70 [ 2372.533100][ T3927] ? __ct_user_exit+0xff/0x150 [ 2372.537871][ T3927] ? io_submit_sqes+0x1d10/0x1d10 [ 2372.542893][ T3927] ? lock_downgrade+0x6e0/0x6e0 [ 2372.547744][ T3927] ? vtime_user_exit+0x218/0x6c0 [ 2372.552684][ T3927] ? trace_hardirqs_on+0x2d/0x120 [ 2372.557708][ T3927] do_syscall_64+0x35/0xb0 [ 2372.562158][ T3927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2372.568045][ T3927] RIP: 0033:0x7f9bb008a5a9 [ 2372.572467][ T3927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2372.592067][ T3927] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2372.600480][ T3927] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2372.608442][ T3927] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2372.616403][ T3927] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2372.624364][ T3927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:02:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x3c}}, 0x10) 15:02:55 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x4) 15:02:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x63}}, 0x10) [ 2372.632335][ T3927] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2372.640314][ T3927] [ 2372.793309][ T2586] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 2373.063487][ T2586] usb 2-1: Invalid ep0 maxpacket: 16 [ 2373.213400][ T2586] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 2373.453340][ T2586] usb 2-1: Invalid ep0 maxpacket: 16 [ 2373.458723][ T2586] usb usb2-port1: attempt power cycle [ 2373.893334][ T2586] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 2373.984456][ T2586] usb 2-1: Invalid ep0 maxpacket: 16 [ 2374.133328][ T2586] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 2374.224702][ T2586] usb 2-1: Invalid ep0 maxpacket: 16 [ 2374.230135][ T2586] usb usb2-port1: unable to enumerate USB device 15:02:57 executing program 1: syz_usb_connect(0x1, 0xde, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6f, 0xb7, 0x2d, 0x10, 0x1b3d, 0x125, 0xacaa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x0, 0xb8, 0x41, 0xcb, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xcc, 0x7, 0xd6}, [@mdlm={0x15, 0x24, 0x12, 0xff}, @mdlm_detail={0x7c, 0x24, 0x13, 0x3, "f1b2ff4a6375954820881cc1557e0ba99fea20db01e625139cb7d3437c24d122910c96eff432ba4c60b90a7466561559bf4ae36116914eb5c8389e28eaae057a4b2c1a9c86b3e69426c7ae537a9a864c86bd7573953ff8997ccf18ec33a8bfdc37b554abc85191dd1beb3dd101c69c480b236d2f1b155a84"}, @obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0xd44c97ea3e4eabc3, 0x8}, @country_functional={0x8, 0x24, 0x7, 0xec, 0x0, [0x101]}]}]}}]}}]}}, 0x0) syz_usb_connect(0x1, 0xde, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6f, 0xb7, 0x2d, 0x10, 0x1b3d, 0x125, 0xacaa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x0, 0xb8, 0x41, 0xcb, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xcc, 0x7, 0xd6}, [@mdlm={0x15, 0x24, 0x12, 0xff}, @mdlm_detail={0x7c, 0x24, 0x13, 0x3, "f1b2ff4a6375954820881cc1557e0ba99fea20db01e625139cb7d3437c24d122910c96eff432ba4c60b90a7466561559bf4ae36116914eb5c8389e28eaae057a4b2c1a9c86b3e69426c7ae537a9a864c86bd7573953ff8997ccf18ec33a8bfdc37b554abc85191dd1beb3dd101c69c480b236d2f1b155a84"}, @obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0xd44c97ea3e4eabc3, 0x8}, @country_functional={0x8, 0x24, 0x7, 0xec, 0x0, [0x101]}]}]}}]}}]}}, 0x0) (async) 15:02:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0x63}}, 0x10) 15:02:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r3, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:02:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0x80a) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r4 = syz_io_uring_setup(0x99f, &(0x7f0000000080)={0x0, 0xbdc4, 0x4, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index, 0xffff, 0x0, 0x7, 0x7, 0x0, {0x0, r9}}, 0x1858) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private=0xa010102}}, 0x0) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0x80a) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x99f, &(0x7f0000000080)={0x0, 0xbdc4, 0x4, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000340)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index, 0xffff, 0x0, 0x7, 0x7, 0x0, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private=0xa010102}}, 0x0) (async) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:02:57 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 46) 15:02:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_setup(0x374d, &(0x7f0000000180)={0x0, 0xa6fc, 0x4, 0x1, 0x4f}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x200, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2375.403021][ T3975] FAULT_INJECTION: forcing a failure. [ 2375.403021][ T3975] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:02:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0x80a) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r4 = syz_io_uring_setup(0x99f, &(0x7f0000000080)={0x0, 0xbdc4, 0x4, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index, 0xffff, 0x0, 0x7, 0x7, 0x0, {0x0, r9}}, 0x1858) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private=0xa010102}}, 0x0) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0x80a) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x99f, &(0x7f0000000080)={0x0, 0xbdc4, 0x4, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000340)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index, 0xffff, 0x0, 0x7, 0x7, 0x0, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private=0xa010102}}, 0x0) (async) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2375.483428][ T3975] CPU: 0 PID: 3975 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2375.493457][ T3975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2375.503512][ T3975] Call Trace: [ 2375.506798][ T3975] [ 2375.509729][ T3975] dump_stack_lvl+0xcd/0x134 [ 2375.514320][ T3975] should_fail.cold+0x5/0xa [ 2375.518824][ T3975] _copy_from_user+0x2a/0x170 [ 2375.523529][ T3975] move_addr_to_kernel.part.0+0x31/0x110 [ 2375.529164][ T3975] move_addr_to_kernel+0x4f/0x70 [ 2375.534109][ T3975] io_connect+0x3c9/0x4b0 [ 2375.538467][ T3975] ? io_connect_prep+0x220/0x220 [ 2375.543427][ T3975] ? __fget_files+0x26a/0x440 [ 2375.548121][ T3975] ? io_connect_prep+0x220/0x220 [ 2375.553076][ T3975] io_issue_sqe+0x69d/0xd00 [ 2375.557597][ T3975] io_submit_sqes+0x936/0x1d10 [ 2375.562391][ T3975] __do_sys_io_uring_enter+0xadb/0x2430 [ 2375.567955][ T3975] ? lock_acquire+0x480/0x570 [ 2375.572637][ T3975] ? lock_release+0x560/0x780 [ 2375.577318][ T3975] ? rcu_read_lock_sched_held+0xd/0x70 [ 2375.582801][ T3975] ? __ct_user_exit+0xff/0x150 [ 2375.587589][ T3975] ? io_submit_sqes+0x1d10/0x1d10 [ 2375.592634][ T3975] ? lock_downgrade+0x6e0/0x6e0 [ 2375.597503][ T3975] ? vtime_user_exit+0x218/0x6c0 [ 2375.602474][ T3975] ? trace_hardirqs_on+0x2d/0x120 [ 2375.607540][ T3975] do_syscall_64+0x35/0xb0 [ 2375.611972][ T3975] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2375.617876][ T3975] RIP: 0033:0x7f9bb008a5a9 [ 2375.622297][ T3975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2375.641915][ T3975] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2375.650335][ T3975] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2375.658316][ T3975] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2375.666293][ T3975] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2375.674359][ T3975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2375.682334][ T3975] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2375.690319][ T3975] 15:02:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x10ba00) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2375.953425][ T7] usb 2-1: new low-speed USB device number 105 using dummy_hcd 15:02:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x2) 15:02:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf) 15:02:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x2f) 15:02:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_setup(0x374d, &(0x7f0000000180)={0x0, 0xa6fc, 0x4, 0x1, 0x4f}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x200, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r4, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_setup(0x374d, &(0x7f0000000180)={0x0, 0xa6fc, 0x4, 0x1, 0x4f}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x200, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2376.213440][ T7] usb 2-1: Invalid ep0 maxpacket: 16 [ 2376.363766][ T7] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 2376.613308][ T7] usb 2-1: Invalid ep0 maxpacket: 16 [ 2376.618762][ T7] usb usb2-port1: attempt power cycle [ 2377.033317][ T7] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 2377.134952][ T7] usb 2-1: Invalid ep0 maxpacket: 16 [ 2377.283333][ T7] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 2377.373489][ T7] usb 2-1: Invalid ep0 maxpacket: 16 [ 2377.378907][ T7] usb usb2-port1: unable to enumerate USB device 15:03:00 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001dd5fff909fe00e9000000000212000100090000f2ff653eed1388"], 0x0) 15:03:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 47) 15:03:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_setup(0x374d, &(0x7f0000000180)={0x0, 0xa6fc, 0x4, 0x1, 0x4f}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x200, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r3, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x10ba00) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x104) 15:03:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x7ffffffff000) 15:03:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0x10000003, 0x7fffffff, 0x8, 0x200, 0x0, 0x9, 0x100, 0x8}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x10ba00) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x10ba00) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="5cab690b55c727cd066fe55d9a2e18a5f1ff280f6ea730555a78af74dbecad21ebb669d28149aba87d785cdab074655313be656553af297a0dabbae90374aa18353db179", &(0x7f00000001c0)=@buf="59b7ec33ce22019668ca00574a2de0ef864d787446dfa1eefeca156018f016f29893c38616afd1264e896e20d15a7d7b140f8aab0d8d5474bb5ecbdea3f38346fe908c65bea54c869fe80d2fe9", 0x2}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) signalfd(r0, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x404002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2378.523771][ T4049] FAULT_INJECTION: forcing a failure. [ 2378.523771][ T4049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2378.565123][ T4049] CPU: 1 PID: 4049 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2378.575158][ T4049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2378.585238][ T4049] Call Trace: [ 2378.588530][ T4049] [ 2378.591478][ T4049] dump_stack_lvl+0xcd/0x134 [ 2378.596095][ T4049] should_fail.cold+0x5/0xa [ 2378.600605][ T4049] _copy_from_user+0x2a/0x170 [ 2378.605292][ T4049] move_addr_to_kernel.part.0+0x31/0x110 [ 2378.610931][ T4049] move_addr_to_kernel+0x4f/0x70 [ 2378.615880][ T4049] io_connect+0x3c9/0x4b0 [ 2378.620220][ T4049] ? io_connect_prep+0x220/0x220 [ 2378.625162][ T4049] ? __fget_files+0x26a/0x440 [ 2378.629842][ T4049] ? io_connect_prep+0x220/0x220 [ 2378.634783][ T4049] io_issue_sqe+0x69d/0xd00 [ 2378.639286][ T4049] io_submit_sqes+0x936/0x1d10 [ 2378.644053][ T4049] __do_sys_io_uring_enter+0xadb/0x2430 [ 2378.649596][ T4049] ? lock_acquire+0x480/0x570 [ 2378.654271][ T4049] ? lock_release+0x560/0x780 [ 2378.658946][ T4049] ? rcu_read_lock_sched_held+0xd/0x70 [ 2378.664417][ T4049] ? __ct_user_exit+0xff/0x150 [ 2378.669188][ T4049] ? io_submit_sqes+0x1d10/0x1d10 [ 2378.674234][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 2378.679080][ T4049] ? vtime_user_exit+0x218/0x6c0 [ 2378.684020][ T4049] ? trace_hardirqs_on+0x2d/0x120 [ 2378.689048][ T4049] do_syscall_64+0x35/0xb0 [ 2378.693469][ T4049] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2378.699833][ T4049] RIP: 0033:0x7f9bb008a5a9 [ 2378.704274][ T4049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2378.723972][ T4049] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2378.732382][ T4049] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2378.740352][ T4049] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2378.748322][ T4049] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2378.756308][ T4049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.764270][ T4049] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2378.772244][ T4049] [ 2378.923700][T27197] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2379.123521][T27197] usb 2-1: device descriptor read/64, error 18 15:03:01 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 48) 15:03:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0x10000003, 0x7fffffff, 0x8, 0x200, 0x0, 0x9, 0x100, 0x8}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2379.394260][T27197] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2379.427437][ T4068] FAULT_INJECTION: forcing a failure. [ 2379.427437][ T4068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2379.474748][ T4068] CPU: 1 PID: 4068 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2379.484781][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2379.494996][ T4068] Call Trace: [ 2379.498322][ T4068] [ 2379.501249][ T4068] dump_stack_lvl+0xcd/0x134 [ 2379.505842][ T4068] should_fail.cold+0x5/0xa [ 2379.510353][ T4068] _copy_from_user+0x2a/0x170 [ 2379.515052][ T4068] move_addr_to_kernel.part.0+0x31/0x110 [ 2379.520722][ T4068] move_addr_to_kernel+0x4f/0x70 [ 2379.525675][ T4068] io_connect+0x3c9/0x4b0 [ 2379.530038][ T4068] ? io_connect_prep+0x220/0x220 [ 2379.534996][ T4068] ? __fget_files+0x26a/0x440 [ 2379.539710][ T4068] ? io_connect_prep+0x220/0x220 [ 2379.544767][ T4068] io_issue_sqe+0x69d/0xd00 [ 2379.549269][ T4068] io_submit_sqes+0x936/0x1d10 [ 2379.554034][ T4068] __do_sys_io_uring_enter+0xadb/0x2430 [ 2379.559589][ T4068] ? lock_acquire+0x480/0x570 [ 2379.564312][ T4068] ? lock_release+0x560/0x780 [ 2379.568981][ T4068] ? rcu_read_lock_sched_held+0xd/0x70 [ 2379.574459][ T4068] ? __ct_user_exit+0xff/0x150 [ 2379.579250][ T4068] ? io_submit_sqes+0x1d10/0x1d10 [ 2379.585313][ T4068] ? lock_downgrade+0x6e0/0x6e0 [ 2379.590166][ T4068] ? vtime_user_exit+0x218/0x6c0 [ 2379.593339][T27197] usb 2-1: device descriptor read/64, error 18 [ 2379.595100][ T4068] ? trace_hardirqs_on+0x2d/0x120 [ 2379.606262][ T4068] do_syscall_64+0x35/0xb0 [ 2379.610679][ T4068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2379.616567][ T4068] RIP: 0033:0x7f9bb008a5a9 [ 2379.620973][ T4068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2379.640573][ T4068] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2379.650976][ T4068] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2379.658942][ T4068] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2379.666904][ T4068] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2379.674866][ T4068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2379.682831][ T4068] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2379.690802][ T4068] [ 2379.713467][T27197] usb usb2-port1: attempt power cycle [ 2380.123331][T27197] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2380.213644][T27197] usb 2-1: Invalid ep0 maxpacket: 249 [ 2380.363559][T27197] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2380.453479][T27197] usb 2-1: Invalid ep0 maxpacket: 249 [ 2380.458953][T27197] usb usb2-port1: unable to enumerate USB device 15:03:03 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001dd5fff909fe00e9000000000212000100090000f2ff653eed1388"], 0x0) 15:03:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0x10000003, 0x7fffffff, 0x8, 0x200, 0x0, 0x9, 0x100, 0x8}, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 32) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (rerun: 32) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:03 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcdS', 0x2) ftruncate(0xffffffffffffffff, 0x800200800007f) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x350}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0xa, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}, 0xfffffffe) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="5cab690b55c727cd066fe55d9a2e18a5f1ff280f6ea730555a78af74dbecad21ebb669d28149aba87d785cdab074655313be656553af297a0dabbae90374aa18353db179", &(0x7f00000001c0)=@buf="59b7ec33ce22019668ca00574a2de0ef864d787446dfa1eefeca156018f016f29893c38616afd1264e896e20d15a7d7b140f8aab0d8d5474bb5ecbdea3f38346fe908c65bea54c869fe80d2fe9", 0x2}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) signalfd(r0, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x404002, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r3, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 49) 15:03:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="5cab690b55c727cd066fe55d9a2e18a5f1ff280f6ea730555a78af74dbecad21ebb669d28149aba87d785cdab074655313be656553af297a0dabbae90374aa18353db179", &(0x7f00000001c0)=@buf="59b7ec33ce22019668ca00574a2de0ef864d787446dfa1eefeca156018f016f29893c38616afd1264e896e20d15a7d7b140f8aab0d8d5474bb5ecbdea3f38346fe908c65bea54c869fe80d2fe9", 0x2}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) signalfd(r0, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x404002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="5cab690b55c727cd066fe55d9a2e18a5f1ff280f6ea730555a78af74dbecad21ebb669d28149aba87d785cdab074655313be656553af297a0dabbae90374aa18353db179", &(0x7f00000001c0)=@buf="59b7ec33ce22019668ca00574a2de0ef864d787446dfa1eefeca156018f016f29893c38616afd1264e896e20d15a7d7b140f8aab0d8d5474bb5ecbdea3f38346fe908c65bea54c869fe80d2fe9", 0x2}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) signalfd(r0, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x404002, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) [ 2381.506510][ T4095] FAULT_INJECTION: forcing a failure. [ 2381.506510][ T4095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2381.593467][ T4095] CPU: 0 PID: 4095 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2381.603505][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2381.613556][ T4095] Call Trace: [ 2381.616834][ T4095] [ 2381.619757][ T4095] dump_stack_lvl+0xcd/0x134 [ 2381.624516][ T4095] should_fail.cold+0x5/0xa [ 2381.629025][ T4095] _copy_from_user+0x2a/0x170 [ 2381.633958][ T4095] move_addr_to_kernel.part.0+0x31/0x110 [ 2381.639595][ T4095] move_addr_to_kernel+0x4f/0x70 [ 2381.644533][ T4095] io_connect+0x3c9/0x4b0 [ 2381.648863][ T4095] ? io_connect_prep+0x220/0x220 [ 2381.653817][ T4095] ? __fget_files+0x26a/0x440 [ 2381.658516][ T4095] ? io_connect_prep+0x220/0x220 [ 2381.663476][ T4095] io_issue_sqe+0x69d/0xd00 [ 2381.667990][ T4095] io_submit_sqes+0x936/0x1d10 [ 2381.672774][ T4095] __do_sys_io_uring_enter+0xadb/0x2430 [ 2381.678342][ T4095] ? lock_acquire+0x480/0x570 [ 2381.683026][ T4095] ? lock_release+0x560/0x780 [ 2381.688749][ T4095] ? rcu_read_lock_sched_held+0xd/0x70 [ 2381.694230][ T4095] ? __ct_user_exit+0xff/0x150 [ 2381.699017][ T4095] ? io_submit_sqes+0x1d10/0x1d10 [ 2381.704058][ T4095] ? lock_downgrade+0x6e0/0x6e0 [ 2381.708921][ T4095] ? vtime_user_exit+0x218/0x6c0 [ 2381.713879][ T4095] ? trace_hardirqs_on+0x2d/0x120 [ 2381.718924][ T4095] do_syscall_64+0x35/0xb0 [ 2381.723355][ T4095] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2381.729348][ T4095] RIP: 0033:0x7f9bb008a5a9 [ 2381.733769][ T4095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2381.753383][ T4095] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2381.761801][ T4095] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2381.769776][ T4095] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2381.777751][ T4095] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2381.785726][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:03:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) 15:03:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) [ 2381.793699][ T4095] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2381.801683][ T4095] 15:03:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) (async) 15:03:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(r0, r0, 0x2) [ 2382.103421][ T3691] usb 2-1: new high-speed USB device number 113 using dummy_hcd 15:03:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcdS', 0x2) ftruncate(0xffffffffffffffff, 0x800200800007f) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x350}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0xa, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}, 0xfffffffe) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2382.303307][ T3691] usb 2-1: device descriptor read/64, error 18 [ 2382.573342][ T3691] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2382.763292][ T3691] usb 2-1: device descriptor read/64, error 18 [ 2382.883403][ T3691] usb usb2-port1: attempt power cycle [ 2383.295586][ T3691] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2383.393422][ T3691] usb 2-1: Invalid ep0 maxpacket: 249 [ 2383.543326][ T3691] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2383.643375][ T3691] usb 2-1: Invalid ep0 maxpacket: 249 [ 2383.648961][ T3691] usb usb2-port1: unable to enumerate USB device 15:03:06 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001dd5fff909fe00e9000000000212000100090000f2ff653eed1388"], 0x0) 15:03:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcdS', 0x2) ftruncate(0xffffffffffffffff, 0x800200800007f) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x350}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0xa, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}, 0xfffffffe) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:06 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcdS', 0x2) (async) ftruncate(0xffffffffffffffff, 0x800200800007f) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async, rerun: 32) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x350}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async, rerun: 64) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async, rerun: 64) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0xa, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}, 0xfffffffe) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(r0, r0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) close_range(r0, r0, 0x2) (async) 15:03:06 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 50) 15:03:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b480)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x68, "02797b0ce383db"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d840)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xb0, "7677b067764013"}) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r9, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r10 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) close_range(r0, r0, 0x2) 15:03:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r1}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000340)=0x4, 0x0, 0x4) r6 = socket$inet(0x2, 0x5, 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x7, 0x1000, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1853) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2384.570529][ T4142] FAULT_INJECTION: forcing a failure. [ 2384.570529][ T4142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2384.595308][ T4142] CPU: 1 PID: 4142 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2384.605441][ T4142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2384.615497][ T4142] Call Trace: [ 2384.618772][ T4142] [ 2384.621696][ T4142] dump_stack_lvl+0xcd/0x134 [ 2384.626291][ T4142] should_fail.cold+0x5/0xa [ 2384.630797][ T4142] _copy_from_user+0x2a/0x170 [ 2384.635474][ T4142] move_addr_to_kernel.part.0+0x31/0x110 [ 2384.641112][ T4142] move_addr_to_kernel+0x4f/0x70 [ 2384.646082][ T4142] io_connect+0x3c9/0x4b0 [ 2384.650419][ T4142] ? io_connect_prep+0x220/0x220 [ 2384.655377][ T4142] ? __fget_files+0x26a/0x440 [ 2384.660096][ T4142] ? io_connect_prep+0x220/0x220 [ 2384.665031][ T4142] io_issue_sqe+0x69d/0xd00 [ 2384.669536][ T4142] io_submit_sqes+0x936/0x1d10 [ 2384.674308][ T4142] __do_sys_io_uring_enter+0xadb/0x2430 [ 2384.679863][ T4142] ? lock_acquire+0x480/0x570 [ 2384.684550][ T4142] ? lock_release+0x560/0x780 [ 2384.689222][ T4142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2384.694680][ T4142] ? __ct_user_exit+0xff/0x150 [ 2384.699444][ T4142] ? io_submit_sqes+0x1d10/0x1d10 [ 2384.704463][ T4142] ? lock_downgrade+0x6e0/0x6e0 [ 2384.709308][ T4142] ? vtime_user_exit+0x218/0x6c0 [ 2384.714243][ T4142] ? trace_hardirqs_on+0x2d/0x120 [ 2384.719264][ T4142] do_syscall_64+0x35/0xb0 [ 2384.723676][ T4142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2384.729561][ T4142] RIP: 0033:0x7f9bb008a5a9 [ 2384.733975][ T4142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2384.753572][ T4142] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2384.761973][ T4142] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2384.769931][ T4142] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2384.777892][ T4142] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2384.785858][ T4142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2384.793817][ T4142] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2384.801781][ T4142] [ 2385.113313][ T7] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2385.343430][ T7] usb 2-1: device descriptor read/64, error 18 15:03:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 51) 15:03:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcdS', 0x2) ftruncate(0xffffffffffffffff, 0x800200800007f) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x350}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0xa, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}, 0xfffffffe) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r1}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000340)=0x4, 0x0, 0x4) r6 = socket$inet(0x2, 0x5, 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x7, 0x1000, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1853) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r1}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000340)=0x4, 0x0, 0x4) (async) socket$inet(0x2, 0x5, 0x8) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x7, 0x1000, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1853) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2385.532898][ T4163] FAULT_INJECTION: forcing a failure. [ 2385.532898][ T4163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2385.555252][ T4163] CPU: 0 PID: 4163 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2385.565273][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2385.575370][ T4163] Call Trace: [ 2385.578653][ T4163] [ 2385.581587][ T4163] dump_stack_lvl+0xcd/0x134 [ 2385.586188][ T4163] should_fail.cold+0x5/0xa [ 2385.590725][ T4163] _copy_from_user+0x2a/0x170 [ 2385.595430][ T4163] move_addr_to_kernel.part.0+0x31/0x110 [ 2385.601094][ T4163] move_addr_to_kernel+0x4f/0x70 [ 2385.606038][ T4163] io_connect+0x3c9/0x4b0 [ 2385.610368][ T4163] ? io_connect_prep+0x220/0x220 [ 2385.615306][ T4163] ? __fget_files+0x26a/0x440 [ 2385.619985][ T4163] ? io_connect_prep+0x220/0x220 [ 2385.624931][ T4163] io_issue_sqe+0x69d/0xd00 [ 2385.629437][ T4163] io_submit_sqes+0x936/0x1d10 [ 2385.634230][ T4163] __do_sys_io_uring_enter+0xadb/0x2430 [ 2385.639785][ T4163] ? lock_acquire+0x480/0x570 [ 2385.644467][ T4163] ? lock_release+0x560/0x780 [ 2385.649144][ T4163] ? rcu_read_lock_sched_held+0xd/0x70 [ 2385.654643][ T4163] ? __ct_user_exit+0xff/0x150 [ 2385.659444][ T4163] ? io_submit_sqes+0x1d10/0x1d10 [ 2385.664473][ T4163] ? lock_downgrade+0x6e0/0x6e0 [ 2385.669316][ T4163] ? vtime_user_exit+0x218/0x6c0 [ 2385.674250][ T4163] ? trace_hardirqs_on+0x2d/0x120 [ 2385.680497][ T4163] do_syscall_64+0x35/0xb0 [ 2385.684920][ T4163] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2385.690818][ T4163] RIP: 0033:0x7f9bb008a5a9 [ 2385.695251][ T4163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2385.714891][ T4163] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2385.723307][ T4163] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 15:03:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="d8de2a31220aa3070f733d855895a7d8", 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f00000010c0)="ac53aec96a8cee343af84ca25241f823ebbbd0561379e1b267be1e626b87fabd2a9802b0ab61b02b0e6a07f5b3640ce7673cbcd0dfdf20a09e314799ed1d15617b18747ec933b7e362c5afbb26c8294cb48fd2e8cad9c47a01ba76d63b6e25b6588cc3917a2d656857b4bb6ef7d390373a6cbe653388ebefa5dd24b026ce9dc3b8931563c417548e43e61534d4aaf1f1f6e310bff4fe382ff99f3c3dd5ea52e86f9ae98b1db95a46ef299e9711a0640c070b833db27718027a84b91101758de053d86a3aadfa2be6bc91877afe9b9b9740f51d87bf3e0a3a11c28f1c0b6ea3d6ddba6dc510d6d8f26ccf54ac6d96201ac6a6e49d8c96f574e6db345c0954ab813b6203135a24b9a67f96e484512119c6a7ac80bdadba4a30aba408dac0a485eb63ea571652bfc1f0790729850266560fda586487e92f8a810662fafd5723ed7cb8eb1265570935bfbb5b3b5a9c08bd11644f6241c72ab2924d63acc365f96529789c7bade0dfd59348ec3b6496abf7fbb4654d255c3844fcf50e17683ddfb0e3267e46e0837b97182870885013bdab4d0a0ec0fcb668aa933e7332bf85e39e5fc5a9b0969e12e19a7a917548e4d777179818865fb83c82584ef1706984c0fcd5598014150e243c4835b61bf70350d33ca545cf988e77bca26b91f7270cd543dfffee457b3d853ebf32e7d82e202caa1b52a3211e75fd2c43dce5e230566e80dfde587a24748eefbad5334f75bfa901a3e78a784ccb1c846d5e510332537be6eef707fa9d9be2c0089bb5efdc04ae61467039c334071431b478d09769374f48a04daa455ed6dcef060c2df7fd40b4ee7f25da43722c9006f49ebde77b8084f4a546717be5ee1ad87bfcd951e1fe5e46077cb9959f999caf2ba7c2cdeecc55ca59673c5f0a50f43af5a756bf4277a8e6a5978b8b2e47bf3867f7089129ef4504453b27232277cedc285d722a16214a925a868ed3fd4b2ee5ca645356f0499e4e4e52063d3db744ff14d27c56d9c0397b6acd2c104c507ae3a27bbda20b9ce174846373e39351228d206782e6856bf2ea78b4a9e036712096feb331200728c069e7f03df6098e0fe7b8619540281f800c18f17fbc872c7f122d6d4c4b52ef446212a45c18589fa486bf1a587de9eee50360ec93a391de90ff47c8d9c02aed8c3d7e52dfdc9a12c182f6c54ea98ad507a3f50de4cb609233e544b18e695a00530e1339cc5ad957b1e1270e646493fb3d31aef0771c20eec8db7c01e83c3c3814b006c96c339cc81e9f1682b69c2652533ffae4e842c1044e4c5d7ece48588365259e91a9f1e3377d7ff4c332622d31ac5669949e69eb4c2a60298c09368f1086730bf6023cb4dc20c22eb6a0b7ec9c409a02b3a02c9a75fc41f423eae494b8701ca2e9130d94c8e7930b13030eb5c8482e7f92237099fbfbb5cb939a426b690952af2164407e4953bb1090297a05df9fd70100769caf46116836a9d1fec4e91b5566980595caac69c847e389434ea2c280085774f5a6d05c46f150128089be32c4024f310fe0161d50322fa008e15798a7902173fe52973e055edca77efff856e6824d88083fef81eeba770003280302f7f69eb11825f5dc1e40791196b80ee12b29b6ea14b802aed17632f0c441ea9a5b203f8ca13ab1f9d217e71a20d4769bf38ca42a47199ef354598b76cc880c72e44a79d51c1d733d711db1aaade2b125519dda1083570525a55d02deea34ed568eefc58ba1d5518c4c69f1848e8442669a013f12aa7d8fb0f1e94be22c5b3d9f16b32d74415453004f8a14a42dfdfacd8d6aa7b646e867d824123ebdb063b6fc63d83df5628bad2f1d1f63e61ac3a32ded2a083eb354f345253bb200abbffe65862392a951e5458f0c43058594e0301647e37c3b0746c85d7cae743798eb7ba9aa78ac2f688001ad1b046450a830a1c07f97ce187d8c627ef666f41ccf9e7f056ed7020a0f35bf01af5b07c253f36d66159c53b60ab8c97c9b3999f6fa859e114218bc597cf34902f69a50f31bb2ce2818ae001c27b3fc33f0986690a4f5dc19910170708ad94c833706e8f5d1ccdc1b851d16d3ae73ce55658082163da920e3d44214f7307220e1a2a6453f1a23499e5d585cf8276af3f0a2cf1f8eabe1d781607eea81d4aeccdb0e70b8933bafc0623da75d1e5779d1d3f413bd76d15ea95136220810a19312c702b01c744dc1ea29075ada79a93eac6f5dd3c01bd2b6043e2fa0cb35d82951343a4925979464301b076f369f3d1acdd89b1f47143b5c295f96d907edd403417e290f48b6a301f4ce58ccddedaeb1d3bcbdab2dde5587d079c1800e6ac7c39dcab4a038f2e1b9bad56b07dd97d5bb9e874992e44b11f5b5ed6f6d10485cda14106eec4b1a7fb9b863149149cc3993109934253a58d4724a75b83a22fe6fbef20292cc3fe4909c4cc39cdf8979af795b3a3eae07ec1dd4ced31124cf2ff9a44fed96de9219ce4c8a4c0d8a2c29b03320f157d5970a8104bda4bf9ce5fd33d964c60889ea3f62217dcb0d05a8319a73a2213599e7841c4821a5acb67c7a3ccbb743f1a5bd6a598384fbee11328c67a7b8b724058e06a83b177819cce57c4ffacaf9d84e584f9f151d9e3f6fb375b367d9431e852c52f3d10346ce35e478f4911a1c63afc474113529b6c93d904ed53bdc669167cdf91a59fd58a696c13f795be0f0dc219148a1f9b4bda3cabec2bebb09c30667a0e4b1e01e41f8fdb02f7c1a4baaca4f18782b410cfdd1eba8188f253791bfe223e405fb6262dcc1c1b24c3b402b9d9875e3897532ca0d86539f8ad13de96986e90f8310a2ba9a9ee999ae6e7b0a9645715adf8b3be36f64dad9e7c221eb2630d58d9e6d5ecd64cae3a91cf935178ba8c8b2bc4f2dd652bfb90cb1300c555e6e1a8e353f3b0ecc7e75330be7f6d9271e8eb850f864a7c3c3892bee0b201dc373bbfb137a67593d020963fe88885b5e6a45a92af1d975d175c40de643eb6cc8f8dc043176967e1d29f188247f43e7b3d6186701b43341ee2c533cf2c5640f30202696d3bb8660d9d14e32e1e703de16aedc1aba048304b381106b7e25cb3ec49c3c64fea637e45e6e0096eb10f0430c2bfe3448e2fb25b02f9ded4949f3e6ca126354d554a1a2d6d9d87c1cd1a461a00899c6e5fac9bb2fbaae6f6320f7fdd7cb77cb6a59eef44a1cf11a63279cf289a278cbc83de60dc17835be554df5c59d7a91834f9578aa5080ad37b3fcd38fd7724a544656d0725eae961d3c2c926a3cc6009d2407c4e51075bd28caa3329e229e53aa2b8102d7ee56f725ad662135882f0aac8d1fcc76cb92f282d03ef8b6fc568c8a479ec674e36a2cb9971f79e030f674c6aee7969812b673f8e64b0af3f6b2373f26ae42a484c65b8bfbc6a079809b5a34b02359e0f76ba79007a90956b5ed8b7f1958b675710b5eb5d99a9e27e3a5b58455d27d9cd198fd6066481ea38d1decdb7a1c44765311e4b3fec4530ec9387ef2064c28ca5a95a8917f636656958e877589fe0b6ae06727adb7f83736c86e01b31fe3527052f1f928cb4411d31e681319c41f1692be09deb0d56deaa25929862aabe67ede0b72a7b1d9a0f8c015b6f3bcc45c924a95f8993d5deb8d9371fb564f4f8a1257d1d26c631547fa078c9b250badd6bbcd3c9c76d7efa6942871b87bf989e937c8033bdaa66cda45f1291fe6d1e32bf8a56b2a3ec71348b2cd360589f9a83015dbbde957cbc22428f3a0696110416d7f61bd0f22faf96673f2a0c8970f53ab2d14cb1da48196959b27c7cdca70e99ff981b2f4777a6f5c3e62f5fd92284fdf752f474e1296a6e4a351b5e79b6a211d52109a62a0449a083242ac07e4e2a07fa63a8d16f6aed19a57e3739677bc245b30105fe43b2e990994bad64ee4a488bcb8a2e805f1635c774d9683d5705bcd12bffb037501be9fc9c0c5b1f6ce585ecf0ca60c2f20a95ff1fbcc86c2d3790ac81165fe69246e75b50e014d2e9b0bc13c491964e867e28fc403507a2ffb7a7d14e3014b1cee5e7e786f96fa153e9ed67614a1dbfe15ab9644f389ee0e320c7cd97eb07354bc88dd1fd71980019130252982c818cad9d4e54f75443773cc8a96cd37dac1ce5e15f48cc75a92c207b4bb6cee8139ab651a1fa6cc952828f7a1bce1cbf98a97af970466d394dec32357fb303ec0f5965ea433067cb74326f306effdc60cc85904858e8c30ad44ac9ad3aa47cc95b51f28fbd096cfd3bb2da23e1650a3001b84819e3ed844603a2884033b3eb4e785d1f09ae472a433baf49929de8e353fb99eeec3c2c06c3a10f35c36472e04725786e6729e8e14d37a2f4c4a641b357067c5b63ade5562231c505aee94c71dd0ded04c1c2dae4637159c9cbee11f9c89b6da600a5b09142499980e934234fa940a25cc0f53e65938533fc5c8825c927fe670bd5d70e5eb4a03c426c9413510fb094d55c53b0b65acf2fce88075d23c754ceb39b73ecccd743a267614a92409ad2e31735cee9454f6b7ceb48a763a2a1eaf8355c0b3cf3d4da322808af4a9ce35653d1b714a58fcb3c5940682f3d6a9eb345e72ece6d3b2bdcc1f9c3705d883f52025c6aab680d016a6bddb4029a989a4d819216143886f9b533cf6ea44656f1dbf061833da000b2e04996da235bf66dbfd4b60f622d59a3074e343789f0dd684524f44d366137654d57a147a8958c966129c21efa5e03a1bb85ccfccf09fa84c6715965092c2c8f89bd875b51fa426020c0d6955b0e784941bba2559768407a27a1936d858f18ce994f46620523d386f96c9c596cf19975007ab9d94d52969c28d8fd0ae593c6bae1d7ccfefdba734791f77c20ad43c599348fdbe24c98f3625dd2f7afeba8f46fd70b4a48bf7aa70259b8cafeccc848e6a3455a52b9f171529335b1999b43dbd4c7faf9f5a09a41c23f1ee1b3b4964d9fd45f6ba3005bcef74c40943c2622a0b268956b5696fe09a5153351953721112931d5a78482faae23509f339c82dd9b09892f4f9d7b53def06cc560a7f066fdece515b949ee0f5b5fc3aa17f6772da18c0237ad2403eabd62f88d8ded103145822eea9245c461e0ee88e0d6cb7be789c67bef7731f70f0ba2dce05546f95f3fdf07d9e14b36a0629f7f3a6f1dcfae4ca3f88b5e404e7acc4c14169ddf999c52b9dddf12bad4f57af8ff67c3b6325e4ed127f53f602b00a99d08744caaf03bb6088ff786b63b6f877134a6b93efb81a746f30e4bc9f436618edff3d39d607ceb3e0957e48e6bff13f7a4b689c03d226bde2a9f91e27883297fc99f0b9897ea088c110a679e0901aa0257046b45647ae10cbfa2d76300341323b5ffec1828f309f454c006a5e8e788dc883c79207e8c607ca62d2e5ef825ac892b85eb3ec986b2654ba137fed8183725544e8c855d80322a46358de88758ae0ea5aac8e653b2597e4e0bfb2d819c2a0f6544f829451d42bfedfcae94e05d0c2e602b06eb0402e13efa4b4e1b784df0e7a34e6392f6fa0210189ea404a73d0e12643549c13b100100000cc2d8312be301611863c440c0f1a0118f16cb50618bdc12b176be04460ffa56e4e20e6a1595701e61e955d71cbb4fc61742e8a07ddfb8420b3c144d73daf9029563e32244b099307351692c794b847d4fb9f9b24f760d54310ff6c1d6a76c48e478ef350f1f4258c699e12c6ea4ea53ee0955488c494bf9d33518893a04258c9b85140bf3a660f6adafc7c11d62d0ffaf18b6109fe9e285533b35e8c76303c1f07fe84069883fceed2f8682a55b7a6000000000000eec95538baf50d6c2ee8edb9efef573f58653208aa3c4db3d314014bcf98ce2a58e1c8bd9ce26e90d75c8725073a8d2a506ebb319a7628989131d5ef2a128fbb29a27d38450d5a26dee90c4afce42eaf58f331953900a9eff2d38756517e7424500a7cf61884", 0x1062, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) [ 2385.731467][ T4163] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2385.739449][ T4163] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2385.747423][ T4163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2385.755406][ T4163] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2385.763379][ T4163] [ 2385.843407][ T7] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2386.064420][ T7] usb 2-1: device descriptor read/64, error 18 [ 2386.183740][ T7] usb usb2-port1: attempt power cycle [ 2386.603445][ T7] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2386.693624][ T7] usb 2-1: Invalid ep0 maxpacket: 249 [ 2386.843409][ T7] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2386.943508][ T7] usb 2-1: Invalid ep0 maxpacket: 249 [ 2386.948991][ T7] usb usb2-port1: unable to enumerate USB device 15:03:09 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x158, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x2, 0x1, 0x9, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xc0}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x5, 0xe9}, {0x6, 0x24, 0x1a, 0x3, 0x10}, [@mdlm_detail={0xd3, 0x24, 0x13, 0x40, "7d63065850b6b7dfd2e12603a9cf291875d4ff856be0c5ec025c31cb32731aaedafe495178988a18bb58311bb028cfaf3c0e5f69a2ea1e9cca56b8935bec1b82f8fb9457537067dedcfb7a798f64fe216f2484da793f9f2bcd574f4104e3d19c1174707e53037951bc94a26cb33993887302bc07f84d70f46ecc70f05859d8014d1817fde5698c705dd36f596a4bc1727c14588b582316238997dcc2de8139f7cc869988ba1e560902f53e2c7cd94f40ce38271f7ce08a95c60844725a0abe213e292b709a7c59486b197ce719b7f8"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x555, 0x0, 0x4}, @dmm={0x7, 0x24, 0x14, 0x8000, 0x4098}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x86, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x20, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x80, 0x9, 0x0, 0x20, 0x80}, 0x47, &(0x7f0000000240)={0x5, 0xf, 0x47, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xa3, 0x1, 0x8000, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xec, 0x2, 0x1, 0x0, 0x3f, [0x18, 0xc000]}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x4e703ad, 0xf00, 0x9, [0x30, 0x180, 0x30, 0x0, 0x3f]}]}, 0x8, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x412}}, {0x17, &(0x7f00000002c0)=@string={0x17, 0x3, "47e8406f97eae05fc5c8fbabdf570e5c8304a04772"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80a}}, {0xd6, &(0x7f0000000340)=@string={0xd6, 0x3, "d577379ecd617a615af85c2e79009e4a06169c8a9f9cb365519cc290733bed28eb18257eae9ac12431edf150c518fb97c42472b158fb0ef69c9df3d90d38a433f8b71b2c80f3ebc4e4002de7c951b894490035014c95a2b920b56b5778cf4601bc57795d1a3c8e0ebc0d60e7a01c06ec42d9a746a304e2e06f6ffbf676b303d51c75a8fba65149dc7ac97ab6a8c842e89e3722e9435fe0d37bf01f5b3e1f15c23260192d9ac77440f151df80f51acc649e0b6e073a8814e92a747974913d9eff17bc26554ff9eb0c7d12adce261ca9090c73a2dc"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}, {0xa9, &(0x7f00000004c0)=@string={0xa9, 0x3, "ad93c44290413506424329df6e07bc50217fa6680a3a56b59d794d86af743ac4cb82606f38f6f75df638f69547c1cfe91777cb38548b00bd24f5415f3809e85fd865d805900776d0e0a61961106d9b2122dd6c43deb8c70a184c9083b45002f1677eb1df5bc579bf2f8bc6050687c50e14c7b6d49828f82ee086f3774e1cd0c7b0cfbd767735884381318f637e27f63acd142ac5d9cacb0cc165930eabbc9c81cacd8cf6223819"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x441}}]}) 15:03:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (rerun: 32) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b480)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x68, "02797b0ce383db"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d840)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xb0, "7677b067764013"}) (async, rerun: 32) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r9, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 64) r10 = socket$inet(0x2, 0x6, 0x0) (rerun: 64) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async, rerun: 32) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async, rerun: 32) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 64) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (rerun: 64) 15:03:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r1}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000340)=0x4, 0x0, 0x4) r6 = socket$inet(0x2, 0x5, 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x7, 0x1000, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1853) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="d8de2a31220aa3070f733d855895a7d8", 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f00000010c0)="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", 0x1062, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="d8de2a31220aa3070f733d855895a7d8", 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendto$inet(r1, &(0x7f00000010c0)="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", 0x1062, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) (async) 15:03:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 52) 15:03:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4004811, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r7, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:10 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000340)=""/143) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x3, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="d8de2a31220aa3070f733d855895a7d8", 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f00000010c0)="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", 0x1062, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) 15:03:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0xa, 0x7) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x40800) [ 2387.658344][ T4200] FAULT_INJECTION: forcing a failure. [ 2387.658344][ T4200] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:03:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b480)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x68, "02797b0ce383db"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d840)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xb0, "7677b067764013"}) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r9, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r10 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (rerun: 64) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 64) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (rerun: 64) [ 2387.775207][ T4200] CPU: 1 PID: 4200 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2387.785236][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2387.795293][ T4200] Call Trace: [ 2387.798571][ T4200] [ 2387.801581][ T4200] dump_stack_lvl+0xcd/0x134 [ 2387.806168][ T4200] should_fail.cold+0x5/0xa [ 2387.810675][ T4200] _copy_from_user+0x2a/0x170 [ 2387.816043][ T4200] move_addr_to_kernel.part.0+0x31/0x110 [ 2387.821775][ T4200] move_addr_to_kernel+0x4f/0x70 [ 2387.826723][ T4200] io_connect+0x3c9/0x4b0 [ 2387.831079][ T4200] ? io_connect_prep+0x220/0x220 [ 2387.836035][ T4200] ? __fget_files+0x26a/0x440 [ 2387.840718][ T4200] ? io_connect_prep+0x220/0x220 [ 2387.845691][ T4200] io_issue_sqe+0x69d/0xd00 [ 2387.850196][ T4200] io_submit_sqes+0x936/0x1d10 [ 2387.854964][ T4200] __do_sys_io_uring_enter+0xadb/0x2430 [ 2387.860530][ T4200] ? lock_acquire+0x480/0x570 [ 2387.865205][ T4200] ? lock_release+0x560/0x780 [ 2387.869891][ T4200] ? rcu_read_lock_sched_held+0xd/0x70 [ 2387.875347][ T4200] ? __ct_user_exit+0xff/0x150 [ 2387.880288][ T4200] ? io_submit_sqes+0x1d10/0x1d10 [ 2387.885323][ T4200] ? lock_downgrade+0x6e0/0x6e0 [ 2387.890168][ T4200] ? vtime_user_exit+0x218/0x6c0 [ 2387.895102][ T4200] ? trace_hardirqs_on+0x2d/0x120 [ 2387.900131][ T4200] do_syscall_64+0x35/0xb0 [ 2387.904543][ T4200] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2387.910426][ T4200] RIP: 0033:0x7f9bb008a5a9 [ 2387.914833][ T4200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2387.934433][ T4200] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2387.942835][ T4200] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2387.950801][ T4200] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2387.958767][ T4200] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2387.966739][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:03:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x80) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000300)=0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x8, 0x40010, r2, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000200)=@rc={0x1f, @any, 0xff}}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000180)=0x301) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2387.974703][ T4200] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2387.982672][ T4200] [ 2388.003372][ T7] usb 2-1: new high-speed USB device number 121 using dummy_hcd 15:03:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2388.254333][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2388.373457][ T7] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2388.397051][ T7] usb 2-1: config 0 has no interface number 0 [ 2388.583390][ T7] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2388.612340][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.651370][ T7] usb 2-1: Product: syz [ 2388.668723][ T7] usb 2-1: Manufacturer: syz [ 2388.677918][ T7] usb 2-1: SerialNumber: syz [ 2388.696283][ T7] usb 2-1: config 0 descriptor?? [ 2388.961600][ T4199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2388.970255][ T4199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2388.984868][ T6274] usb 2-1: USB disconnect, device number 121 15:03:11 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x158, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x2, 0x1, 0x9, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xc0}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x5, 0xe9}, {0x6, 0x24, 0x1a, 0x3, 0x10}, [@mdlm_detail={0xd3, 0x24, 0x13, 0x40, "7d63065850b6b7dfd2e12603a9cf291875d4ff856be0c5ec025c31cb32731aaedafe495178988a18bb58311bb028cfaf3c0e5f69a2ea1e9cca56b8935bec1b82f8fb9457537067dedcfb7a798f64fe216f2484da793f9f2bcd574f4104e3d19c1174707e53037951bc94a26cb33993887302bc07f84d70f46ecc70f05859d8014d1817fde5698c705dd36f596a4bc1727c14588b582316238997dcc2de8139f7cc869988ba1e560902f53e2c7cd94f40ce38271f7ce08a95c60844725a0abe213e292b709a7c59486b197ce719b7f8"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x555, 0x0, 0x4}, @dmm={0x7, 0x24, 0x14, 0x8000, 0x4098}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x86, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x20, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x80, 0x9, 0x0, 0x20, 0x80}, 0x47, &(0x7f0000000240)={0x5, 0xf, 0x47, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xa3, 0x1, 0x8000, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xec, 0x2, 0x1, 0x0, 0x3f, [0x18, 0xc000]}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x4e703ad, 0xf00, 0x9, [0x30, 0x180, 0x30, 0x0, 0x3f]}]}, 0x8, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x412}}, {0x17, &(0x7f00000002c0)=@string={0x17, 0x3, "47e8406f97eae05fc5c8fbabdf570e5c8304a04772"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80a}}, {0xd6, &(0x7f0000000340)=@string={0xd6, 0x3, "d577379ecd617a615af85c2e79009e4a06169c8a9f9cb365519cc290733bed28eb18257eae9ac12431edf150c518fb97c42472b158fb0ef69c9df3d90d38a433f8b71b2c80f3ebc4e4002de7c951b894490035014c95a2b920b56b5778cf4601bc57795d1a3c8e0ebc0d60e7a01c06ec42d9a746a304e2e06f6ffbf676b303d51c75a8fba65149dc7ac97ab6a8c842e89e3722e9435fe0d37bf01f5b3e1f15c23260192d9ac77440f151df80f51acc649e0b6e073a8814e92a747974913d9eff17bc26554ff9eb0c7d12adce261ca9090c73a2dc"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}, {0xa9, &(0x7f00000004c0)=@string={0xa9, 0x3, "ad93c44290413506424329df6e07bc50217fa6680a3a56b59d794d86af743ac4cb82606f38f6f75df638f69547c1cfe91777cb38548b00bd24f5415f3809e85fd865d805900776d0e0a61961106d9b2122dd6c43deb8c70a184c9083b45002f1677eb1df5bc579bf2f8bc6050687c50e14c7b6d49828f82ee086f3774e1cd0c7b0cfbd767735884381318f637e27f63acd142ac5d9cacb0cc165930eabbc9c81cacd8cf6223819"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x441}}]}) 15:03:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = socket$inet(0x2, 0xa, 0x7) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x40800) 15:03:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 53) 15:03:11 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000340)=""/143) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x3, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000340)=""/143) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x3, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x80) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000300)=0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x8, 0x40010, r2, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000200)=@rc={0x1f, @any, 0xff}}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000180)=0x301) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x80) (async) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000300)=0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x8, 0x40010, r2, 0x10000000) (async) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000200)=@rc={0x1f, @any, 0xff}}, 0x0) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000180)=0x301) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000340)=""/143) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x3, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2389.567676][ T4246] FAULT_INJECTION: forcing a failure. [ 2389.567676][ T4246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2389.585911][ T4245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2389.607330][ T4245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2389.616529][ T4246] CPU: 0 PID: 4246 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2389.626556][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2389.636640][ T4246] Call Trace: [ 2389.639934][ T4246] [ 2389.642882][ T4246] dump_stack_lvl+0xcd/0x134 [ 2389.647497][ T4246] should_fail.cold+0x5/0xa [ 2389.652036][ T4246] _copy_from_user+0x2a/0x170 [ 2389.656741][ T4246] move_addr_to_kernel.part.0+0x31/0x110 [ 2389.662413][ T4246] move_addr_to_kernel+0x4f/0x70 [ 2389.667393][ T4246] io_connect+0x3c9/0x4b0 [ 2389.671759][ T4246] ? io_connect_prep+0x220/0x220 [ 2389.676732][ T4246] ? __fget_files+0x26a/0x440 [ 2389.681439][ T4246] ? io_connect_prep+0x220/0x220 [ 2389.686409][ T4246] io_issue_sqe+0x69d/0xd00 [ 2389.690940][ T4246] io_submit_sqes+0x936/0x1d10 [ 2389.695738][ T4246] __do_sys_io_uring_enter+0xadb/0x2430 [ 2389.701315][ T4246] ? lock_acquire+0x480/0x570 [ 2389.706013][ T4246] ? lock_release+0x560/0x780 [ 2389.710716][ T4246] ? rcu_read_lock_sched_held+0xd/0x70 [ 2389.716207][ T4246] ? __ct_user_exit+0xff/0x150 [ 2389.721001][ T4246] ? io_submit_sqes+0x1d10/0x1d10 [ 2389.726044][ T4246] ? lock_downgrade+0x6e0/0x6e0 [ 2389.730907][ T4246] ? vtime_user_exit+0x218/0x6c0 [ 2389.735866][ T4246] ? trace_hardirqs_on+0x2d/0x120 [ 2389.740915][ T4246] do_syscall_64+0x35/0xb0 [ 2389.745349][ T4246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2389.751297][ T4246] RIP: 0033:0x7f9bb008a5a9 [ 2389.755735][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2389.775370][ T4246] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2389.783801][ T4246] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2389.791779][ T4246] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2389.799758][ T4246] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2389.807736][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2389.815714][ T4246] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2389.823699][ T4246] 15:03:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x80) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000300)=0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x8, 0x40010, r2, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000200)=@rc={0x1f, @any, 0xff}}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000180)=0x301) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x80) (async) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000300)=0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x8, 0x40010, r2, 0x10000000) (async) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000200)=@rc={0x1f, @any, 0xff}}, 0x0) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000180)=0x301) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2389.973370][ T2586] usb 2-1: new high-speed USB device number 122 using dummy_hcd 15:03:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0)=0xffffffffffff0000, 0x8001) ftruncate(0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r8 = socket$inet(0x2, 0x6, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000180)={r3, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r5, r6, 0x0, 0x1858) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000e355a769f0a1be1800000000000000000000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00abcdefghijklmnop']) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000340)=""/143) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x3, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000340)=""/143) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x3, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2390.233290][ T2586] usb 2-1: Using ep0 maxpacket: 16 [ 2390.353351][ T2586] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2390.363418][ T2586] usb 2-1: config 0 has no interface number 0 15:03:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = socket$inet(0x2, 0xa, 0x7) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x40800) 15:03:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 54) [ 2390.553610][ T2586] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2390.571760][ T2586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.611780][ T2586] usb 2-1: Product: syz [ 2390.629697][ T2586] usb 2-1: Manufacturer: syz [ 2390.656006][ T2586] usb 2-1: SerialNumber: syz [ 2390.674803][ T4287] FAULT_INJECTION: forcing a failure. [ 2390.674803][ T4287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2390.722408][ T2586] usb 2-1: config 0 descriptor?? [ 2390.733350][ T4287] CPU: 0 PID: 4287 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2390.743389][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2390.753476][ T4287] Call Trace: [ 2390.756780][ T4287] [ 2390.759716][ T4287] dump_stack_lvl+0xcd/0x134 [ 2390.764354][ T4287] should_fail.cold+0x5/0xa [ 2390.768867][ T4287] _copy_from_user+0x2a/0x170 [ 2390.773546][ T4287] move_addr_to_kernel.part.0+0x31/0x110 [ 2390.779185][ T4287] move_addr_to_kernel+0x4f/0x70 [ 2390.784126][ T4287] io_connect+0x3c9/0x4b0 [ 2390.788461][ T4287] ? io_connect_prep+0x220/0x220 [ 2390.793410][ T4287] ? __fget_files+0x26a/0x440 [ 2390.798111][ T4287] ? io_connect_prep+0x220/0x220 [ 2390.803052][ T4287] io_issue_sqe+0x69d/0xd00 [ 2390.807553][ T4287] io_submit_sqes+0x936/0x1d10 [ 2390.812317][ T4287] __do_sys_io_uring_enter+0xadb/0x2430 [ 2390.817859][ T4287] ? lock_acquire+0x480/0x570 [ 2390.822531][ T4287] ? lock_release+0x560/0x780 [ 2390.827224][ T4287] ? rcu_read_lock_sched_held+0xd/0x70 [ 2390.832683][ T4287] ? __ct_user_exit+0xff/0x150 [ 2390.837455][ T4287] ? io_submit_sqes+0x1d10/0x1d10 [ 2390.842491][ T4287] ? lock_downgrade+0x6e0/0x6e0 [ 2390.847352][ T4287] ? vtime_user_exit+0x218/0x6c0 [ 2390.852320][ T4287] ? trace_hardirqs_on+0x2d/0x120 [ 2390.857377][ T4287] do_syscall_64+0x35/0xb0 [ 2390.861821][ T4287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2390.867736][ T4287] RIP: 0033:0x7f9bb008a5a9 [ 2390.872158][ T4287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2390.892215][ T4287] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2390.900644][ T4287] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2390.908636][ T4287] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2390.916616][ T4287] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2390.924595][ T4287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2390.932571][ T4287] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2390.940562][ T4287] 15:03:13 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2391.175351][ T4280] usb 2-1: USB disconnect, device number 122 15:03:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r3 = memfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0)=0xffffffffffff0000, 0x8001) (async) ftruncate(0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r8 = socket$inet(0x2, 0x6, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000180)={r3, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) (async, rerun: 64) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r5, r6, 0x0, 0x1858) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000e355a769f0a1be1800000000000000000000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00abcdefghijklmnop']) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:14 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x158, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x2, 0x1, 0x9, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xc0}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x5, 0xe9}, {0x6, 0x24, 0x1a, 0x3, 0x10}, [@mdlm_detail={0xd3, 0x24, 0x13, 0x40, "7d63065850b6b7dfd2e12603a9cf291875d4ff856be0c5ec025c31cb32731aaedafe495178988a18bb58311bb028cfaf3c0e5f69a2ea1e9cca56b8935bec1b82f8fb9457537067dedcfb7a798f64fe216f2484da793f9f2bcd574f4104e3d19c1174707e53037951bc94a26cb33993887302bc07f84d70f46ecc70f05859d8014d1817fde5698c705dd36f596a4bc1727c14588b582316238997dcc2de8139f7cc869988ba1e560902f53e2c7cd94f40ce38271f7ce08a95c60844725a0abe213e292b709a7c59486b197ce719b7f8"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x555, 0x0, 0x4}, @dmm={0x7, 0x24, 0x14, 0x8000, 0x4098}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x86, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x20, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x80, 0x9, 0x0, 0x20, 0x80}, 0x47, &(0x7f0000000240)={0x5, 0xf, 0x47, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xa3, 0x1, 0x8000, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xec, 0x2, 0x1, 0x0, 0x3f, [0x18, 0xc000]}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x4e703ad, 0xf00, 0x9, [0x30, 0x180, 0x30, 0x0, 0x3f]}]}, 0x8, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x412}}, {0x17, &(0x7f00000002c0)=@string={0x17, 0x3, "47e8406f97eae05fc5c8fbabdf570e5c8304a04772"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80a}}, {0xd6, &(0x7f0000000340)=@string={0xd6, 0x3, "d577379ecd617a615af85c2e79009e4a06169c8a9f9cb365519cc290733bed28eb18257eae9ac12431edf150c518fb97c42472b158fb0ef69c9df3d90d38a433f8b71b2c80f3ebc4e4002de7c951b894490035014c95a2b920b56b5778cf4601bc57795d1a3c8e0ebc0d60e7a01c06ec42d9a746a304e2e06f6ffbf676b303d51c75a8fba65149dc7ac97ab6a8c842e89e3722e9435fe0d37bf01f5b3e1f15c23260192d9ac77440f151df80f51acc649e0b6e073a8814e92a747974913d9eff17bc26554ff9eb0c7d12adce261ca9090c73a2dc"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}, {0xa9, &(0x7f00000004c0)=@string={0xa9, 0x3, "ad93c44290413506424329df6e07bc50217fa6680a3a56b59d794d86af743ac4cb82606f38f6f75df638f69547c1cfe91777cb38548b00bd24f5415f3809e85fd865d805900776d0e0a61961106d9b2122dd6c43deb8c70a184c9083b45002f1677eb1df5bc579bf2f8bc6050687c50e14c7b6d49828f82ee086f3774e1cd0c7b0cfbd767735884381318f637e27f63acd142ac5d9cacb0cc165930eabbc9c81cacd8cf6223819"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x441}}]}) (rerun: 64) 15:03:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x16) r3 = syz_io_uring_setup(0x8, &(0x7f0000000340), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x6fc1, 0x0, 0x0, 0x0) 15:03:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 55) 15:03:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000004180)={&(0x7f0000002c40)=@tipc, 0x80, &(0x7f0000004000)=[{&(0x7f0000002cc0)=""/199, 0xc7}, {&(0x7f0000002dc0)=""/122, 0x7a}, {&(0x7f0000002e40)=""/253, 0xfd}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/168, 0xa8}], 0x5, &(0x7f0000004080)=""/220, 0xdc}, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000002b80)=@nat={'nat\x00', 0x19, 0x6, 0xa1c, [0x20002140, 0x0, 0x0, 0x20002694, 0x20002878], 0x0, &(0x7f0000000040), &(0x7f0000002140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x2c, 0x890b, 'netdevsim0\x00', 'vlan0\x00', 'bridge_slave_1\x00', 'ip6_vti0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff], 0x2e6, 0x336, 0x36e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x1}, {0x7}], 0x1}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x2d, [{0x401, 0x3, 0x2, 0xffffffff}, {0x67, 0x2, 0x7, 0xfffff000}, {0x20e1, 0x40, 0x7, 0x9}, {0xad19, 0x6, 0x9, 0x8001}, {0x1ff, 0x0, 0x80, 0x4}, {0x1, 0x0, 0x5, 0x29a4}, {0x275, 0x8f, 0x81, 0x7ff}, {0xff, 0x6}, {0x401, 0x2, 0x0, 0x8}, {0x6, 0x20, 0xe0, 0x5f}, {0x0, 0x0, 0x0, 0x6}, {0x2, 0x8, 0x40, 0x5}, {0x7f, 0x8, 0x5, 0x5}, {0x3, 0x3, 0xff, 0x5}, {0x4, 0x1, 0xff, 0x6}, {0xfff, 0x2, 0x6, 0x1}, {0x4, 0x1f, 0x3, 0x1}, {0x9, 0x1f, 0x6, 0x7}, {0xf8, 0x5, 0x7f, 0x3}, {0x0, 0x9, 0x6, 0x36a}, {0xff, 0x80, 0x8, 0xf4}, {0x7, 0x1, 0x7, 0xe7d7}, {0xba41, 0xb6, 0x86, 0xaacf}, {0x9, 0x0, 0x3, 0x5}, {0x3, 0xa7, 0x6, 0x3}, {0x6268, 0x1, 0x1, 0x3}, {0x4, 0x1, 0x20, 0x8}, {0x200, 0xfd, 0x0, 0x40}, {0x2, 0x40, 0x0, 0x3}, {0xe8, 0x1f, 0x4, 0xae5c}, {0x5, 0x0, 0x69, 0xced}, {0x5, 0x5, 0x7, 0x8}, {0x6, 0x7f, 0x35, 0x2}, {0xfffc, 0x9d, 0x2, 0x1}, {0x8001, 0x20, 0x5, 0x3}, {0x8, 0x4, 0x1, 0x9}, {0x3ff, 0x2, 0x4, 0xfffffff9}, {0x8, 0x8, 0x0, 0xc40}, {0xff, 0x6, 0x1f, 0x6}, {0x5, 0x5, 0x80, 0x6b56}, {0x3, 0x2, 0x8a, 0x3}, {0x5, 0x4, 0x7, 0x44e}, {0x100, 0x0, 0x7, 0xfffffff9}, {0x200, 0x5, 0x0, 0x67}, {0x9, 0x2, 0x7, 0x7fff}, {0xd4f, 0x4, 0x6, 0x8}, {0xf3, 0x8, 0x1f, 0x7}, {0x8000, 0x0, 0x7f, 0x4}, {0x4f8d, 0x8, 0x4, 0x7}, {0x4587, 0x0, 0xe1, 0x3}, {0x7fff, 0x40, 0xd8, 0xab59}, {0x0, 0xb4, 0x81, 0x3e}, {0x0, 0x7, 0x40, 0xc05}, {0x4, 0x6, 0xde, 0xfffffff9}, {0x5, 0xfa, 0x7, 0x4}, {0x7fff, 0x81, 0x1, 0x1000}, {0x20, 0x0, 0x9, 0x2}, {0xffff, 0x5, 0x5b, 0x400}, {0xfff, 0x0, 0x8, 0x3}, {0x0, 0x0, 0x4, 0xc6ce}, {0x0, 0x7, 0x2}, {0x6, 0x2, 0x9c, 0xa69}, {0x7, 0x1, 0x1, 0x400}, {0x382, 0xff, 0x9}], {0x360}}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x7fff, {0x5}}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}, {0x3, 0x2, 0xd, 'ip_vti0\x00', 'veth0_to_hsr\x00', 'ipvlan0\x00', 'syz_tun\x00', @random="9775d8c84d72", [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff], 0xfe, 0x17e, 0x1b6, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'Q.931\x00'}}}, @owner={{'owner\x00', 0x0, 0x18}, {{r4, r6, 0xee01, 0xee00, 0x4, 0x5}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"223d60fb378270a903f75fca49a591c4038ee2e0d1720ceebcf4b6da9fbe"}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x0, 0x883e, 'wlan0\x00', 'batadv0\x00', 'wg2\x00', 'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff], 0xae, 0xae, 0xe6, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x52}, {0x4}], 0x2, 0x2}}}], [], @snat={'snat\x00', 0x10, {{@random="21c3077e2f53", 0x10}}}}, {0x5, 0x22, 0x22eb, 'batadv_slave_1\x00', 'macvlan1\x00', 'ip_vti0\x00', 'veth0_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@redirect={'redirect\x00', 0x8, {{0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x9, 0x5, 0x5, 'macvlan1\x00', 'macvlan1\x00', 'wg2\x00', 'veth1_vlan\x00', @remote, [0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x80, 0x5b849b99b347ed0], 0xa6, 0x116, 0x166, [@realm={{'realm\x00', 0x0, 0x10}, {{0x7, 0xfffffeff, 0x1}}}], [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x81, {0x2}}}}}, {0x11, 0x1, 0x15, 'vxcan1\x00', 'syzkaller1\x00', 'wlan0\x00', 'caif0\x00', @random="4be85265ebf6", [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xea5ae9b4a5d9b7ab], 0x116, 0x116, 0x14e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @mcast2, [0xff, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xffffffff], 0x0, 0x3b, 0x20, 0x8, 0x4e22, 0x4e23, 0x4e21, 0x4e21}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x8, 0x3}}}], [], @arpreply={'arpreply\x00', 0x10, {{@random="6f27e1f82171", 0xfffffffffffffffd}}}}]}]}, 0xa94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000002c00)={0x0, 'ip6_vti0\x00', {0x3}, 0x40}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:14 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) (async, rerun: 32) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async, rerun: 64) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2391.708533][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 15:03:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0)=0xffffffffffff0000, 0x8001) ftruncate(0xffffffffffffffff, 0x0) (async) r4 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r8 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000180)={r3, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r5, r6, 0x0, 0x1858) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000e355a769f0a1be1800000000000000000000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00abcdefghijklmnop']) (async) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:14 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f0000000340)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x2) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2391.793581][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2391.802079][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2391.833522][ T4321] FAULT_INJECTION: forcing a failure. [ 2391.833522][ T4321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2391.877742][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:03:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003440)=ANY=[@ANYBLOB="24000000260023000000001f37e50d5677eb8de020fc7b12d4000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0) sendmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'veth0\x00'}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="2750e5a4f77f6a8ebf40aaada66ac883c71f182889ba56c9f1987fd997ad95d52f0ed04ccfab8c424615e991b35d563be7759791d25145e7723c0ac3603fe6c2563fc15eec0114449754af69cc100e42329cd5e72837d4dbac52d035da623215", 0x60}, {&(0x7f0000000380)="93334cf1a37e4b2f98d40a26466c6cfbe7ea35bbb6f31ec18923", 0x1a}, {&(0x7f00000003c0)="6c982a5779f059665302cd2fefc77831160404d9d1af405aa5a4ca68a2de1c0655b61971f542327b7c26068f6cb47c70cb04a567c4adc0abfb94972a0868f9ade6801463ffee811fe4d6a575357216a90cc96aba1f1f0b01da18bf6df07d0e229de8825ea4de10de5eedc241391f74fe1c9eb424dd64d5b5874b0ed3a0e9b7d2f897099b58a6510fd259", 0x8a}], 0x3, &(0x7f00000004c0)=[{0x80, 0x0, 0x8, "51d0aa06092498cf71cfb7d3c1cda69304d5c649d66452e05d2ee93fb7f342d8c8d1c4442903b2763c4d445cc1785fed6ed64a91b4e930dc82e7fc0c5926f6278bf73fa41cac5d6d4f61926a7be8c43faa737d20fb4398190571d21d8df6bce758a1a721e368c410e4d7caa3ffc257"}, {0x108, 0x6, 0x9, "7ad6c3a5c00026ade84698d58b38f1447ba810076c672afa9565ea0583bb75159962e80655bfdbe1421d8d8ca6addb6e96e70b7273dbbaee6397042469cb5a3afa64716a469e95c7aff96ba07082314168ca346c92350426b63f68023bbb87227df50dd498a62d0978e8ac0baab96c05d4fbf77a670aa7ed53e59f28b408b0807e1ee32fcebfba8d17824c412ca1a0ab4591d716d0a5c175b9355ad99995188b36cfd92e8be17361658c7afca246b210084604da069b02584f603b5f01d8a0123f5edd0bd2e9f58a8b556bed798c9104d3cda103d99185e6cba2ed4b8774e1346e79baf4353f8d3043f257b8a8d86e491441"}], 0x188}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="6e8b38d540bf00f75a6e5c7651073e8d93250c66a85f3248313c34b0a7d444be0298b065e59a7a23e15090393f40", 0x2e}, {&(0x7f00000006c0)="669ac568b5d052b0b4f61b534662592c71b66196cdf447db91cff5a72f92ae0d252128dc4556c6d325bcea5ba005e8ca7d285b68e8b447456da3051bd290aaca81a80be158c2ddd896660217cb", 0x4d}, {&(0x7f0000000740)="7f7819c0262937097963bb2727b6a381eb10a891aeb596009381e31d4fdf9f63bcf781b4424aac74b04cf635dca79b", 0x2f}], 0x3, &(0x7f00000007c0)=[{0xd0, 0x107, 0x1ff, "d14f27cdb41b1744ceaebd6ae23fdb508aa45d34db48b9ab99a948fa35b223f9c7e3d26207343ef652aee6cf43a849e25590d1ab11e356e5b0eb423b889ac94462f68dc8bc0a89369c3253f9122f104ad1f2b3b43c88b7fb4e3cb630d4d63f7614d824d9f59785e21a443d965ba6ce5f3cfda7b45cc252e9dbb64bcc78fd7febb5546d61de5d82bb4125cd41ecd83a9f04014e541e26a7b2cb117e91914dc286adf7138e9a99ce37d19d97cb7cea824eee2f6352b493592d2ff05675106c45cd"}, {0x50, 0x115, 0x6, "c19dbcc1f2ac64c7bd0b1ec79b94c01f14ecd797e216193a860f7973ebe9b0fb71fec782b3178f98cf5d6704e583b376a91cde2c3a025ddbf67bde06deca35"}, {0x110, 0x88, 0x0, "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"}, {0x1010, 0xff, 0x7f, "84a49147e5d5b83215f39d97c025932d615ffaa28a4b8f80ec179799903abd38719518d40b14ce41b1c7d0f3805eec307d327b90054d152e3502ec5fb357d4ad437e632adf7ad0bc26a582478b48fc4d196ddbfebc0ef766095b6fc1c27383a64f7425b893add4cc4a4692787c389db729e9b9cf8145fd8afcd693b654739991f9dacbfceda6bc70683094ec68fd237c56e98bb9a95bc14476ac4dd875dbc36a42ca2210a0283eadfa11bbdce75ba6a42ced41b16b3df73b3d8a8a37e9335a4cf88c343c657187ee89d7729dd8ceeb5122b42ca2284d272a9c45499e86f4eee37f57578dd88836ccf648baf69b4f54a03547dcb676cb455e75bd1e7ee81d1f952a1c7d7ee2f58266afc8b3a424fb6469ce46973dabad92c451dc8f3258df3a7f05f84110bcc5d19efa600380498cabbb00f3483064a4e32ba9b6ad54a6f708080fa96d7dede043910d3ce1b7955fd8627368b9096399760434942d9e6155ee33200654a4a22c527d4fed55a9eb7901fb6f44e1d6c9dddde85bf31a7cb460be9a571253786b0c30a8cfa4d275d2d4380a5863e8f6a5dc1745db6bec2e2b4b34517c041bf453db89d4fb8cd5171421f5856c0096eb120a6c4f007d3a4593cf40e7131919f6dc4a28ea770e2f118f3ea49a4eb017e36c0d1eacf83fa33d6c5c12a6cb928c95b1b7874bc0796ce8aac162e3c619e3a7a7ab8db003f015d15fa9219b1386761c06fcac0e96c3cb9c8c699eaf4a7bcb9a986fa0fc56915f5dc23431405bd16ae316812ab1663d9771a2aacd44130c23d234fa21808ab82bb63d1e440815687be51270650ef0fa6fdb1dc611b740c067524acc6446ee44059c5a61715d0705af9fde1ccc8cf7d12bedc4f48350921aa9def031ac3f95e786e5e3a9b172918719edeb971f8eb02be69bdba1903bcdd2a258c5813a66abbc0485cda6827b89bc8ec87176993dea5eb3787727994ebe5802d8034b4292306b4d978b98c844f992b82a98e7d6b79593f6b67d30876ad1cce89a3cdad425c00ac5848529d09d741aac0489287e86dd8d2c0c3b8fd86990564b36f073fcfef80d52e1c46e2ba4ade92983d0e55988c2bfcdfc2c064d4e895437e25afe38e99920fbb4cfe7b6963b7eb8310c205d29d4c82e382cae8554f5877492313eabc7f6b0db1e66908e4d9c6a99fb5b6bc717c945aec70692bf7950f11ef1b158cfdbcb0f7858f93d5b3bd3be3f4947cd32140ea2e92a98bfcb40a39e425b4c71e01d69860484ccff748848d42b65a3c1cfa6a09968d0718f65b166dab77d91cfc2c8445d808c92e3a9a0e53a509039091348a28c7399e4a609f6e443c5f261e77acdd118fd14ce655bba5412fda50456c9927f861439108c933789da69820775cf31aab00faa173bcade7d244554a66d82a3c993809759bd3328015d1052e1a16e59f1c9bb585870e0556dab4b9f127a48f78bcd256603b9f398a544d43c8d3d355905fc0460cc6ded6167a24b132c82e9aff8c8328af3738105475362243e2acd556977069b943e5450e6811c254ab98a6c40629885dfc8735566801241a7e91cca08de160e70272dd2ffc60e25ee5d66659e97ac05c197eca6b79f59d8b8e8c988a56effac5eca0026120e8259dc7722475a01f8a62f994487956ca75f60c4425a5fcb4fa6efb5987b1ae1bfcaedf7ddb3c2b4399d52a39aea604c8d9b5d9e4f018ca729cefa560310fc93e2a30f2d74729efd05c20851b5edd4fdf1edd6b1955e79066bf8e2c2fe25bfa2c8541926047f5d914bea4ca77797b0207d0ad5e1d32e5fcd194d3edb39bce4902581c97adf59b8a442327ff1be9fad70844eeb540c7962d864b0fecbfeed2a5e6e6d2364f5cbedfbb3829153d7be2e4f3c88ed00a7a9babd4cb7b3c310f61ff458eb4dbcb0aae39684412a6da7e4a732b70d9947b8827993445df40b6d213e9003e3260071de8ad6db4314be75b72736a968232647ff869a4c7bec782e28246fd066f816129d50d4a62b5ae41ff5ad86a1b498883e19f7351f5e37bde6e0f22e6702ca27dc0ca00e925538ae2fe86c38d37022bcd2a8c33a0c32daaedf6da9a096d4688fb25ea475d1c18dc596a7af3fee2f15ef4addf9a282d2c17cdafec2006394afa65835f7e2d6dc87487464ff761f5923dcee49dddd1dddcdf5475cd201b0b713e82976bad366fef347d21dffaa8287694347b171b5b81098dbac13b2ab1588a4b4e68cff7711753c920287c894e076e3f396a07bfca6cabd5b3154e373a3e3f670a4713d3a55a575e7ec12543046398dbc16a2749eeedcb20bc21590f2d2c988e13e434f9efa4716e7a3136613cd91205c5a77da8f36a7b0021fdd59724ad5eb0dd63fc7b92440ee6e7d757b86940f90c66c7c15566f3b6aae340676caaceb6e22f47f7c90bbff27aa134d6105700fece7f2e5eab61c037d65812fae7a5dc2cd892271406f3fcec9c654970c03784fbc311858cca421308c8deca8b53298cba63737a4def149b16c05046f6b695fc359f101b7014788c5921fc38e46bf410d500190b1fd177b708167e0a8a95f9c0d5562eab51ee4a16154f758ceb1e24e92b5deb6e6af7778c1614ec88011a398ec393a1260926a6ff4373bb8c12990e8fa9ce873f331c7e6f27235f3e274607d79c4ca9f043f56889381aea3d1a279b20fb46c15cf47b6d06ece71aa70851440bd1e945aa11bb44ff81215d4ce71d481f0f6152747728e11c8fa88c04e2d96fb38d693b690fd1371d804ff649d69d372e2cc41704f1299989aa81293dc392ed8453226a46e12c0edaf0b94cc52de65e8970f5ec57cbbc6f930c1f31ca86558e381e81588a90b8ceb2c46f8ee7907dd697165cecf692d73cf7b14ab829a2f56e63054e5512edafe50806f53e6f79ed26c2aea35fda1c6939dc074c10730c6192f64ca23a954eb0a49561e60d58a493f33059d08c18f2bf0a52e27eb9e070da0116381ffbbaf89314a393e3b4d8a8174384792926f0a426847f73caca0b83848e90cd78b3150d14ea4b4e8ba92c5e325179162ee4059d7a6547bdb53cca37b25001c53fb1e878500c669497a845d1b9b9ce571052159182d298c8b159c9d62524a64e38cb5a3441958cf232cdda4c1d179f1a97b04f4ca52b9e6bff011b9cdb00d009ee3e4e4ed01754aa56b2723ce0bf76027716af40d0c080496afa73265abf609f36ad5a00bf26daa33e1d0761bb02dce8ebf54506230ccd99ac36d6aff9bedfa37d14ae4c09cae3a2a49b2f964dc4254534964cdbe95fe772b82a047fc0ee15812dc1ae857e2961a25f5f0b6aa24dcfdedec94eac42bd8131d73f8e28dc28ff037b5618d334c2032bc14945439a66bb89bb8a49aa0d2e2b63f42abb8f4e137913993497152ca2eda17ff3ae7777a553a0d673c2f684dbe261cc9623b2480336df44da35e3d7807a97333227d86cab7b5fa09e2cdfffdc128b712fb9500b487d61f8465b3c4882160c743d7c52d4b4ce74d5780e66a2b0cca04160f52053f4a3ebb487f434a53e63a9563c2b4327fc0c16cb3b22b9bbe6f44bb50dcad380fc916f5811286a85c051b196b7d1907e69ced1e1bb1482e1cba6832f42ffd0c16e90461454f5164d408d0d8ff61d73e727db93ca8205d7e5836574cbd25eb273d21757bf7b7778eac44090cf7d47face5a5f1b6d759d6ae5113580e429d560f8da5c4127596a076af581e0b0cecffc0f733f4bf061f8e0102c835dd3eaec3ab20d7c09dece77e99f15251092539498a600c21c736351004ef8ba29c1f2f0101a7de205db7bc2839b1a4dd87f253ac7b5886d175b5dcce4fe3a72f94113b301d972d39b5b6b86bfe4937ff64049d7c0938fb19688f8fa81c0c7f5d0d68fc100e175824727ea752350fdff48496dcf3781cd1ad2cfca256ea9fcfc18e61073eda339c13bd8b3b382c6127b8be40adf848d4f43b1b16db2bb3d1e89131b509e06b524b807ad4bef56186ebdd951098f1cf8608927f65391aa31dbac7c1eab82e884b721b9d208c0e5ef4a3dbc374e1f4f71f9d49e6e5ebc48397b0dbb8b42a3a2aa3ee995b8b7764c81cfc4639deb8b8073d5b338467c6f9d04389f2e27977ec9aadf16bc60aebdf2ab03df37e9038139fee752a0902baa51497687ed4aa6d36576cb81efee21f8df39b0ab0988dd6da25dda4cb0cf2a2805412c5c1507fd4e16e0a49bd87d7430f1b6f156343286675d78950c8f25a51593ee10076420fbc915d40ca34adb200e1734be6965d4750738a6452668bafae10a0f435fcbee7d20173ab8ac5facf5bdfcff24842f5b1de8d0891e9961d9f583a35ed8adfcbbad5aeaccfab13bf81caa0b3d532b0d5097b362cb83998d7fabb29206d51f0f4a4629d3019c4c4dbffa9836d8a584f2a849febae480ddfcf4f4c28cdcd385f2c9f211903c03592caf96b942089b2ca4736cd3120c7900cb40cd3a58182842e3a68dcc5cff141bd78d3b82acdd81461f24351b55e18672d13e7676a37610789b1a47b6050c163f022c179495258a17575a8291a1bfd5d6ef557b8cdde06f318f336e4e568caa2b741a3921830ac31d1ce3d7e95d8a1ff09c4a6654412e4a4f3a1f1ec1196ae49edb5d9d9ea4a90320a9c7c5847f16a62916be2c204d1feee83b68d48511a6884af1e48d8e8c244d1bcee11934d59f97d007bd79eaac37621dd5331e2fb2535cb9f4cd60a56846cedeee46836dfe7a8e814a24f29e6ad33323f18d1198a4e85dcac177f4df1380062d686d197daba02c7f0c17d5593233c4be6b032c2791e4a5ccb6a0b887889f586f79fda9769eef7fb51a9a6241f65091ae37f501739846c470be17202352c6d601a3ed359ab4bd884c122b2ee5c4888a0d54cab72d901d034044ea0f6c65edb3dcafd92987280ee0a49d60d86fde002335929a0e254bd0996b9fa6cbc80e9db4d2cf7acefeb22c4fe261e079c625cb99f144b45291842ca0dc613af8590f44fd72383da058cff0bd853f0707fed82b30f06b40ab2b0b3a98861738a6fb6a0dbaf86108c676d2ebf3491a2c0c82cfa8706223cc3f20258a3b704d7bee7ba1ad9d96405baa6b98475febef99d30483885e330fea0f99420b1dd96c7a3309d3293ca90876944a4eea0eb685bc58fede56efc20be58d20b8644c8c2c01c5d24866b7e41978fbfca0b08e17a6ac245bd6614d451b175884438990bbbd27347d8f498b9f0edfb8643f2bd041e069d9c23a37e5d54bea1708ac50f9d5fc0cc365ce6a0d8cb5aeb9621210eaf04539bc8c394973b696a1eac9c33b681d54342a2a78693cc7a90f7d2031b4e164bc6ce123d026e098895d472bedd638177fad732693b701b91589cfa8831a9f820ad7b1abdf1fcd988c7ff3a554d62fcfa1469bad145232885afde24cdae11187db82b584ebc93f4a3bcf471cf38d176753434d9f8d82b59d460ba58cba457ac7bab3c03f99ebfcd7b56f2cb3c67ce63b498d3887ad96a8f7fac57e8eafe824249798aa8029b2016801dcfba5f0d73500ab134ad5132b72beb3252a62c05034443995fc6219aa748d272798ae400d6a72d507519ca2a5403b8b9e8546fec21aeae0afc5af40b27d7d2c10785d5c9cf691b9d538ed4230654e426567b2a8c8d005edd16605999328689fd1c65b56b7dd9190fdc1352b81a8edb4302889a942e072a7c686107b0a1774ccaa731566f625af7bdc8043eaa6288485bef7fbd976125a329e9337af2db46673dca75fb5865ad46c0a34278992ec7d71b6071ba4458acd3089a669ad4797d52259233e2d745cb12ea74ab42290ac0eb4fabe093"}, {0x88, 0x116, 0x3, "40a4198ad39b95b11dc02b31ccf84975e251555b7ecb484021532417c00a2ee97143895f079c9487e3b5d3e94048dd4ba6270c843de91e4104f2ca7960a8d938da67ae2554fecfbc081b028019e0fa740c4e8c18330f5aff94a1cb81be514f0d840159b37d7420cab875513b998c88d6b75e3b06ab7475b5"}, {0x28, 0x0, 0x5, "3df861016f554fc17a3a3ae6c418731e18bce7"}], 0x12f0}}, {{&(0x7f0000001ac0)=@can, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001b40)="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", 0x1000}], 0x1}}, {{&(0x7f0000002b80)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c00)="1bddef16b3d61bcdc2908c992923c7fb1fcf91557d813d136453c2d25770e5e5f7c35bb21fe681a12e5e5031b63f04c48ad1810f76b9786c7cacbb074a5db47f5ecda178dfd83a9e5f7fef753a37a8c287f8caa259ac09a5c3e41cdc37e62d23c6c126ca3faf4e6a71f17e3411bacc33e379a1ea3306b129b0f27bee1db46764913f9ce06c3963a7e9ac9a1db1ffc6f298a6f9285a1b80fa6da74127bad4472354ebb4b6a19868591035adbbf6b610befac7cc65ce447e4a3a3dea58d6aecb6d6dc71bc7911a7a39134aad061072e8fe7a13f4f83ec43b798e23f517f1d2ed3add58ddca382f5c5b718f593492c1d9", 0xef}, {&(0x7f0000002d00)="5a08ec02209741fda6a4b9e02f0337575db7ca82c3e06c39da62116c59adb8009e545c03e4033f13925d02d4e5e436a5dad49784fd8e0a92bf24b1f1b49addca74e2ace9afcf4a61de5fb93aa979e9020a68b54ff1f18bc3ac2755e5575b7c854097ff738429de1e3eec25bfb84be988fa688956cf46cfbb2705d3a1c7", 0x7d}, {&(0x7f0000002d80)="1da2eb1637e9c4d347bf44b9ac666ed6cb6b2045ffd94b49c663de0ad6da978f2fee1304b65794f35c914fba7f398dcf5d1b26abb20f798bffe1dbec5f1f484b48f63566e8057040452f7a9fa7ddc605c4bb4fd44348194ce3379578266c5883a1463e9d8a", 0x65}], 0x3, &(0x7f0000002e40)=[{0xc0, 0x0, 0xbc1c, "930af4b0cc1acd9ad2f3e4ea5407a1a4b6f5c350bfc94f9cde3d923730e0ad36cf632c7581b6ea6b0688df8cee55e6e0c29f6a05ab63eee9ad4d479bdaeb9c9dfb1a108bca1b6a3a329e580c2f302e5441989ba0cd3ff9f6ae8005a1f6c863d7afd8d8b31a065096d01a8f3195970e56ffe99bcb58c8d473386c9cf46d1a4146ba6ab76810edbbd71b7ade78eac6693399928d7f75b987bea34f183d886db765471405fdff487d3738"}, {0x60, 0x111, 0x6, "11c1938a35a838070fc74da215d7836996c8f77d07315871b7c82f5176f4956737c7090f26e16e1587a584d159f6ee7457ea46d28b5768eff8c201fdf33a953b00ecfcdcb7abf5630e7fa24474b9e835"}, {0xc0, 0x3360daa1a08922ca, 0x0, "8129e02951d431af84133d218687a98583bc61b1da63b1b906cf874a64aba2607baf2ae873babc03234c245832214f70a6698ffa2b70a67a78936169fca245865f16642ac0f132025db85647931068913b8b8c9fe39acd2d61a6b517730888f1a31660a4d4567c9193490a87ee2ed15ab359787a90da4bac38b2768d74d6c0f9f8521e805a4dc8b93cf5d2f17cf54f75fce75574c658b63f712a5364891732c527383d02c62573bf37a9c167"}, {0x48, 0x6, 0x5, "2da6f719ee06bae8d006834b77813415708f568043668f2cc0fa0e977521311c9b3bd88ee9038cff11019edc6d952d3daeb910"}, {0xf0, 0x10f, 0x4, "483c01f91a0bc2d77347dbe3761336f9d867167984de21dacd5a7b709958333859b450b60d9be433866ccf7ddeec6cc1d1f11f932b59aead4e4f2966f234bef7443556f1517b4ab97cdbd4688e0e3176dc129e1181c76a0abdb34e07ee6c1bbff835b5a2fe1c2b53283a77fbbc98dd304395a6ea8df6b1439354053fb9d2514c300801cbfe477eb51010cebac0af9a393a1afae0f710279b24dabc729ae494ef1a9b6ad893d5a6300490d5017ea62b3c960d61f9847e6b2001e48eb8288e8a0fecdb9ed98ec5873f9281ca74ee329f6d8a27dafe866ecc8c2672"}, {0x90, 0x29, 0x7, "817c12575ee06da5aac178cb0fb3bf9b11f45f4d8c52a53c9a6e5641b4aa333bae028dcfe5324764f8a9ef3d614e8d12baad96f77fac4eebaac3b54cd15cd0ad417c5c280c25cb3238c8a9aa2def1c877e17aa0b14f482572262bdc5b8c066767e722b3904b63f2129f331b132d97057de4e580265713fe3e83153a530c4"}, {0x110, 0x1, 0x7, "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"}, {0x40, 0x10a, 0x7, "0c463ecca1d4fed44fa381bf53bc50a6fa618374000b45e0b9a92dc2e8eb3acb80293a71b9a00acb4bd0a5"}], 0x4f8}}], 0x4, 0x8a0) syz_io_uring_setup(0x2a77, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1858) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) [ 2391.945774][ T4321] CPU: 1 PID: 4321 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2391.955836][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2391.961995][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2391.965898][ T4321] Call Trace: [ 2391.965908][ T4321] [ 2391.965917][ T4321] dump_stack_lvl+0xcd/0x134 [ 2391.985121][ T4321] should_fail.cold+0x5/0xa [ 2391.989679][ T4321] _copy_from_user+0x2a/0x170 [ 2391.994399][ T4321] move_addr_to_kernel.part.0+0x31/0x110 [ 2392.000077][ T4321] move_addr_to_kernel+0x4f/0x70 [ 2392.005059][ T4321] io_connect+0x3c9/0x4b0 [ 2392.009447][ T4321] ? io_connect_prep+0x220/0x220 [ 2392.015279][ T4321] ? __fget_files+0x26a/0x440 [ 2392.019974][ T4321] ? io_connect_prep+0x220/0x220 [ 2392.024942][ T4321] io_issue_sqe+0x69d/0xd00 [ 2392.029466][ T4321] io_submit_sqes+0x936/0x1d10 [ 2392.034254][ T4321] __do_sys_io_uring_enter+0xadb/0x2430 [ 2392.039817][ T4321] ? lock_acquire+0x480/0x570 [ 2392.044510][ T4321] ? lock_release+0x560/0x780 [ 2392.049192][ T4321] ? rcu_read_lock_sched_held+0xd/0x70 [ 2392.054704][ T4321] ? __ct_user_exit+0xff/0x150 [ 2392.059491][ T4321] ? io_submit_sqes+0x1d10/0x1d10 [ 2392.064530][ T4321] ? lock_downgrade+0x6e0/0x6e0 [ 2392.069395][ T4321] ? vtime_user_exit+0x218/0x6c0 [ 2392.074359][ T4321] ? trace_hardirqs_on+0x2d/0x120 [ 2392.079426][ T4321] do_syscall_64+0x35/0xb0 [ 2392.083871][ T4321] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2392.089778][ T4321] RIP: 0033:0x7f9bb008a5a9 [ 2392.094202][ T4321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2392.113818][ T4321] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2392.122246][ T4321] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2392.130225][ T4321] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2392.138202][ T4321] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2392.146177][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2392.154153][ T4321] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2392.162137][ T4321] [ 2392.165192][ T4280] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2392.173484][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.230249][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.314485][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.328078][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.359628][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:03:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000004180)={&(0x7f0000002c40)=@tipc, 0x80, &(0x7f0000004000)=[{&(0x7f0000002cc0)=""/199, 0xc7}, {&(0x7f0000002dc0)=""/122, 0x7a}, {&(0x7f0000002e40)=""/253, 0xfd}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/168, 0xa8}], 0x5, &(0x7f0000004080)=""/220, 0xdc}, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000002b80)=@nat={'nat\x00', 0x19, 0x6, 0xa1c, [0x20002140, 0x0, 0x0, 0x20002694, 0x20002878], 0x0, &(0x7f0000000040), &(0x7f0000002140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x2c, 0x890b, 'netdevsim0\x00', 'vlan0\x00', 'bridge_slave_1\x00', 'ip6_vti0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff], 0x2e6, 0x336, 0x36e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x1}, {0x7}], 0x1}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x2d, [{0x401, 0x3, 0x2, 0xffffffff}, {0x67, 0x2, 0x7, 0xfffff000}, {0x20e1, 0x40, 0x7, 0x9}, {0xad19, 0x6, 0x9, 0x8001}, {0x1ff, 0x0, 0x80, 0x4}, {0x1, 0x0, 0x5, 0x29a4}, {0x275, 0x8f, 0x81, 0x7ff}, {0xff, 0x6}, {0x401, 0x2, 0x0, 0x8}, {0x6, 0x20, 0xe0, 0x5f}, {0x0, 0x0, 0x0, 0x6}, {0x2, 0x8, 0x40, 0x5}, {0x7f, 0x8, 0x5, 0x5}, {0x3, 0x3, 0xff, 0x5}, {0x4, 0x1, 0xff, 0x6}, {0xfff, 0x2, 0x6, 0x1}, {0x4, 0x1f, 0x3, 0x1}, {0x9, 0x1f, 0x6, 0x7}, {0xf8, 0x5, 0x7f, 0x3}, {0x0, 0x9, 0x6, 0x36a}, {0xff, 0x80, 0x8, 0xf4}, {0x7, 0x1, 0x7, 0xe7d7}, {0xba41, 0xb6, 0x86, 0xaacf}, {0x9, 0x0, 0x3, 0x5}, {0x3, 0xa7, 0x6, 0x3}, {0x6268, 0x1, 0x1, 0x3}, {0x4, 0x1, 0x20, 0x8}, {0x200, 0xfd, 0x0, 0x40}, {0x2, 0x40, 0x0, 0x3}, {0xe8, 0x1f, 0x4, 0xae5c}, {0x5, 0x0, 0x69, 0xced}, {0x5, 0x5, 0x7, 0x8}, {0x6, 0x7f, 0x35, 0x2}, {0xfffc, 0x9d, 0x2, 0x1}, {0x8001, 0x20, 0x5, 0x3}, {0x8, 0x4, 0x1, 0x9}, {0x3ff, 0x2, 0x4, 0xfffffff9}, {0x8, 0x8, 0x0, 0xc40}, {0xff, 0x6, 0x1f, 0x6}, {0x5, 0x5, 0x80, 0x6b56}, {0x3, 0x2, 0x8a, 0x3}, {0x5, 0x4, 0x7, 0x44e}, {0x100, 0x0, 0x7, 0xfffffff9}, {0x200, 0x5, 0x0, 0x67}, {0x9, 0x2, 0x7, 0x7fff}, {0xd4f, 0x4, 0x6, 0x8}, {0xf3, 0x8, 0x1f, 0x7}, {0x8000, 0x0, 0x7f, 0x4}, {0x4f8d, 0x8, 0x4, 0x7}, {0x4587, 0x0, 0xe1, 0x3}, {0x7fff, 0x40, 0xd8, 0xab59}, {0x0, 0xb4, 0x81, 0x3e}, {0x0, 0x7, 0x40, 0xc05}, {0x4, 0x6, 0xde, 0xfffffff9}, {0x5, 0xfa, 0x7, 0x4}, {0x7fff, 0x81, 0x1, 0x1000}, {0x20, 0x0, 0x9, 0x2}, {0xffff, 0x5, 0x5b, 0x400}, {0xfff, 0x0, 0x8, 0x3}, {0x0, 0x0, 0x4, 0xc6ce}, {0x0, 0x7, 0x2}, {0x6, 0x2, 0x9c, 0xa69}, {0x7, 0x1, 0x1, 0x400}, {0x382, 0xff, 0x9}], {0x360}}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x7fff, {0x5}}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}, {0x3, 0x2, 0xd, 'ip_vti0\x00', 'veth0_to_hsr\x00', 'ipvlan0\x00', 'syz_tun\x00', @random="9775d8c84d72", [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff], 0xfe, 0x17e, 0x1b6, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'Q.931\x00'}}}, @owner={{'owner\x00', 0x0, 0x18}, {{r4, r6, 0xee01, 0xee00, 0x4, 0x5}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"223d60fb378270a903f75fca49a591c4038ee2e0d1720ceebcf4b6da9fbe"}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x0, 0x883e, 'wlan0\x00', 'batadv0\x00', 'wg2\x00', 'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff], 0xae, 0xae, 0xe6, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x52}, {0x4}], 0x2, 0x2}}}], [], @snat={'snat\x00', 0x10, {{@random="21c3077e2f53", 0x10}}}}, {0x5, 0x22, 0x22eb, 'batadv_slave_1\x00', 'macvlan1\x00', 'ip_vti0\x00', 'veth0_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@redirect={'redirect\x00', 0x8, {{0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x9, 0x5, 0x5, 'macvlan1\x00', 'macvlan1\x00', 'wg2\x00', 'veth1_vlan\x00', @remote, [0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x80, 0x5b849b99b347ed0], 0xa6, 0x116, 0x166, [@realm={{'realm\x00', 0x0, 0x10}, {{0x7, 0xfffffeff, 0x1}}}], [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x81, {0x2}}}}}, {0x11, 0x1, 0x15, 'vxcan1\x00', 'syzkaller1\x00', 'wlan0\x00', 'caif0\x00', @random="4be85265ebf6", [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xea5ae9b4a5d9b7ab], 0x116, 0x116, 0x14e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @mcast2, [0xff, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xffffffff], 0x0, 0x3b, 0x20, 0x8, 0x4e22, 0x4e23, 0x4e21, 0x4e21}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x8, 0x3}}}], [], @arpreply={'arpreply\x00', 0x10, {{@random="6f27e1f82171", 0xfffffffffffffffd}}}}]}]}, 0xa94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000002c00)={0x0, 'ip6_vti0\x00', {0x3}, 0x40}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:15 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 56) 15:03:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x1000182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2392.654192][ T4280] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 2392.670089][ T4280] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 2392.809061][ T4357] FAULT_INJECTION: forcing a failure. [ 2392.809061][ T4357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2392.873574][ T4280] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2392.886604][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.908133][ T4280] usb 2-1: Product: ࠊ [ 2392.927689][ T4280] usb 2-1: Manufacturer: 潀忠죅꯻域導҃䞠 [ 2392.943316][ T4280] usb 2-1: SerialNumber: 矕鸷懍慺⹜y䪞ᘆ誜鲟斳鱑郂㭳⣭ᣫ縥骮Ⓛ僱ᣅ韻Ⓞ녲ﭘ鶜㠍㎤럸Ⱋ쓫ä凉钸Iĵ镌릢딠坫콸ņ垼嵹㰚ຎ඼Რ䚧ң潯덶픃甜ﮨ冦쥺뙺좨㞞彃폠嬟Ἶ숕怲ⴙ잚䁴凱胟᫵擌ஞݮ蠺琪瑹㶑ﾞ밗唦累೫ች캭ᰦ঩猌 [ 2393.043359][ T4357] CPU: 0 PID: 4357 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2393.053392][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2393.063452][ T4357] Call Trace: [ 2393.066744][ T4357] [ 2393.069690][ T4357] dump_stack_lvl+0xcd/0x134 [ 2393.074278][ T4357] should_fail.cold+0x5/0xa [ 2393.078783][ T4357] _copy_from_user+0x2a/0x170 [ 2393.083453][ T4357] move_addr_to_kernel.part.0+0x31/0x110 [ 2393.089086][ T4357] move_addr_to_kernel+0x4f/0x70 [ 2393.094020][ T4357] io_connect+0x3c9/0x4b0 [ 2393.098346][ T4357] ? io_connect_prep+0x220/0x220 [ 2393.103285][ T4357] ? __fget_files+0x26a/0x440 [ 2393.107958][ T4357] ? io_connect_prep+0x220/0x220 [ 2393.112892][ T4357] io_issue_sqe+0x69d/0xd00 [ 2393.117408][ T4357] io_submit_sqes+0x936/0x1d10 [ 2393.122180][ T4357] __do_sys_io_uring_enter+0xadb/0x2430 [ 2393.127719][ T4357] ? lock_acquire+0x480/0x570 [ 2393.132386][ T4357] ? lock_release+0x560/0x780 [ 2393.137056][ T4357] ? rcu_read_lock_sched_held+0xd/0x70 [ 2393.142509][ T4357] ? __ct_user_exit+0xff/0x150 [ 2393.147274][ T4357] ? io_submit_sqes+0x1d10/0x1d10 [ 2393.152292][ T4357] ? lock_downgrade+0x6e0/0x6e0 [ 2393.157133][ T4357] ? vtime_user_exit+0x218/0x6c0 [ 2393.162066][ T4357] ? trace_hardirqs_on+0x2d/0x120 [ 2393.167086][ T4357] do_syscall_64+0x35/0xb0 [ 2393.171513][ T4357] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2393.177416][ T4357] RIP: 0033:0x7f9bb008a5a9 [ 2393.181827][ T4357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2393.201429][ T4357] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2393.209838][ T4357] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2393.217799][ T4357] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2393.225826][ T4357] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2393.233784][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.241746][ T4357] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2393.249711][ T4357] [ 2393.335282][ T4350] net_ratelimit: 377 callbacks suppressed [ 2393.335296][ T4350] dccp_time_wait: time wait bucket table overflow [ 2393.380977][ T4350] dccp_time_wait: time wait bucket table overflow [ 2393.393557][ T4280] cdc_ncm 2-1:1.0: bind() failure [ 2393.406945][ T4362] dccp_time_wait: time wait bucket table overflow [ 2393.415199][ T4280] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2393.416112][ T4362] dccp_time_wait: time wait bucket table overflow [ 2393.449532][ T4280] cdc_ncm 2-1:1.1: bind() failure [ 2393.462986][ T4362] dccp_time_wait: time wait bucket table overflow [ 2393.485889][ T4362] dccp_time_wait: time wait bucket table overflow [ 2393.503055][ T4280] usb 2-1: USB disconnect, device number 123 [ 2393.519565][ T4350] dccp_time_wait: time wait bucket table overflow [ 2393.546245][ T4350] dccp_time_wait: time wait bucket table overflow [ 2393.571197][ T4362] dccp_time_wait: time wait bucket table overflow [ 2393.584755][ T4362] dccp_time_wait: time wait bucket table overflow 15:03:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x1, 0x1a, {0x1a, 0x11, "2b508529ca2cd7a44f46a242c4554d4fa0cb52c5fd11f56d"}}, &(0x7f0000000040)={0x0, 0x3, 0x25, @string={0x25, 0x3, "10c04f783b0da45676f0a0965c517d7662917a06f708430f248c07859e891ee43de6d4"}}, &(0x7f00000000c0)={0x0, 0xf, 0x18c, {0x5, 0xf, 0x18c, 0x3, [@generic={0xf3, 0x10, 0x4, "90ed5b1fdcca7f832f8441a0f3679c1e75f696e2b6727526b3d313502eeaee530e19978c028a6d50df6e291ab8dfe1a9a8686b60732125b7edbfbefb7a2b87ed01a18004860282a2353f89971f1975d09424fbc33de6bc3abfbd01c38fa83f613d3ca45426887521ae30c6a2f8cd2a8c0a14d8bb6c7a16215a3808a9c331aa1ca788fcd590fbf14518b72a90e3085829b7815d149790c0692ae9fc4651d15f406cb223bfd8f25c3822339f8cf30f5c8743cd35f08841b4441ae0f66da23965987a6373fc0732fde85de5116b49dd9191204a89685a2f2f103b4dbb74c5f9427af5f9ba9861092bf204875bfe3e328934"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x0, 0x482}, @generic={0x8a, 0x10, 0x4, "95a7f0b4aaf7a8f8d2dd9267b4da9c4be6dca17ef23861a23a6dd8f3fbc7b1f50a6f59b45a05b5827fe267cd26f6972cbc0e07e667482ff5c43ebd55665b095dd02606a8eaad70953f359866fb7f095ebf8fc0472c72b5b55fb9c89fd4a8fe0b8d6b9e54ad76393184c7ed0f8ac513fc3793d2531cb261afd88a694a0b2c15241ef86d683524d0"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x3, 0x6, "986447f3", "9fa830d0"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x7, 0x1, 0x81, 0x63ab, 0x35d0}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0xe, 0x3b, "7134dec130b52c30aac829b1c67c762168386606b4e6d7c221ddfa92b21fc4b4cde06ef06c30aa99255f4367e6328dfdbf635342e448bb066ff5b9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x1c}, &(0x7f0000000540)={0x40, 0xb, 0x2, "8b0d"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1f}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "2903"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x80}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xff}}) 15:03:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000004180)={&(0x7f0000002c40)=@tipc, 0x80, &(0x7f0000004000)=[{&(0x7f0000002cc0)=""/199, 0xc7}, {&(0x7f0000002dc0)=""/122, 0x7a}, {&(0x7f0000002e40)=""/253, 0xfd}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/168, 0xa8}], 0x5, &(0x7f0000004080)=""/220, 0xdc}, 0x2) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000002b80)=@nat={'nat\x00', 0x19, 0x6, 0xa1c, [0x20002140, 0x0, 0x0, 0x20002694, 0x20002878], 0x0, &(0x7f0000000040), &(0x7f0000002140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x2c, 0x890b, 'netdevsim0\x00', 'vlan0\x00', 'bridge_slave_1\x00', 'ip6_vti0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff], 0x2e6, 0x336, 0x36e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x1}, {0x7}], 0x1}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x2d, [{0x401, 0x3, 0x2, 0xffffffff}, {0x67, 0x2, 0x7, 0xfffff000}, {0x20e1, 0x40, 0x7, 0x9}, {0xad19, 0x6, 0x9, 0x8001}, {0x1ff, 0x0, 0x80, 0x4}, {0x1, 0x0, 0x5, 0x29a4}, {0x275, 0x8f, 0x81, 0x7ff}, {0xff, 0x6}, {0x401, 0x2, 0x0, 0x8}, {0x6, 0x20, 0xe0, 0x5f}, {0x0, 0x0, 0x0, 0x6}, {0x2, 0x8, 0x40, 0x5}, {0x7f, 0x8, 0x5, 0x5}, {0x3, 0x3, 0xff, 0x5}, {0x4, 0x1, 0xff, 0x6}, {0xfff, 0x2, 0x6, 0x1}, {0x4, 0x1f, 0x3, 0x1}, {0x9, 0x1f, 0x6, 0x7}, {0xf8, 0x5, 0x7f, 0x3}, {0x0, 0x9, 0x6, 0x36a}, {0xff, 0x80, 0x8, 0xf4}, {0x7, 0x1, 0x7, 0xe7d7}, {0xba41, 0xb6, 0x86, 0xaacf}, {0x9, 0x0, 0x3, 0x5}, {0x3, 0xa7, 0x6, 0x3}, {0x6268, 0x1, 0x1, 0x3}, {0x4, 0x1, 0x20, 0x8}, {0x200, 0xfd, 0x0, 0x40}, {0x2, 0x40, 0x0, 0x3}, {0xe8, 0x1f, 0x4, 0xae5c}, {0x5, 0x0, 0x69, 0xced}, {0x5, 0x5, 0x7, 0x8}, {0x6, 0x7f, 0x35, 0x2}, {0xfffc, 0x9d, 0x2, 0x1}, {0x8001, 0x20, 0x5, 0x3}, {0x8, 0x4, 0x1, 0x9}, {0x3ff, 0x2, 0x4, 0xfffffff9}, {0x8, 0x8, 0x0, 0xc40}, {0xff, 0x6, 0x1f, 0x6}, {0x5, 0x5, 0x80, 0x6b56}, {0x3, 0x2, 0x8a, 0x3}, {0x5, 0x4, 0x7, 0x44e}, {0x100, 0x0, 0x7, 0xfffffff9}, {0x200, 0x5, 0x0, 0x67}, {0x9, 0x2, 0x7, 0x7fff}, {0xd4f, 0x4, 0x6, 0x8}, {0xf3, 0x8, 0x1f, 0x7}, {0x8000, 0x0, 0x7f, 0x4}, {0x4f8d, 0x8, 0x4, 0x7}, {0x4587, 0x0, 0xe1, 0x3}, {0x7fff, 0x40, 0xd8, 0xab59}, {0x0, 0xb4, 0x81, 0x3e}, {0x0, 0x7, 0x40, 0xc05}, {0x4, 0x6, 0xde, 0xfffffff9}, {0x5, 0xfa, 0x7, 0x4}, {0x7fff, 0x81, 0x1, 0x1000}, {0x20, 0x0, 0x9, 0x2}, {0xffff, 0x5, 0x5b, 0x400}, {0xfff, 0x0, 0x8, 0x3}, {0x0, 0x0, 0x4, 0xc6ce}, {0x0, 0x7, 0x2}, {0x6, 0x2, 0x9c, 0xa69}, {0x7, 0x1, 0x1, 0x400}, {0x382, 0xff, 0x9}], {0x360}}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x7fff, {0x5}}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}, {0x3, 0x2, 0xd, 'ip_vti0\x00', 'veth0_to_hsr\x00', 'ipvlan0\x00', 'syz_tun\x00', @random="9775d8c84d72", [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff], 0xfe, 0x17e, 0x1b6, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'Q.931\x00'}}}, @owner={{'owner\x00', 0x0, 0x18}, {{r4, r6, 0xee01, 0xee00, 0x4, 0x5}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"223d60fb378270a903f75fca49a591c4038ee2e0d1720ceebcf4b6da9fbe"}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x0, 0x883e, 'wlan0\x00', 'batadv0\x00', 'wg2\x00', 'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff], 0xae, 0xae, 0xe6, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x52}, {0x4}], 0x2, 0x2}}}], [], @snat={'snat\x00', 0x10, {{@random="21c3077e2f53", 0x10}}}}, {0x5, 0x22, 0x22eb, 'batadv_slave_1\x00', 'macvlan1\x00', 'ip_vti0\x00', 'veth0_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@redirect={'redirect\x00', 0x8, {{0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x9, 0x5, 0x5, 'macvlan1\x00', 'macvlan1\x00', 'wg2\x00', 'veth1_vlan\x00', @remote, [0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x80, 0x5b849b99b347ed0], 0xa6, 0x116, 0x166, [@realm={{'realm\x00', 0x0, 0x10}, {{0x7, 0xfffffeff, 0x1}}}], [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x81, {0x2}}}}}, {0x11, 0x1, 0x15, 'vxcan1\x00', 'syzkaller1\x00', 'wlan0\x00', 'caif0\x00', @random="4be85265ebf6", [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xea5ae9b4a5d9b7ab], 0x116, 0x116, 0x14e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @mcast2, [0xff, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xffffffff], 0x0, 0x3b, 0x20, 0x8, 0x4e22, 0x4e23, 0x4e21, 0x4e21}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x8, 0x3}}}], [], @arpreply={'arpreply\x00', 0x10, {{@random="6f27e1f82171", 0xfffffffffffffffd}}}}]}]}, 0xa94) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000002c00)={0x0, 'ip6_vti0\x00', {0x3}, 0x40}) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003440)=ANY=[@ANYBLOB="24000000260023000000001f37e50d5677eb8de020fc7b12d4000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0) sendmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'veth0\x00'}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="2750e5a4f77f6a8ebf40aaada66ac883c71f182889ba56c9f1987fd997ad95d52f0ed04ccfab8c424615e991b35d563be7759791d25145e7723c0ac3603fe6c2563fc15eec0114449754af69cc100e42329cd5e72837d4dbac52d035da623215", 0x60}, {&(0x7f0000000380)="93334cf1a37e4b2f98d40a26466c6cfbe7ea35bbb6f31ec18923", 0x1a}, {&(0x7f00000003c0)="6c982a5779f059665302cd2fefc77831160404d9d1af405aa5a4ca68a2de1c0655b61971f542327b7c26068f6cb47c70cb04a567c4adc0abfb94972a0868f9ade6801463ffee811fe4d6a575357216a90cc96aba1f1f0b01da18bf6df07d0e229de8825ea4de10de5eedc241391f74fe1c9eb424dd64d5b5874b0ed3a0e9b7d2f897099b58a6510fd259", 0x8a}], 0x3, &(0x7f00000004c0)=[{0x80, 0x0, 0x8, "51d0aa06092498cf71cfb7d3c1cda69304d5c649d66452e05d2ee93fb7f342d8c8d1c4442903b2763c4d445cc1785fed6ed64a91b4e930dc82e7fc0c5926f6278bf73fa41cac5d6d4f61926a7be8c43faa737d20fb4398190571d21d8df6bce758a1a721e368c410e4d7caa3ffc257"}, {0x108, 0x6, 0x9, "7ad6c3a5c00026ade84698d58b38f1447ba810076c672afa9565ea0583bb75159962e80655bfdbe1421d8d8ca6addb6e96e70b7273dbbaee6397042469cb5a3afa64716a469e95c7aff96ba07082314168ca346c92350426b63f68023bbb87227df50dd498a62d0978e8ac0baab96c05d4fbf77a670aa7ed53e59f28b408b0807e1ee32fcebfba8d17824c412ca1a0ab4591d716d0a5c175b9355ad99995188b36cfd92e8be17361658c7afca246b210084604da069b02584f603b5f01d8a0123f5edd0bd2e9f58a8b556bed798c9104d3cda103d99185e6cba2ed4b8774e1346e79baf4353f8d3043f257b8a8d86e491441"}], 0x188}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="6e8b38d540bf00f75a6e5c7651073e8d93250c66a85f3248313c34b0a7d444be0298b065e59a7a23e15090393f40", 0x2e}, {&(0x7f00000006c0)="669ac568b5d052b0b4f61b534662592c71b66196cdf447db91cff5a72f92ae0d252128dc4556c6d325bcea5ba005e8ca7d285b68e8b447456da3051bd290aaca81a80be158c2ddd896660217cb", 0x4d}, {&(0x7f0000000740)="7f7819c0262937097963bb2727b6a381eb10a891aeb596009381e31d4fdf9f63bcf781b4424aac74b04cf635dca79b", 0x2f}], 0x3, &(0x7f00000007c0)=[{0xd0, 0x107, 0x1ff, "d14f27cdb41b1744ceaebd6ae23fdb508aa45d34db48b9ab99a948fa35b223f9c7e3d26207343ef652aee6cf43a849e25590d1ab11e356e5b0eb423b889ac94462f68dc8bc0a89369c3253f9122f104ad1f2b3b43c88b7fb4e3cb630d4d63f7614d824d9f59785e21a443d965ba6ce5f3cfda7b45cc252e9dbb64bcc78fd7febb5546d61de5d82bb4125cd41ecd83a9f04014e541e26a7b2cb117e91914dc286adf7138e9a99ce37d19d97cb7cea824eee2f6352b493592d2ff05675106c45cd"}, {0x50, 0x115, 0x6, "c19dbcc1f2ac64c7bd0b1ec79b94c01f14ecd797e216193a860f7973ebe9b0fb71fec782b3178f98cf5d6704e583b376a91cde2c3a025ddbf67bde06deca35"}, {0x110, 0x88, 0x0, "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"}, {0x1010, 0xff, 0x7f, "84a49147e5d5b83215f39d97c025932d615ffaa28a4b8f80ec179799903abd38719518d40b14ce41b1c7d0f3805eec307d327b90054d152e3502ec5fb357d4ad437e632adf7ad0bc26a582478b48fc4d196ddbfebc0ef766095b6fc1c27383a64f7425b893add4cc4a4692787c389db729e9b9cf8145fd8afcd693b654739991f9dacbfceda6bc70683094ec68fd237c56e98bb9a95bc14476ac4dd875dbc36a42ca2210a0283eadfa11bbdce75ba6a42ced41b16b3df73b3d8a8a37e9335a4cf88c343c657187ee89d7729dd8ceeb5122b42ca2284d272a9c45499e86f4eee37f57578dd88836ccf648baf69b4f54a03547dcb676cb455e75bd1e7ee81d1f952a1c7d7ee2f58266afc8b3a424fb6469ce46973dabad92c451dc8f3258df3a7f05f84110bcc5d19efa600380498cabbb00f3483064a4e32ba9b6ad54a6f708080fa96d7dede043910d3ce1b7955fd8627368b9096399760434942d9e6155ee33200654a4a22c527d4fed55a9eb7901fb6f44e1d6c9dddde85bf31a7cb460be9a571253786b0c30a8cfa4d275d2d4380a5863e8f6a5dc1745db6bec2e2b4b34517c041bf453db89d4fb8cd5171421f5856c0096eb120a6c4f007d3a4593cf40e7131919f6dc4a28ea770e2f118f3ea49a4eb017e36c0d1eacf83fa33d6c5c12a6cb928c95b1b7874bc0796ce8aac162e3c619e3a7a7ab8db003f015d15fa9219b1386761c06fcac0e96c3cb9c8c699eaf4a7bcb9a986fa0fc56915f5dc23431405bd16ae316812ab1663d9771a2aacd44130c23d234fa21808ab82bb63d1e440815687be51270650ef0fa6fdb1dc611b740c067524acc6446ee44059c5a61715d0705af9fde1ccc8cf7d12bedc4f48350921aa9def031ac3f95e786e5e3a9b172918719edeb971f8eb02be69bdba1903bcdd2a258c5813a66abbc0485cda6827b89bc8ec87176993dea5eb3787727994ebe5802d8034b4292306b4d978b98c844f992b82a98e7d6b79593f6b67d30876ad1cce89a3cdad425c00ac5848529d09d741aac0489287e86dd8d2c0c3b8fd86990564b36f073fcfef80d52e1c46e2ba4ade92983d0e55988c2bfcdfc2c064d4e895437e25afe38e99920fbb4cfe7b6963b7eb8310c205d29d4c82e382cae8554f5877492313eabc7f6b0db1e66908e4d9c6a99fb5b6bc717c945aec70692bf7950f11ef1b158cfdbcb0f7858f93d5b3bd3be3f4947cd32140ea2e92a98bfcb40a39e425b4c71e01d69860484ccff748848d42b65a3c1cfa6a09968d0718f65b166dab77d91cfc2c8445d808c92e3a9a0e53a509039091348a28c7399e4a609f6e443c5f261e77acdd118fd14ce655bba5412fda50456c9927f861439108c933789da69820775cf31aab00faa173bcade7d244554a66d82a3c993809759bd3328015d1052e1a16e59f1c9bb585870e0556dab4b9f127a48f78bcd256603b9f398a544d43c8d3d355905fc0460cc6ded6167a24b132c82e9aff8c8328af3738105475362243e2acd556977069b943e5450e6811c254ab98a6c40629885dfc8735566801241a7e91cca08de160e70272dd2ffc60e25ee5d66659e97ac05c197eca6b79f59d8b8e8c988a56effac5eca0026120e8259dc7722475a01f8a62f994487956ca75f60c4425a5fcb4fa6efb5987b1ae1bfcaedf7ddb3c2b4399d52a39aea604c8d9b5d9e4f018ca729cefa560310fc93e2a30f2d74729efd05c20851b5edd4fdf1edd6b1955e79066bf8e2c2fe25bfa2c8541926047f5d914bea4ca77797b0207d0ad5e1d32e5fcd194d3edb39bce4902581c97adf59b8a442327ff1be9fad70844eeb540c7962d864b0fecbfeed2a5e6e6d2364f5cbedfbb3829153d7be2e4f3c88ed00a7a9babd4cb7b3c310f61ff458eb4dbcb0aae39684412a6da7e4a732b70d9947b8827993445df40b6d213e9003e3260071de8ad6db4314be75b72736a968232647ff869a4c7bec782e28246fd066f816129d50d4a62b5ae41ff5ad86a1b498883e19f7351f5e37bde6e0f22e6702ca27dc0ca00e925538ae2fe86c38d37022bcd2a8c33a0c32daaedf6da9a096d4688fb25ea475d1c18dc596a7af3fee2f15ef4addf9a282d2c17cdafec2006394afa65835f7e2d6dc87487464ff761f5923dcee49dddd1dddcdf5475cd201b0b713e82976bad366fef347d21dffaa8287694347b171b5b81098dbac13b2ab1588a4b4e68cff7711753c920287c894e076e3f396a07bfca6cabd5b3154e373a3e3f670a4713d3a55a575e7ec12543046398dbc16a2749eeedcb20bc21590f2d2c988e13e434f9efa4716e7a3136613cd91205c5a77da8f36a7b0021fdd59724ad5eb0dd63fc7b92440ee6e7d757b86940f90c66c7c15566f3b6aae340676caaceb6e22f47f7c90bbff27aa134d6105700fece7f2e5eab61c037d65812fae7a5dc2cd892271406f3fcec9c654970c03784fbc311858cca421308c8deca8b53298cba63737a4def149b16c05046f6b695fc359f101b7014788c5921fc38e46bf410d500190b1fd177b708167e0a8a95f9c0d5562eab51ee4a16154f758ceb1e24e92b5deb6e6af7778c1614ec88011a398ec393a1260926a6ff4373bb8c12990e8fa9ce873f331c7e6f27235f3e274607d79c4ca9f043f56889381aea3d1a279b20fb46c15cf47b6d06ece71aa70851440bd1e945aa11bb44ff81215d4ce71d481f0f6152747728e11c8fa88c04e2d96fb38d693b690fd1371d804ff649d69d372e2cc41704f1299989aa81293dc392ed8453226a46e12c0edaf0b94cc52de65e8970f5ec57cbbc6f930c1f31ca86558e381e81588a90b8ceb2c46f8ee7907dd697165cecf692d73cf7b14ab829a2f56e63054e5512edafe50806f53e6f79ed26c2aea35fda1c6939dc074c10730c6192f64ca23a954eb0a49561e60d58a493f33059d08c18f2bf0a52e27eb9e070da0116381ffbbaf89314a393e3b4d8a8174384792926f0a426847f73caca0b83848e90cd78b3150d14ea4b4e8ba92c5e325179162ee4059d7a6547bdb53cca37b25001c53fb1e878500c669497a845d1b9b9ce571052159182d298c8b159c9d62524a64e38cb5a3441958cf232cdda4c1d179f1a97b04f4ca52b9e6bff011b9cdb00d009ee3e4e4ed01754aa56b2723ce0bf76027716af40d0c080496afa73265abf609f36ad5a00bf26daa33e1d0761bb02dce8ebf54506230ccd99ac36d6aff9bedfa37d14ae4c09cae3a2a49b2f964dc4254534964cdbe95fe772b82a047fc0ee15812dc1ae857e2961a25f5f0b6aa24dcfdedec94eac42bd8131d73f8e28dc28ff037b5618d334c2032bc14945439a66bb89bb8a49aa0d2e2b63f42abb8f4e137913993497152ca2eda17ff3ae7777a553a0d673c2f684dbe261cc9623b2480336df44da35e3d7807a97333227d86cab7b5fa09e2cdfffdc128b712fb9500b487d61f8465b3c4882160c743d7c52d4b4ce74d5780e66a2b0cca04160f52053f4a3ebb487f434a53e63a9563c2b4327fc0c16cb3b22b9bbe6f44bb50dcad380fc916f5811286a85c051b196b7d1907e69ced1e1bb1482e1cba6832f42ffd0c16e90461454f5164d408d0d8ff61d73e727db93ca8205d7e5836574cbd25eb273d21757bf7b7778eac44090cf7d47face5a5f1b6d759d6ae5113580e429d560f8da5c4127596a076af581e0b0cecffc0f733f4bf061f8e0102c835dd3eaec3ab20d7c09dece77e99f15251092539498a600c21c736351004ef8ba29c1f2f0101a7de205db7bc2839b1a4dd87f253ac7b5886d175b5dcce4fe3a72f94113b301d972d39b5b6b86bfe4937ff64049d7c0938fb19688f8fa81c0c7f5d0d68fc100e175824727ea752350fdff48496dcf3781cd1ad2cfca256ea9fcfc18e61073eda339c13bd8b3b382c6127b8be40adf848d4f43b1b16db2bb3d1e89131b509e06b524b807ad4bef56186ebdd951098f1cf8608927f65391aa31dbac7c1eab82e884b721b9d208c0e5ef4a3dbc374e1f4f71f9d49e6e5ebc48397b0dbb8b42a3a2aa3ee995b8b7764c81cfc4639deb8b8073d5b338467c6f9d04389f2e27977ec9aadf16bc60aebdf2ab03df37e9038139fee752a0902baa51497687ed4aa6d36576cb81efee21f8df39b0ab0988dd6da25dda4cb0cf2a2805412c5c1507fd4e16e0a49bd87d7430f1b6f156343286675d78950c8f25a51593ee10076420fbc915d40ca34adb200e1734be6965d4750738a6452668bafae10a0f435fcbee7d20173ab8ac5facf5bdfcff24842f5b1de8d0891e9961d9f583a35ed8adfcbbad5aeaccfab13bf81caa0b3d532b0d5097b362cb83998d7fabb29206d51f0f4a4629d3019c4c4dbffa9836d8a584f2a849febae480ddfcf4f4c28cdcd385f2c9f211903c03592caf96b942089b2ca4736cd3120c7900cb40cd3a58182842e3a68dcc5cff141bd78d3b82acdd81461f24351b55e18672d13e7676a37610789b1a47b6050c163f022c179495258a17575a8291a1bfd5d6ef557b8cdde06f318f336e4e568caa2b741a3921830ac31d1ce3d7e95d8a1ff09c4a6654412e4a4f3a1f1ec1196ae49edb5d9d9ea4a90320a9c7c5847f16a62916be2c204d1feee83b68d48511a6884af1e48d8e8c244d1bcee11934d59f97d007bd79eaac37621dd5331e2fb2535cb9f4cd60a56846cedeee46836dfe7a8e814a24f29e6ad33323f18d1198a4e85dcac177f4df1380062d686d197daba02c7f0c17d5593233c4be6b032c2791e4a5ccb6a0b887889f586f79fda9769eef7fb51a9a6241f65091ae37f501739846c470be17202352c6d601a3ed359ab4bd884c122b2ee5c4888a0d54cab72d901d034044ea0f6c65edb3dcafd92987280ee0a49d60d86fde002335929a0e254bd0996b9fa6cbc80e9db4d2cf7acefeb22c4fe261e079c625cb99f144b45291842ca0dc613af8590f44fd72383da058cff0bd853f0707fed82b30f06b40ab2b0b3a98861738a6fb6a0dbaf86108c676d2ebf3491a2c0c82cfa8706223cc3f20258a3b704d7bee7ba1ad9d96405baa6b98475febef99d30483885e330fea0f99420b1dd96c7a3309d3293ca90876944a4eea0eb685bc58fede56efc20be58d20b8644c8c2c01c5d24866b7e41978fbfca0b08e17a6ac245bd6614d451b175884438990bbbd27347d8f498b9f0edfb8643f2bd041e069d9c23a37e5d54bea1708ac50f9d5fc0cc365ce6a0d8cb5aeb9621210eaf04539bc8c394973b696a1eac9c33b681d54342a2a78693cc7a90f7d2031b4e164bc6ce123d026e098895d472bedd638177fad732693b701b91589cfa8831a9f820ad7b1abdf1fcd988c7ff3a554d62fcfa1469bad145232885afde24cdae11187db82b584ebc93f4a3bcf471cf38d176753434d9f8d82b59d460ba58cba457ac7bab3c03f99ebfcd7b56f2cb3c67ce63b498d3887ad96a8f7fac57e8eafe824249798aa8029b2016801dcfba5f0d73500ab134ad5132b72beb3252a62c05034443995fc6219aa748d272798ae400d6a72d507519ca2a5403b8b9e8546fec21aeae0afc5af40b27d7d2c10785d5c9cf691b9d538ed4230654e426567b2a8c8d005edd16605999328689fd1c65b56b7dd9190fdc1352b81a8edb4302889a942e072a7c686107b0a1774ccaa731566f625af7bdc8043eaa6288485bef7fbd976125a329e9337af2db46673dca75fb5865ad46c0a34278992ec7d71b6071ba4458acd3089a669ad4797d52259233e2d745cb12ea74ab42290ac0eb4fabe093"}, {0x88, 0x116, 0x3, "40a4198ad39b95b11dc02b31ccf84975e251555b7ecb484021532417c00a2ee97143895f079c9487e3b5d3e94048dd4ba6270c843de91e4104f2ca7960a8d938da67ae2554fecfbc081b028019e0fa740c4e8c18330f5aff94a1cb81be514f0d840159b37d7420cab875513b998c88d6b75e3b06ab7475b5"}, {0x28, 0x0, 0x5, "3df861016f554fc17a3a3ae6c418731e18bce7"}], 0x12f0}}, {{&(0x7f0000001ac0)=@can, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001b40)="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", 0x1000}], 0x1}}, {{&(0x7f0000002b80)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c00)="1bddef16b3d61bcdc2908c992923c7fb1fcf91557d813d136453c2d25770e5e5f7c35bb21fe681a12e5e5031b63f04c48ad1810f76b9786c7cacbb074a5db47f5ecda178dfd83a9e5f7fef753a37a8c287f8caa259ac09a5c3e41cdc37e62d23c6c126ca3faf4e6a71f17e3411bacc33e379a1ea3306b129b0f27bee1db46764913f9ce06c3963a7e9ac9a1db1ffc6f298a6f9285a1b80fa6da74127bad4472354ebb4b6a19868591035adbbf6b610befac7cc65ce447e4a3a3dea58d6aecb6d6dc71bc7911a7a39134aad061072e8fe7a13f4f83ec43b798e23f517f1d2ed3add58ddca382f5c5b718f593492c1d9", 0xef}, {&(0x7f0000002d00)="5a08ec02209741fda6a4b9e02f0337575db7ca82c3e06c39da62116c59adb8009e545c03e4033f13925d02d4e5e436a5dad49784fd8e0a92bf24b1f1b49addca74e2ace9afcf4a61de5fb93aa979e9020a68b54ff1f18bc3ac2755e5575b7c854097ff738429de1e3eec25bfb84be988fa688956cf46cfbb2705d3a1c7", 0x7d}, {&(0x7f0000002d80)="1da2eb1637e9c4d347bf44b9ac666ed6cb6b2045ffd94b49c663de0ad6da978f2fee1304b65794f35c914fba7f398dcf5d1b26abb20f798bffe1dbec5f1f484b48f63566e8057040452f7a9fa7ddc605c4bb4fd44348194ce3379578266c5883a1463e9d8a", 0x65}], 0x3, &(0x7f0000002e40)=[{0xc0, 0x0, 0xbc1c, "930af4b0cc1acd9ad2f3e4ea5407a1a4b6f5c350bfc94f9cde3d923730e0ad36cf632c7581b6ea6b0688df8cee55e6e0c29f6a05ab63eee9ad4d479bdaeb9c9dfb1a108bca1b6a3a329e580c2f302e5441989ba0cd3ff9f6ae8005a1f6c863d7afd8d8b31a065096d01a8f3195970e56ffe99bcb58c8d473386c9cf46d1a4146ba6ab76810edbbd71b7ade78eac6693399928d7f75b987bea34f183d886db765471405fdff487d3738"}, {0x60, 0x111, 0x6, "11c1938a35a838070fc74da215d7836996c8f77d07315871b7c82f5176f4956737c7090f26e16e1587a584d159f6ee7457ea46d28b5768eff8c201fdf33a953b00ecfcdcb7abf5630e7fa24474b9e835"}, {0xc0, 0x3360daa1a08922ca, 0x0, "8129e02951d431af84133d218687a98583bc61b1da63b1b906cf874a64aba2607baf2ae873babc03234c245832214f70a6698ffa2b70a67a78936169fca245865f16642ac0f132025db85647931068913b8b8c9fe39acd2d61a6b517730888f1a31660a4d4567c9193490a87ee2ed15ab359787a90da4bac38b2768d74d6c0f9f8521e805a4dc8b93cf5d2f17cf54f75fce75574c658b63f712a5364891732c527383d02c62573bf37a9c167"}, {0x48, 0x6, 0x5, "2da6f719ee06bae8d006834b77813415708f568043668f2cc0fa0e977521311c9b3bd88ee9038cff11019edc6d952d3daeb910"}, {0xf0, 0x10f, 0x4, "483c01f91a0bc2d77347dbe3761336f9d867167984de21dacd5a7b709958333859b450b60d9be433866ccf7ddeec6cc1d1f11f932b59aead4e4f2966f234bef7443556f1517b4ab97cdbd4688e0e3176dc129e1181c76a0abdb34e07ee6c1bbff835b5a2fe1c2b53283a77fbbc98dd304395a6ea8df6b1439354053fb9d2514c300801cbfe477eb51010cebac0af9a393a1afae0f710279b24dabc729ae494ef1a9b6ad893d5a6300490d5017ea62b3c960d61f9847e6b2001e48eb8288e8a0fecdb9ed98ec5873f9281ca74ee329f6d8a27dafe866ecc8c2672"}, {0x90, 0x29, 0x7, "817c12575ee06da5aac178cb0fb3bf9b11f45f4d8c52a53c9a6e5641b4aa333bae028dcfe5324764f8a9ef3d614e8d12baad96f77fac4eebaac3b54cd15cd0ad417c5c280c25cb3238c8a9aa2def1c877e17aa0b14f482572262bdc5b8c066767e722b3904b63f2129f331b132d97057de4e580265713fe3e83153a530c4"}, {0x110, 0x1, 0x7, "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"}, {0x40, 0x10a, 0x7, "0c463ecca1d4fed44fa381bf53bc50a6fa618374000b45e0b9a92dc2e8eb3acb80293a71b9a00acb4bd0a5"}], 0x4f8}}], 0x4, 0x8a0) syz_io_uring_setup(0x2a77, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1858) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003440)=ANY=[@ANYBLOB="24000000260023000000001f37e50d5677eb8de020fc7b12d4000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0) (async) sendmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'veth0\x00'}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="2750e5a4f77f6a8ebf40aaada66ac883c71f182889ba56c9f1987fd997ad95d52f0ed04ccfab8c424615e991b35d563be7759791d25145e7723c0ac3603fe6c2563fc15eec0114449754af69cc100e42329cd5e72837d4dbac52d035da623215", 0x60}, {&(0x7f0000000380)="93334cf1a37e4b2f98d40a26466c6cfbe7ea35bbb6f31ec18923", 0x1a}, {&(0x7f00000003c0)="6c982a5779f059665302cd2fefc77831160404d9d1af405aa5a4ca68a2de1c0655b61971f542327b7c26068f6cb47c70cb04a567c4adc0abfb94972a0868f9ade6801463ffee811fe4d6a575357216a90cc96aba1f1f0b01da18bf6df07d0e229de8825ea4de10de5eedc241391f74fe1c9eb424dd64d5b5874b0ed3a0e9b7d2f897099b58a6510fd259", 0x8a}], 0x3, &(0x7f00000004c0)=[{0x80, 0x0, 0x8, "51d0aa06092498cf71cfb7d3c1cda69304d5c649d66452e05d2ee93fb7f342d8c8d1c4442903b2763c4d445cc1785fed6ed64a91b4e930dc82e7fc0c5926f6278bf73fa41cac5d6d4f61926a7be8c43faa737d20fb4398190571d21d8df6bce758a1a721e368c410e4d7caa3ffc257"}, {0x108, 0x6, 0x9, "7ad6c3a5c00026ade84698d58b38f1447ba810076c672afa9565ea0583bb75159962e80655bfdbe1421d8d8ca6addb6e96e70b7273dbbaee6397042469cb5a3afa64716a469e95c7aff96ba07082314168ca346c92350426b63f68023bbb87227df50dd498a62d0978e8ac0baab96c05d4fbf77a670aa7ed53e59f28b408b0807e1ee32fcebfba8d17824c412ca1a0ab4591d716d0a5c175b9355ad99995188b36cfd92e8be17361658c7afca246b210084604da069b02584f603b5f01d8a0123f5edd0bd2e9f58a8b556bed798c9104d3cda103d99185e6cba2ed4b8774e1346e79baf4353f8d3043f257b8a8d86e491441"}], 0x188}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="6e8b38d540bf00f75a6e5c7651073e8d93250c66a85f3248313c34b0a7d444be0298b065e59a7a23e15090393f40", 0x2e}, {&(0x7f00000006c0)="669ac568b5d052b0b4f61b534662592c71b66196cdf447db91cff5a72f92ae0d252128dc4556c6d325bcea5ba005e8ca7d285b68e8b447456da3051bd290aaca81a80be158c2ddd896660217cb", 0x4d}, {&(0x7f0000000740)="7f7819c0262937097963bb2727b6a381eb10a891aeb596009381e31d4fdf9f63bcf781b4424aac74b04cf635dca79b", 0x2f}], 0x3, &(0x7f00000007c0)=[{0xd0, 0x107, 0x1ff, "d14f27cdb41b1744ceaebd6ae23fdb508aa45d34db48b9ab99a948fa35b223f9c7e3d26207343ef652aee6cf43a849e25590d1ab11e356e5b0eb423b889ac94462f68dc8bc0a89369c3253f9122f104ad1f2b3b43c88b7fb4e3cb630d4d63f7614d824d9f59785e21a443d965ba6ce5f3cfda7b45cc252e9dbb64bcc78fd7febb5546d61de5d82bb4125cd41ecd83a9f04014e541e26a7b2cb117e91914dc286adf7138e9a99ce37d19d97cb7cea824eee2f6352b493592d2ff05675106c45cd"}, {0x50, 0x115, 0x6, "c19dbcc1f2ac64c7bd0b1ec79b94c01f14ecd797e216193a860f7973ebe9b0fb71fec782b3178f98cf5d6704e583b376a91cde2c3a025ddbf67bde06deca35"}, {0x110, 0x88, 0x0, "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"}, {0x1010, 0xff, 0x7f, "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"}, {0x88, 0x116, 0x3, "40a4198ad39b95b11dc02b31ccf84975e251555b7ecb484021532417c00a2ee97143895f079c9487e3b5d3e94048dd4ba6270c843de91e4104f2ca7960a8d938da67ae2554fecfbc081b028019e0fa740c4e8c18330f5aff94a1cb81be514f0d840159b37d7420cab875513b998c88d6b75e3b06ab7475b5"}, {0x28, 0x0, 0x5, "3df861016f554fc17a3a3ae6c418731e18bce7"}], 0x12f0}}, {{&(0x7f0000001ac0)=@can, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001b40)="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", 0x1000}], 0x1}}, {{&(0x7f0000002b80)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c00)="1bddef16b3d61bcdc2908c992923c7fb1fcf91557d813d136453c2d25770e5e5f7c35bb21fe681a12e5e5031b63f04c48ad1810f76b9786c7cacbb074a5db47f5ecda178dfd83a9e5f7fef753a37a8c287f8caa259ac09a5c3e41cdc37e62d23c6c126ca3faf4e6a71f17e3411bacc33e379a1ea3306b129b0f27bee1db46764913f9ce06c3963a7e9ac9a1db1ffc6f298a6f9285a1b80fa6da74127bad4472354ebb4b6a19868591035adbbf6b610befac7cc65ce447e4a3a3dea58d6aecb6d6dc71bc7911a7a39134aad061072e8fe7a13f4f83ec43b798e23f517f1d2ed3add58ddca382f5c5b718f593492c1d9", 0xef}, {&(0x7f0000002d00)="5a08ec02209741fda6a4b9e02f0337575db7ca82c3e06c39da62116c59adb8009e545c03e4033f13925d02d4e5e436a5dad49784fd8e0a92bf24b1f1b49addca74e2ace9afcf4a61de5fb93aa979e9020a68b54ff1f18bc3ac2755e5575b7c854097ff738429de1e3eec25bfb84be988fa688956cf46cfbb2705d3a1c7", 0x7d}, {&(0x7f0000002d80)="1da2eb1637e9c4d347bf44b9ac666ed6cb6b2045ffd94b49c663de0ad6da978f2fee1304b65794f35c914fba7f398dcf5d1b26abb20f798bffe1dbec5f1f484b48f63566e8057040452f7a9fa7ddc605c4bb4fd44348194ce3379578266c5883a1463e9d8a", 0x65}], 0x3, &(0x7f0000002e40)=[{0xc0, 0x0, 0xbc1c, "930af4b0cc1acd9ad2f3e4ea5407a1a4b6f5c350bfc94f9cde3d923730e0ad36cf632c7581b6ea6b0688df8cee55e6e0c29f6a05ab63eee9ad4d479bdaeb9c9dfb1a108bca1b6a3a329e580c2f302e5441989ba0cd3ff9f6ae8005a1f6c863d7afd8d8b31a065096d01a8f3195970e56ffe99bcb58c8d473386c9cf46d1a4146ba6ab76810edbbd71b7ade78eac6693399928d7f75b987bea34f183d886db765471405fdff487d3738"}, {0x60, 0x111, 0x6, "11c1938a35a838070fc74da215d7836996c8f77d07315871b7c82f5176f4956737c7090f26e16e1587a584d159f6ee7457ea46d28b5768eff8c201fdf33a953b00ecfcdcb7abf5630e7fa24474b9e835"}, {0xc0, 0x3360daa1a08922ca, 0x0, "8129e02951d431af84133d218687a98583bc61b1da63b1b906cf874a64aba2607baf2ae873babc03234c245832214f70a6698ffa2b70a67a78936169fca245865f16642ac0f132025db85647931068913b8b8c9fe39acd2d61a6b517730888f1a31660a4d4567c9193490a87ee2ed15ab359787a90da4bac38b2768d74d6c0f9f8521e805a4dc8b93cf5d2f17cf54f75fce75574c658b63f712a5364891732c527383d02c62573bf37a9c167"}, {0x48, 0x6, 0x5, "2da6f719ee06bae8d006834b77813415708f568043668f2cc0fa0e977521311c9b3bd88ee9038cff11019edc6d952d3daeb910"}, {0xf0, 0x10f, 0x4, "483c01f91a0bc2d77347dbe3761336f9d867167984de21dacd5a7b709958333859b450b60d9be433866ccf7ddeec6cc1d1f11f932b59aead4e4f2966f234bef7443556f1517b4ab97cdbd4688e0e3176dc129e1181c76a0abdb34e07ee6c1bbff835b5a2fe1c2b53283a77fbbc98dd304395a6ea8df6b1439354053fb9d2514c300801cbfe477eb51010cebac0af9a393a1afae0f710279b24dabc729ae494ef1a9b6ad893d5a6300490d5017ea62b3c960d61f9847e6b2001e48eb8288e8a0fecdb9ed98ec5873f9281ca74ee329f6d8a27dafe866ecc8c2672"}, {0x90, 0x29, 0x7, "817c12575ee06da5aac178cb0fb3bf9b11f45f4d8c52a53c9a6e5641b4aa333bae028dcfe5324764f8a9ef3d614e8d12baad96f77fac4eebaac3b54cd15cd0ad417c5c280c25cb3238c8a9aa2def1c877e17aa0b14f482572262bdc5b8c066767e722b3904b63f2129f331b132d97057de4e580265713fe3e83153a530c4"}, {0x110, 0x1, 0x7, "88174d4510cc666426125a4cdab0e3fc7f79f98e0aa64660f15d7dfba73ef765bb68fc3abfeac405ee4b6bd7e832603f61293e9464aac075588b729097c61f42d1b048bfaf0cce6c364c2beec315f8663d0a33ca1f31da8f5a2a3482940a6d805c3eee2fe442572f6dd8d00f2ec152242848aa19fd6473873738e45901fd3250d5903f46ec7eb5a6ba764e04d4532fe3a29216ec92676afe0c3b48c3d6a4856a64d2ab5808d91df27357c4f509288be2f50f342d7c947c340ad49b9cb2687c546ef63b3680e6cd5f04c2bfc2b839e6c640cf3ecadb498a58600d01ae97130683f5ffd053f3f56f1f87151f6d9a27894f5febce7aee33d28a63a0"}, {0x40, 0x10a, 0x7, "0c463ecca1d4fed44fa381bf53bc50a6fa618374000b45e0b9a92dc2e8eb3acb80293a71b9a00acb4bd0a5"}], 0x4f8}}], 0x4, 0x8a0) (async) syz_io_uring_setup(0x2a77, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r4, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r2, r3, 0x0, 0x1858) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) 15:03:16 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 57) 15:03:16 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x1000182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r3, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000340)="870975fab258570a9ad185ac5cbe4bf641854c21a0d9fec4bb302d0a1c28d9ca635ee81e81a60e52e20ea5be724d6ba31b821e5a036c5a551177cc6a1a75df89c41a9c85a353ae0480e871046bd0ed68828639bb7870d120cf8fcf72b57870454a0021e6c812f2", 0x67}, {&(0x7f00000003c0)="ce5b09f1e503093871013a3ac75f774566f61b2c9df45fe79c22b7b67db065ee3ef9afaa9d6ed5aaa26834fff9bf8b1f481affe2d847343845101642ea5594525bbd52080f4c30c4516cd8530ec92b29ab640921ec24eb6a2b524237fc6d9555d814c6ec5fe71da0460822db0383e7b51e19a31a4fdccc99dd87d21d3c10486a2f8ac849a7b894692fb1227c3f0a1ab703fbcbf2d77e1648e93ecfc0a36636d0acb999fa417101d3d80c151242161f16dea6c2eadc34b004824795ab49184391e6f1d659d52dc672b8e394360168c9f481c4eb3265395560d7de560f79a2ce", 0xdf}], 0x2, 0x15}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10}}], 0x700, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'pimreg0\x00', {0x2, 0x4e23, @private=0xa010101}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000240)=0x28) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2525003cc49d320000", @ANYRES32=0x0, @ANYBLOB="0c00990002000000100000000a00340002020202020200000800a1000800000008002201c900000005001801320000000a00340002020202020200000800a00003000000080026006c09000008002600c116000008002201400300000a0006009cfcb175cea4000010000a0018a25bb7a35318b92101c58e"], 0x94}, 0x1, 0x0, 0x0, 0x24000095}, 0x40) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000003f00000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001000000040000400a01000070eb04c850817f62f4b8d1762dbc0400000000000000992ce1e8b582eac0f48cc9308c217994d23438b21cecc805905fd27ca59d8700"/80], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 15:03:16 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x1000182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x1000182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f0000000340)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10}}], 0x700, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'pimreg0\x00', {0x2, 0x4e23, @private=0xa010101}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000240)=0x28) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2525003cc49d320000", @ANYRES32=0x0, @ANYBLOB="0c00990002000000100000000a00340002020202020200000800a1000800000008002201c900000005001801320000000a00340002020202020200000800a00003000000080026006c09000008002600c116000008002201400300000a0006009cfcb175cea4000010000a0018a25bb7a35318b92101c58e"], 0x94}, 0x1, 0x0, 0x0, 0x24000095}, 0x40) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000003f00000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001000000040000400a01000070eb04c850817f62f4b8d1762dbc0400000000000000992ce1e8b582eac0f48cc9308c217994d23438b21cecc805905fd27ca59d8700"/80], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 15:03:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 64) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003440)=ANY=[@ANYBLOB="24000000260023000000001f37e50d5677eb8de020fc7b12d4000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0) (async) sendmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'veth0\x00'}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="2750e5a4f77f6a8ebf40aaada66ac883c71f182889ba56c9f1987fd997ad95d52f0ed04ccfab8c424615e991b35d563be7759791d25145e7723c0ac3603fe6c2563fc15eec0114449754af69cc100e42329cd5e72837d4dbac52d035da623215", 0x60}, {&(0x7f0000000380)="93334cf1a37e4b2f98d40a26466c6cfbe7ea35bbb6f31ec18923", 0x1a}, {&(0x7f00000003c0)="6c982a5779f059665302cd2fefc77831160404d9d1af405aa5a4ca68a2de1c0655b61971f542327b7c26068f6cb47c70cb04a567c4adc0abfb94972a0868f9ade6801463ffee811fe4d6a575357216a90cc96aba1f1f0b01da18bf6df07d0e229de8825ea4de10de5eedc241391f74fe1c9eb424dd64d5b5874b0ed3a0e9b7d2f897099b58a6510fd259", 0x8a}], 0x3, &(0x7f00000004c0)=[{0x80, 0x0, 0x8, "51d0aa06092498cf71cfb7d3c1cda69304d5c649d66452e05d2ee93fb7f342d8c8d1c4442903b2763c4d445cc1785fed6ed64a91b4e930dc82e7fc0c5926f6278bf73fa41cac5d6d4f61926a7be8c43faa737d20fb4398190571d21d8df6bce758a1a721e368c410e4d7caa3ffc257"}, {0x108, 0x6, 0x9, "7ad6c3a5c00026ade84698d58b38f1447ba810076c672afa9565ea0583bb75159962e80655bfdbe1421d8d8ca6addb6e96e70b7273dbbaee6397042469cb5a3afa64716a469e95c7aff96ba07082314168ca346c92350426b63f68023bbb87227df50dd498a62d0978e8ac0baab96c05d4fbf77a670aa7ed53e59f28b408b0807e1ee32fcebfba8d17824c412ca1a0ab4591d716d0a5c175b9355ad99995188b36cfd92e8be17361658c7afca246b210084604da069b02584f603b5f01d8a0123f5edd0bd2e9f58a8b556bed798c9104d3cda103d99185e6cba2ed4b8774e1346e79baf4353f8d3043f257b8a8d86e491441"}], 0x188}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="6e8b38d540bf00f75a6e5c7651073e8d93250c66a85f3248313c34b0a7d444be0298b065e59a7a23e15090393f40", 0x2e}, {&(0x7f00000006c0)="669ac568b5d052b0b4f61b534662592c71b66196cdf447db91cff5a72f92ae0d252128dc4556c6d325bcea5ba005e8ca7d285b68e8b447456da3051bd290aaca81a80be158c2ddd896660217cb", 0x4d}, {&(0x7f0000000740)="7f7819c0262937097963bb2727b6a381eb10a891aeb596009381e31d4fdf9f63bcf781b4424aac74b04cf635dca79b", 0x2f}], 0x3, &(0x7f00000007c0)=[{0xd0, 0x107, 0x1ff, "d14f27cdb41b1744ceaebd6ae23fdb508aa45d34db48b9ab99a948fa35b223f9c7e3d26207343ef652aee6cf43a849e25590d1ab11e356e5b0eb423b889ac94462f68dc8bc0a89369c3253f9122f104ad1f2b3b43c88b7fb4e3cb630d4d63f7614d824d9f59785e21a443d965ba6ce5f3cfda7b45cc252e9dbb64bcc78fd7febb5546d61de5d82bb4125cd41ecd83a9f04014e541e26a7b2cb117e91914dc286adf7138e9a99ce37d19d97cb7cea824eee2f6352b493592d2ff05675106c45cd"}, {0x50, 0x115, 0x6, "c19dbcc1f2ac64c7bd0b1ec79b94c01f14ecd797e216193a860f7973ebe9b0fb71fec782b3178f98cf5d6704e583b376a91cde2c3a025ddbf67bde06deca35"}, {0x110, 0x88, 0x0, "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"}, {0x1010, 0xff, 0x7f, "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"}, {0x88, 0x116, 0x3, "40a4198ad39b95b11dc02b31ccf84975e251555b7ecb484021532417c00a2ee97143895f079c9487e3b5d3e94048dd4ba6270c843de91e4104f2ca7960a8d938da67ae2554fecfbc081b028019e0fa740c4e8c18330f5aff94a1cb81be514f0d840159b37d7420cab875513b998c88d6b75e3b06ab7475b5"}, {0x28, 0x0, 0x5, "3df861016f554fc17a3a3ae6c418731e18bce7"}], 0x12f0}}, {{&(0x7f0000001ac0)=@can, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001b40)="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", 0x1000}], 0x1}}, {{&(0x7f0000002b80)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c00)="1bddef16b3d61bcdc2908c992923c7fb1fcf91557d813d136453c2d25770e5e5f7c35bb21fe681a12e5e5031b63f04c48ad1810f76b9786c7cacbb074a5db47f5ecda178dfd83a9e5f7fef753a37a8c287f8caa259ac09a5c3e41cdc37e62d23c6c126ca3faf4e6a71f17e3411bacc33e379a1ea3306b129b0f27bee1db46764913f9ce06c3963a7e9ac9a1db1ffc6f298a6f9285a1b80fa6da74127bad4472354ebb4b6a19868591035adbbf6b610befac7cc65ce447e4a3a3dea58d6aecb6d6dc71bc7911a7a39134aad061072e8fe7a13f4f83ec43b798e23f517f1d2ed3add58ddca382f5c5b718f593492c1d9", 0xef}, {&(0x7f0000002d00)="5a08ec02209741fda6a4b9e02f0337575db7ca82c3e06c39da62116c59adb8009e545c03e4033f13925d02d4e5e436a5dad49784fd8e0a92bf24b1f1b49addca74e2ace9afcf4a61de5fb93aa979e9020a68b54ff1f18bc3ac2755e5575b7c854097ff738429de1e3eec25bfb84be988fa688956cf46cfbb2705d3a1c7", 0x7d}, {&(0x7f0000002d80)="1da2eb1637e9c4d347bf44b9ac666ed6cb6b2045ffd94b49c663de0ad6da978f2fee1304b65794f35c914fba7f398dcf5d1b26abb20f798bffe1dbec5f1f484b48f63566e8057040452f7a9fa7ddc605c4bb4fd44348194ce3379578266c5883a1463e9d8a", 0x65}], 0x3, &(0x7f0000002e40)=[{0xc0, 0x0, 0xbc1c, "930af4b0cc1acd9ad2f3e4ea5407a1a4b6f5c350bfc94f9cde3d923730e0ad36cf632c7581b6ea6b0688df8cee55e6e0c29f6a05ab63eee9ad4d479bdaeb9c9dfb1a108bca1b6a3a329e580c2f302e5441989ba0cd3ff9f6ae8005a1f6c863d7afd8d8b31a065096d01a8f3195970e56ffe99bcb58c8d473386c9cf46d1a4146ba6ab76810edbbd71b7ade78eac6693399928d7f75b987bea34f183d886db765471405fdff487d3738"}, {0x60, 0x111, 0x6, "11c1938a35a838070fc74da215d7836996c8f77d07315871b7c82f5176f4956737c7090f26e16e1587a584d159f6ee7457ea46d28b5768eff8c201fdf33a953b00ecfcdcb7abf5630e7fa24474b9e835"}, {0xc0, 0x3360daa1a08922ca, 0x0, "8129e02951d431af84133d218687a98583bc61b1da63b1b906cf874a64aba2607baf2ae873babc03234c245832214f70a6698ffa2b70a67a78936169fca245865f16642ac0f132025db85647931068913b8b8c9fe39acd2d61a6b517730888f1a31660a4d4567c9193490a87ee2ed15ab359787a90da4bac38b2768d74d6c0f9f8521e805a4dc8b93cf5d2f17cf54f75fce75574c658b63f712a5364891732c527383d02c62573bf37a9c167"}, {0x48, 0x6, 0x5, "2da6f719ee06bae8d006834b77813415708f568043668f2cc0fa0e977521311c9b3bd88ee9038cff11019edc6d952d3daeb910"}, {0xf0, 0x10f, 0x4, "483c01f91a0bc2d77347dbe3761336f9d867167984de21dacd5a7b709958333859b450b60d9be433866ccf7ddeec6cc1d1f11f932b59aead4e4f2966f234bef7443556f1517b4ab97cdbd4688e0e3176dc129e1181c76a0abdb34e07ee6c1bbff835b5a2fe1c2b53283a77fbbc98dd304395a6ea8df6b1439354053fb9d2514c300801cbfe477eb51010cebac0af9a393a1afae0f710279b24dabc729ae494ef1a9b6ad893d5a6300490d5017ea62b3c960d61f9847e6b2001e48eb8288e8a0fecdb9ed98ec5873f9281ca74ee329f6d8a27dafe866ecc8c2672"}, {0x90, 0x29, 0x7, "817c12575ee06da5aac178cb0fb3bf9b11f45f4d8c52a53c9a6e5641b4aa333bae028dcfe5324764f8a9ef3d614e8d12baad96f77fac4eebaac3b54cd15cd0ad417c5c280c25cb3238c8a9aa2def1c877e17aa0b14f482572262bdc5b8c066767e722b3904b63f2129f331b132d97057de4e580265713fe3e83153a530c4"}, {0x110, 0x1, 0x7, "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"}, {0x40, 0x10a, 0x7, "0c463ecca1d4fed44fa381bf53bc50a6fa618374000b45e0b9a92dc2e8eb3acb80293a71b9a00acb4bd0a5"}], 0x4f8}}], 0x4, 0x8a0) syz_io_uring_setup(0x2a77, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1858) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) 15:03:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10}}], 0x700, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'pimreg0\x00', {0x2, 0x4e23, @private=0xa010101}}) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000240)=0x28) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2525003cc49d320000", @ANYRES32=0x0, @ANYBLOB="0c00990002000000100000000a00340002020202020200000800a1000800000008002201c900000005001801320000000a00340002020202020200000800a00003000000080026006c09000008002600c116000008002201400300000a0006009cfcb175cea4000010000a0018a25bb7a35318b92101c58e"], 0x94}, 0x1, 0x0, 0x0, 0x24000095}, 0x40) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000003f00000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001000000040000400a01000070eb04c850817f62f4b8d1762dbc0400000000000000992ce1e8b582eac0f48cc9308c217994d23438b21cecc805905fd27ca59d8700"/80], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 15:03:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) ioctl$USBDEVFS_RESET(r7, 0x5514) [ 2394.183378][ T4280] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2394.433373][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 2394.553577][ T4280] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2394.563307][ T4280] usb 2-1: config 0 has no interface number 0 [ 2394.723416][ T4280] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2394.740518][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.753114][ T4280] usb 2-1: Product: syz [ 2394.761477][ T4280] usb 2-1: Manufacturer: syz [ 2394.770270][ T4280] usb 2-1: SerialNumber: syz [ 2394.784267][ T4280] usb 2-1: config 0 descriptor?? 15:03:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x1, 0x1a, {0x1a, 0x11, "2b508529ca2cd7a44f46a242c4554d4fa0cb52c5fd11f56d"}}, &(0x7f0000000040)={0x0, 0x3, 0x25, @string={0x25, 0x3, "10c04f783b0da45676f0a0965c517d7662917a06f708430f248c07859e891ee43de6d4"}}, &(0x7f00000000c0)={0x0, 0xf, 0x18c, {0x5, 0xf, 0x18c, 0x3, [@generic={0xf3, 0x10, 0x4, "90ed5b1fdcca7f832f8441a0f3679c1e75f696e2b6727526b3d313502eeaee530e19978c028a6d50df6e291ab8dfe1a9a8686b60732125b7edbfbefb7a2b87ed01a18004860282a2353f89971f1975d09424fbc33de6bc3abfbd01c38fa83f613d3ca45426887521ae30c6a2f8cd2a8c0a14d8bb6c7a16215a3808a9c331aa1ca788fcd590fbf14518b72a90e3085829b7815d149790c0692ae9fc4651d15f406cb223bfd8f25c3822339f8cf30f5c8743cd35f08841b4441ae0f66da23965987a6373fc0732fde85de5116b49dd9191204a89685a2f2f103b4dbb74c5f9427af5f9ba9861092bf204875bfe3e328934"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x0, 0x482}, @generic={0x8a, 0x10, 0x4, "95a7f0b4aaf7a8f8d2dd9267b4da9c4be6dca17ef23861a23a6dd8f3fbc7b1f50a6f59b45a05b5827fe267cd26f6972cbc0e07e667482ff5c43ebd55665b095dd02606a8eaad70953f359866fb7f095ebf8fc0472c72b5b55fb9c89fd4a8fe0b8d6b9e54ad76393184c7ed0f8ac513fc3793d2531cb261afd88a694a0b2c15241ef86d683524d0"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x3, 0x6, "986447f3", "9fa830d0"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x7, 0x1, 0x81, 0x63ab, 0x35d0}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0xe, 0x3b, "7134dec130b52c30aac829b1c67c762168386606b4e6d7c221ddfa92b21fc4b4cde06ef06c30aa99255f4367e6328dfdbf635342e448bb066ff5b9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x1c}, &(0x7f0000000540)={0x40, 0xb, 0x2, "8b0d"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1f}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "2903"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x80}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xff}}) 15:03:19 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r3 = accept(r2, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0xffff, 0xd5ac, 0x1, 0x2, 0xc1}, 0x14) 15:03:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 58) 15:03:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r3, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000340)="870975fab258570a9ad185ac5cbe4bf641854c21a0d9fec4bb302d0a1c28d9ca635ee81e81a60e52e20ea5be724d6ba31b821e5a036c5a551177cc6a1a75df89c41a9c85a353ae0480e871046bd0ed68828639bb7870d120cf8fcf72b57870454a0021e6c812f2", 0x67}, {&(0x7f00000003c0)="ce5b09f1e503093871013a3ac75f774566f61b2c9df45fe79c22b7b67db065ee3ef9afaa9d6ed5aaa26834fff9bf8b1f481affe2d847343845101642ea5594525bbd52080f4c30c4516cd8530ec92b29ab640921ec24eb6a2b524237fc6d9555d814c6ec5fe71da0460822db0383e7b51e19a31a4fdccc99dd87d21d3c10486a2f8ac849a7b894692fb1227c3f0a1ab703fbcbf2d77e1648e93ecfc0a36636d0acb999fa417101d3d80c151242161f16dea6c2eadc34b004824795ab49184391e6f1d659d52dc672b8e394360168c9f481c4eb3265395560d7de560f79a2ce", 0xdf}], 0x2, 0x15}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 32) memfd_create(0x0, 0x0) (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x0) (rerun: 32) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 32) r6 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (rerun: 64) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) ioctl$USBDEVFS_RESET(r7, 0x5514) [ 2396.901574][T28611] usb 2-1: USB disconnect, device number 124 15:03:19 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 64) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) r3 = accept(r2, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0xffff, 0xd5ac, 0x1, 0x2, 0xc1}, 0x14) 15:03:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 32) memfd_create(0x0, 0x0) (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) (async) ioctl$USBDEVFS_RESET(r7, 0x5514) [ 2396.997457][ T4449] FAULT_INJECTION: forcing a failure. [ 2396.997457][ T4449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2397.087257][ T4449] CPU: 1 PID: 4449 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2397.097286][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2397.107335][ T4449] Call Trace: [ 2397.110607][ T4449] [ 2397.113529][ T4449] dump_stack_lvl+0xcd/0x134 [ 2397.118118][ T4449] should_fail.cold+0x5/0xa [ 2397.122626][ T4449] _copy_from_user+0x2a/0x170 [ 2397.127303][ T4449] move_addr_to_kernel.part.0+0x31/0x110 [ 2397.132972][ T4449] move_addr_to_kernel+0x4f/0x70 [ 2397.137912][ T4449] io_connect+0x3c9/0x4b0 [ 2397.142251][ T4449] ? io_connect_prep+0x220/0x220 [ 2397.147288][ T4449] ? __fget_files+0x26a/0x440 [ 2397.151967][ T4449] ? io_connect_prep+0x220/0x220 [ 2397.157015][ T4449] io_issue_sqe+0x69d/0xd00 [ 2397.161522][ T4449] io_submit_sqes+0x936/0x1d10 [ 2397.166285][ T4449] __do_sys_io_uring_enter+0xadb/0x2430 [ 2397.171830][ T4449] ? lock_acquire+0x480/0x570 [ 2397.176587][ T4449] ? lock_release+0x560/0x780 [ 2397.181255][ T4449] ? rcu_read_lock_sched_held+0xd/0x70 [ 2397.186726][ T4449] ? __ct_user_exit+0xff/0x150 [ 2397.191505][ T4449] ? io_submit_sqes+0x1d10/0x1d10 [ 2397.196528][ T4449] ? lock_downgrade+0x6e0/0x6e0 [ 2397.201372][ T4449] ? vtime_user_exit+0x218/0x6c0 [ 2397.206304][ T4449] ? trace_hardirqs_on+0x2d/0x120 [ 2397.211355][ T4449] do_syscall_64+0x35/0xb0 [ 2397.215773][ T4449] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2397.221659][ T4449] RIP: 0033:0x7f9bb008a5a9 [ 2397.226067][ T4449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2397.245673][ T4449] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2397.254079][ T4449] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2397.262042][ T4449] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2397.270004][ T4449] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2397.278313][ T4449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:03:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x10002}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@newchain={0x14f4, 0x64, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0x4, 0x3}, {0xfff2, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2c, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xff}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}, @filter_kind_options=@f_route={{0xa}, {0x148c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x1478, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x76944553, 0x101, 0x5, 0x7fffffff, 0x8, 0xffff, 0xfffffffe, 0x4, 0x81, 0xfffffffa, 0x200, 0x5396, 0x9, 0xff, 0xffffffff, 0x2e8, 0xe0000000, 0x8, 0x7, 0x1f, 0x3ff, 0xffffffff, 0x4, 0x7, 0xac, 0x1f, 0x1f, 0x6, 0xffffffff, 0x81, 0xd84a, 0x1, 0x80000001, 0x26, 0x2, 0x3, 0x0, 0x2, 0x800, 0x7fff, 0x10001, 0xa7e, 0x7fffffff, 0xc6e, 0x2, 0xc38, 0xffff0000, 0x7d5, 0xfffffffa, 0xffff0000, 0xfffffffe, 0xfffffffc, 0x800, 0xf6f, 0x0, 0x1ea, 0x4, 0x2, 0x53, 0x1, 0x7fffffff, 0x0, 0x20, 0x5, 0x2, 0x8, 0x6, 0x9, 0x10001, 0x10000, 0x1, 0x3, 0x7, 0x8, 0xffff0e0e, 0xc216, 0x7, 0x5, 0x101, 0x1ff, 0x10000, 0x10001, 0x5, 0x1, 0x1f, 0x401, 0x1f, 0x9, 0x5, 0x8, 0x6, 0x9, 0x0, 0xfffffffe, 0x400, 0x101, 0xf48, 0x7fffffff, 0x10001, 0x7, 0x10001, 0x9, 0x1f, 0x4, 0x9, 0xfffffffe, 0x7fff, 0x400, 0x5, 0x100, 0x7ff, 0x100, 0x401, 0x1, 0x8, 0x6, 0x76f, 0x7, 0x5, 0x9, 0x3, 0x0, 0x1, 0x1, 0x9, 0x4, 0x7fffffff, 0x8000, 0x6, 0x80, 0x2, 0x100, 0x4, 0x401, 0xd56, 0x5, 0x8, 0x1000, 0x8, 0x7, 0x9, 0x5, 0x6, 0xffffb246, 0xffff, 0x1, 0x3, 0x2, 0x81, 0xffff523b, 0x0, 0x8, 0x71e, 0xdb, 0x4, 0xd39, 0x20, 0xffffffff, 0x8001, 0x7, 0x401, 0x80000001, 0x8, 0x6, 0x6, 0x371c, 0x6, 0x401, 0x3, 0x7756f24f, 0x9, 0x5, 0x3, 0x1ff, 0x7ff, 0x10000, 0x0, 0x4, 0x70eb, 0xccdf, 0x7f, 0x7, 0x676e, 0x0, 0x4911, 0x0, 0x7a, 0x7fff, 0x7, 0x8, 0x0, 0x4, 0x6, 0x6, 0x458ae9e, 0xc81, 0x7ff, 0x80000001, 0x10000, 0x6, 0x81b, 0x3, 0xe7, 0x6, 0x10c7, 0x0, 0xff, 0x10001, 0x2, 0x3f, 0x8, 0x200, 0x5, 0x83, 0x1, 0x5, 0x81, 0x7ff, 0x5, 0x10000, 0xfffffffb, 0x8, 0x80000001, 0x0, 0xe7, 0x7fffffff, 0xaf, 0x80, 0x73e, 0x9, 0xfffffffa, 0x58, 0x3f, 0x5, 0x1, 0x7, 0xf0, 0x8a, 0x0, 0x7f, 0x8, 0x4, 0x2, 0x3, 0xff, 0x7, 0x7fffffff, 0x1000, 0x2, 0x7, 0xf44d, 0x1, 0x1, 0x1, 0x20000000, 0xa7f]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x8, 0x3, 0x3, 0x6, 0x6, 0x8, 0x80000000, 0x1800000, 0x6, 0xffffffff, 0x9, 0x8000, 0x1, 0x7c8f7321, 0xfffffff9, 0x6, 0x4, 0x5, 0x40000000, 0x1f, 0xf5c, 0x0, 0x6d, 0x0, 0x8, 0x1f, 0x3, 0x2, 0x1f, 0x68, 0x3c17936, 0x4, 0x0, 0x5, 0x5, 0x4, 0x3, 0x8, 0xff, 0x6, 0x2, 0x3, 0xcfd2, 0x5, 0x98b7, 0x25, 0x7, 0x7, 0xbb940, 0x10000, 0x2, 0x100, 0x101, 0x1, 0xe46, 0x2, 0x3, 0x3, 0x0, 0x6, 0x2, 0x7ff, 0x40911cda, 0x8001, 0x80, 0x11c5, 0x1ff, 0x0, 0x8, 0x8, 0x6, 0x7, 0x8, 0x2, 0x80000001, 0x20, 0x4, 0x80, 0x364, 0x80000000, 0xe805, 0x58c4, 0x100, 0x7, 0xb5, 0x7, 0x8, 0x9, 0x1f, 0x101, 0x3, 0x7e, 0x4, 0xfffffff7, 0x4, 0x859, 0xff, 0x1, 0xddc, 0x6, 0x200, 0x7, 0xc4a7, 0x21aa, 0x1f, 0x4, 0x7, 0x7, 0xbd, 0x9, 0x400, 0x7, 0x4, 0x81, 0x2e96, 0x7, 0x4, 0x0, 0x10001, 0xffff, 0x5, 0x7, 0x80, 0x3, 0x5, 0x400, 0xc13b, 0x1ff, 0x1, 0x3, 0x4, 0x1, 0x5, 0x3, 0x1, 0x101, 0x800000, 0x39b5, 0x5, 0x80000001, 0x7, 0xff, 0x1, 0xb07, 0x8, 0x1, 0x8, 0x7d14, 0xf29, 0x0, 0x6, 0x7, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7fffffff, 0x7, 0x7f, 0x8, 0x3f, 0x1ff, 0x7, 0x6, 0x6, 0x8, 0x10001, 0x2, 0xfffff800, 0x183, 0x8000, 0x6, 0x8, 0x5c4, 0xfffffffd, 0x7, 0xfff, 0x1ff, 0x7, 0x0, 0x4, 0x5, 0x6, 0x10001, 0x7ff, 0x80000001, 0x7b, 0x7, 0x3, 0x10001, 0xc8bb, 0x9, 0x1, 0xaae, 0x80000000, 0x42, 0x101, 0xffff7fff, 0x4, 0x7f, 0x80000000, 0x9, 0xffffff7f, 0x80, 0x2, 0x1, 0x5, 0x200, 0x3ac, 0x80, 0x7, 0x0, 0x5, 0x4, 0x2, 0x5, 0x6, 0x2, 0x7, 0x6, 0x5, 0x7, 0x3f, 0xfffffffc, 0x4040000, 0x1, 0x4, 0x10001, 0x7, 0x19, 0x7, 0x4, 0x20, 0x6, 0x3, 0x2b, 0x1c, 0xf91, 0x0, 0x0, 0x4, 0x3, 0x7, 0x9, 0x40, 0xfffff800, 0x10001, 0xff, 0x814f, 0x2, 0x3ff, 0x3, 0x2, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x463e854616692bc4, 0xe1, 0x1, 0x5, {0xff, 0x0, 0x101, 0x0, 0x81, 0x1}, {0x87, 0x2, 0x8, 0x0, 0x6, 0x1ff}, 0x7f, 0x80000001, 0x843}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xd2bf, 0x8, 0x5, 0x5c, 0x3ff, 0x3, 0x0, 0x80, 0x5b72, 0xffffffff, 0x3, 0x6, 0x7fa, 0x800, 0x5, 0x20143991, 0x8000, 0x3a9c, 0x3, 0x400, 0x9, 0x100, 0x1, 0xbe, 0x5, 0x100, 0x5d2e8f79, 0xfff, 0x2, 0x20, 0x1, 0xffff, 0x1000, 0x2, 0x6, 0x7bb, 0x9, 0x0, 0x7, 0x1, 0x200, 0x0, 0xf966, 0x7ff, 0x7fffffff, 0xff, 0x9, 0x8, 0x7ff, 0x3, 0xcf8, 0x3, 0x0, 0x2, 0xf10, 0x37, 0xffffffff, 0x401, 0x401, 0x7, 0x800, 0x8, 0x800, 0x400, 0x3, 0x6, 0x400, 0x7a408190, 0x8, 0x8, 0x6, 0x3, 0xfffffff7, 0x7, 0x80000000, 0x5, 0xa4, 0x1, 0x7ff, 0x3e95, 0x3ff, 0xffff, 0x3d, 0x6, 0x8000, 0x5c7, 0xffffffff, 0x27f, 0xffff, 0x10001, 0x6f1a, 0x4, 0x3, 0x100, 0x2, 0xa5a, 0x9, 0x0, 0x7fffffff, 0x1ff, 0xff, 0x9325, 0x10000, 0x35, 0x0, 0x3, 0x7fff, 0x136, 0x5, 0x800, 0x4, 0x3ff, 0x1000, 0x8, 0x1ff, 0x40, 0x1, 0x32, 0x6e, 0x4, 0xfcc, 0x6, 0x6, 0x2, 0x8, 0x0, 0x200, 0x7ff, 0xff, 0x9, 0x4, 0x3, 0x3, 0x7fffffff, 0x0, 0x6, 0x7e6, 0x7, 0x1f, 0x4, 0x200, 0x1, 0x7, 0x9, 0x80000001, 0x20, 0x8000, 0x1, 0x2, 0x8001, 0x101, 0xdd, 0xfff, 0x4ab7, 0x7, 0x5a4, 0x5, 0x6, 0x3ff, 0x80000000, 0x20, 0xbaa7, 0x3, 0x4, 0x0, 0x5, 0x9, 0xe, 0x6, 0xffff52b0, 0x45c4, 0x6, 0x7, 0x0, 0x7, 0x2, 0x80000000, 0xff, 0x1000, 0x369, 0x100, 0x7ff, 0x2, 0x1, 0x5, 0x0, 0x400, 0x3d32, 0x7, 0x5, 0x8, 0x0, 0x6, 0x0, 0x1253, 0x200, 0x0, 0xf8000000, 0x1, 0x9a, 0x7fff, 0x2, 0x10000, 0x3, 0x40, 0x7fffffff, 0x7, 0x2, 0x6, 0xffffff50, 0xfff, 0x2, 0x5, 0x1584, 0x7, 0x0, 0x6, 0x20, 0x5, 0x2, 0x4, 0x5, 0xc141, 0x8, 0x5618f9d3, 0x8, 0xa559, 0x22c, 0x8, 0x263d, 0x1, 0x8, 0xbb, 0x0, 0x6, 0x5, 0x8, 0x9, 0x1, 0xe4, 0x7fffffff, 0x2, 0x2, 0x10001, 0x97c, 0x0, 0x4, 0x800, 0x400, 0x2, 0x7, 0x63fa2334, 0x7, 0x81, 0x12]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfc9, 0x0, 0x4, 0x0, 0x6, 0x71, 0x20, 0x8000, 0x58fa, 0x200, 0x5, 0x4, 0x3, 0x57, 0x200, 0x4, 0x80000001, 0x1ff, 0x0, 0x94e, 0x1, 0x400, 0x1ff, 0x3a1e, 0xfffffffd, 0xf7, 0x6ef1, 0x4, 0x1, 0x5, 0x6, 0x2, 0xfffffffa, 0xff, 0x2, 0x3, 0xcdd, 0xabad, 0x3, 0x2, 0x7, 0x3, 0x7, 0x9, 0xfffffe01, 0x8, 0x4, 0xff, 0x4, 0x7, 0x401, 0x9, 0x1, 0xffffcd19, 0x0, 0x3, 0x16071a6c, 0x2, 0x81, 0x1, 0x6, 0xfff, 0x1, 0x8, 0x3, 0xc949, 0x40, 0x8, 0x3, 0x367, 0x1, 0x0, 0x3, 0x3, 0x2, 0xfff, 0x0, 0x1, 0x3, 0x7ff, 0x7, 0x9, 0x1, 0x200, 0x3, 0x80, 0x1f, 0x1ff, 0xffffffff, 0x9, 0x8, 0xff, 0x1f, 0x7ff, 0xd0da, 0x9da, 0x4, 0x6, 0x18000000, 0xfffffff9, 0xc6, 0x4, 0x100, 0x3, 0x8, 0x0, 0x6, 0x5ef, 0x2, 0x98, 0x3, 0x4, 0x4, 0xee, 0x9009, 0x7, 0x10000, 0x1, 0x4a, 0x5, 0x67e, 0xffffffff, 0x9, 0x7, 0xd0, 0x3, 0x80000000, 0x5, 0x8001, 0xffff, 0x3f00000, 0x5, 0x2, 0xfff, 0x1, 0x2, 0x2, 0xa1, 0x80000000, 0xffffffd1, 0x729ab2f4, 0x2, 0x0, 0x5, 0x1, 0x3d, 0x6dda, 0x3, 0x100, 0x7, 0x1, 0x4, 0x3, 0x401, 0x401, 0x7fff, 0x7, 0x3, 0x400, 0xffff8000, 0x7, 0x0, 0x3, 0x80, 0x6, 0x3, 0xb1ec, 0x10001, 0x2, 0x3, 0x6, 0x4, 0x200, 0x3, 0x7ff, 0x2819, 0x400, 0x7fffffff, 0xfffffffb, 0x2, 0xffffffff, 0x1000, 0x5, 0x5, 0x6, 0x0, 0xe1, 0x800, 0x7a47, 0x0, 0xffffffff, 0x8, 0x9, 0x80, 0xfffffff9, 0x1, 0x7, 0x14, 0x1, 0x1, 0x4, 0x1, 0x7, 0xffff, 0x1, 0x9a, 0x80000001, 0xcc, 0x401, 0x3, 0x7fff, 0xfffffff7, 0xd01, 0x6, 0x0, 0xf612, 0x401, 0xfc5b, 0xffffff00, 0x1, 0x40, 0x7f, 0x81, 0x800, 0x8, 0x757, 0x1, 0x9, 0x6d, 0xfffffffb, 0x2, 0x8, 0x0, 0xccae, 0x6, 0x8, 0xa576, 0x8, 0xffffffff, 0x71b0fd0b, 0x6, 0x3ff, 0x7, 0x1000, 0x5, 0xfffffff7, 0x10000000, 0x0, 0x7fffffff, 0x1, 0x8001, 0xcffb, 0x9, 0xc5, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1, 0x9f, 0x7fffffff, 0xb5, 0xff, 0x4, 0xfffffff7, 0x5, 0x3, 0x7fffffff, 0x991, 0x1, 0x9, 0xfffffff8, 0x3, 0x80000001, 0x7f9, 0xffff, 0x10001, 0x0, 0xc8, 0x3f, 0x400, 0x1, 0x8, 0x44b, 0x5, 0x0, 0x7fffffff, 0x6, 0x400, 0x80000000, 0x2, 0x7, 0x2, 0x2, 0x2, 0x0, 0x9bb8, 0x80000001, 0x6, 0x9, 0x1ff, 0x3ff, 0x6, 0x100, 0xfffffeff, 0x9be, 0x4, 0x4, 0x0, 0x80000000, 0x0, 0x4a9534f5, 0x200, 0x9, 0xb213, 0x1ff, 0xe, 0x1, 0x19e, 0x9, 0x8000, 0x8, 0x1f, 0x7, 0x653d, 0x3a, 0x80, 0x2, 0x9, 0x2, 0x1fc00, 0x3, 0x5, 0xffffffff, 0xfff, 0x33, 0xffffffff, 0x4, 0x101, 0xf3, 0x1, 0x0, 0x3ff, 0x10001, 0xffffffff, 0xffffffff, 0x8, 0x7fff, 0xfffffffc, 0x7, 0x0, 0x6, 0x6, 0x58ba, 0x4, 0x3, 0x1, 0x2, 0x6, 0x9, 0x8, 0xffffffea, 0x9, 0x7, 0x8001, 0x1, 0x6, 0x1, 0x3, 0x3, 0x3, 0x8, 0xffff472e, 0x3, 0x0, 0x10001, 0x2c, 0x0, 0x9, 0x3, 0x5, 0x3, 0x8, 0x72f, 0x2, 0x7fffffff, 0x40, 0x8, 0x1b86, 0x3, 0x8, 0xfff, 0x79, 0x1f, 0x4, 0x400, 0x1f, 0x1, 0x6, 0x3b5, 0x1, 0x5, 0x9, 0x8, 0x4, 0x3, 0xb49, 0xf6, 0x8, 0x7ff, 0x7, 0x0, 0xff, 0x0, 0xffffffff, 0xffffffff, 0x6, 0x6d4, 0x80000001, 0x400, 0xff, 0x9, 0x20, 0x4, 0x5, 0x6, 0x66, 0x80000000, 0x7, 0x88, 0x9, 0x1, 0x5, 0xffff, 0x0, 0x7, 0x9, 0x2, 0x10000, 0x0, 0x7, 0x1, 0x2, 0x80000000, 0x4, 0x4, 0x1, 0xff, 0x1, 0x101, 0x1, 0xac6, 0x8, 0x2, 0x7, 0x10001, 0xffffcb7a, 0x4, 0x0, 0xffff, 0x0, 0x7f, 0x8, 0x80000000, 0x0, 0x5ed9, 0x6, 0x1, 0x3ff, 0x7, 0x101, 0x12000, 0x1f, 0x8, 0x81, 0x5, 0x82b, 0x4, 0x904, 0x4, 0x7ff, 0x200, 0x6, 0xc89, 0x1ff, 0x4, 0x3, 0xffffffff, 0x2, 0xd74, 0x0, 0x6, 0x800, 0x8000, 0x1, 0x6a1, 0x200, 0x5, 0x85bd, 0x9, 0x1, 0xffffff83, 0x8000, 0x1ff, 0x7fffffff, 0x400, 0x6, 0x3, 0x5, 0x8, 0xfff, 0x800000, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x6b}]}}]}, 0x14f4}, 0x1, 0x0, 0x0, 0x40}, 0x40028d0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2397.286275][ T4449] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2397.294257][ T4449] [ 2397.493391][T28611] usb 2-1: new high-speed USB device number 125 using dummy_hcd 15:03:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 59) [ 2397.743306][T28611] usb 2-1: Using ep0 maxpacket: 16 [ 2397.863497][T28611] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2397.877967][T28611] usb 2-1: config 0 has no interface number 0 [ 2397.887195][ T4470] FAULT_INJECTION: forcing a failure. [ 2397.887195][ T4470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.007202][ T4470] CPU: 1 PID: 4470 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2398.017245][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2398.027327][ T4470] Call Trace: [ 2398.030630][ T4470] [ 2398.033585][ T4470] dump_stack_lvl+0xcd/0x134 [ 2398.038211][ T4470] should_fail.cold+0x5/0xa [ 2398.042763][ T4470] _copy_from_user+0x2a/0x170 [ 2398.047484][ T4470] move_addr_to_kernel.part.0+0x31/0x110 [ 2398.053164][ T4470] move_addr_to_kernel+0x4f/0x70 [ 2398.058150][ T4470] io_connect+0x3c9/0x4b0 [ 2398.062521][ T4470] ? io_connect_prep+0x220/0x220 [ 2398.067509][ T4470] ? __fget_files+0x26a/0x440 [ 2398.072239][ T4470] ? io_connect_prep+0x220/0x220 [ 2398.077570][ T4470] io_issue_sqe+0x69d/0xd00 [ 2398.082111][ T4470] io_submit_sqes+0x936/0x1d10 [ 2398.086926][ T4470] __do_sys_io_uring_enter+0xadb/0x2430 [ 2398.092516][ T4470] ? lock_acquire+0x480/0x570 [ 2398.097224][ T4470] ? lock_release+0x560/0x780 [ 2398.101927][ T4470] ? rcu_read_lock_sched_held+0xd/0x70 [ 2398.107400][ T4470] ? __ct_user_exit+0xff/0x150 [ 2398.112199][ T4470] ? io_submit_sqes+0x1d10/0x1d10 [ 2398.117248][ T4470] ? lock_downgrade+0x6e0/0x6e0 [ 2398.122115][ T4470] ? vtime_user_exit+0x218/0x6c0 [ 2398.127071][ T4470] ? trace_hardirqs_on+0x2d/0x120 [ 2398.132117][ T4470] do_syscall_64+0x35/0xb0 [ 2398.136556][ T4470] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.142464][ T4470] RIP: 0033:0x7f9bb008a5a9 [ 2398.146886][ T4470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2398.166531][ T4470] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2398.174956][ T4470] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2398.182933][ T4470] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2398.190912][ T4470] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2398.198896][ T4470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:03:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2398.206896][ T4470] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2398.214887][ T4470] [ 2398.275530][T28611] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2398.291621][T28611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.339318][T28611] usb 2-1: Product: syz [ 2398.370917][T28611] usb 2-1: Manufacturer: syz [ 2398.387066][T28611] usb 2-1: SerialNumber: syz [ 2398.418364][T28611] usb 2-1: config 0 descriptor?? [ 2398.581479][ T4479] net_ratelimit: 1090 callbacks suppressed [ 2398.581502][ T4479] dccp_time_wait: time wait bucket table overflow [ 2398.595616][ T4479] dccp_time_wait: time wait bucket table overflow [ 2398.607728][ T4479] dccp_time_wait: time wait bucket table overflow [ 2398.615466][ T4479] dccp_time_wait: time wait bucket table overflow [ 2398.622948][ T4479] dccp_time_wait: time wait bucket table overflow [ 2398.631581][ T4479] dccp_time_wait: time wait bucket table overflow [ 2398.640313][ T4479] dccp_time_wait: time wait bucket table overflow [ 2398.648481][ T4479] dccp_time_wait: time wait bucket table overflow [ 2398.662697][ T4480] dccp_time_wait: time wait bucket table overflow [ 2398.671827][ T4479] dccp_time_wait: time wait bucket table overflow 15:03:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x1, 0x1a, {0x1a, 0x11, "2b508529ca2cd7a44f46a242c4554d4fa0cb52c5fd11f56d"}}, &(0x7f0000000040)={0x0, 0x3, 0x25, @string={0x25, 0x3, "10c04f783b0da45676f0a0965c517d7662917a06f708430f248c07859e891ee43de6d4"}}, &(0x7f00000000c0)={0x0, 0xf, 0x18c, {0x5, 0xf, 0x18c, 0x3, [@generic={0xf3, 0x10, 0x4, "90ed5b1fdcca7f832f8441a0f3679c1e75f696e2b6727526b3d313502eeaee530e19978c028a6d50df6e291ab8dfe1a9a8686b60732125b7edbfbefb7a2b87ed01a18004860282a2353f89971f1975d09424fbc33de6bc3abfbd01c38fa83f613d3ca45426887521ae30c6a2f8cd2a8c0a14d8bb6c7a16215a3808a9c331aa1ca788fcd590fbf14518b72a90e3085829b7815d149790c0692ae9fc4651d15f406cb223bfd8f25c3822339f8cf30f5c8743cd35f08841b4441ae0f66da23965987a6373fc0732fde85de5116b49dd9191204a89685a2f2f103b4dbb74c5f9427af5f9ba9861092bf204875bfe3e328934"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x0, 0x482}, @generic={0x8a, 0x10, 0x4, "95a7f0b4aaf7a8f8d2dd9267b4da9c4be6dca17ef23861a23a6dd8f3fbc7b1f50a6f59b45a05b5827fe267cd26f6972cbc0e07e667482ff5c43ebd55665b095dd02606a8eaad70953f359866fb7f095ebf8fc0472c72b5b55fb9c89fd4a8fe0b8d6b9e54ad76393184c7ed0f8ac513fc3793d2531cb261afd88a694a0b2c15241ef86d683524d0"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x3, 0x6, "986447f3", "9fa830d0"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x7, 0x1, 0x81, 0x63ab, 0x35d0}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0xe, 0x3b, "7134dec130b52c30aac829b1c67c762168386606b4e6d7c221ddfa92b21fc4b4cde06ef06c30aa99255f4367e6328dfdbf635342e448bb066ff5b9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x1c}, &(0x7f0000000540)={0x40, 0xb, 0x2, "8b0d"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1f}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "2903"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x80}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xff}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x1, 0x1a, {0x1a, 0x11, "2b508529ca2cd7a44f46a242c4554d4fa0cb52c5fd11f56d"}}, &(0x7f0000000040)={0x0, 0x3, 0x25, @string={0x25, 0x3, "10c04f783b0da45676f0a0965c517d7662917a06f708430f248c07859e891ee43de6d4"}}, &(0x7f00000000c0)={0x0, 0xf, 0x18c, {0x5, 0xf, 0x18c, 0x3, [@generic={0xf3, 0x10, 0x4, "90ed5b1fdcca7f832f8441a0f3679c1e75f696e2b6727526b3d313502eeaee530e19978c028a6d50df6e291ab8dfe1a9a8686b60732125b7edbfbefb7a2b87ed01a18004860282a2353f89971f1975d09424fbc33de6bc3abfbd01c38fa83f613d3ca45426887521ae30c6a2f8cd2a8c0a14d8bb6c7a16215a3808a9c331aa1ca788fcd590fbf14518b72a90e3085829b7815d149790c0692ae9fc4651d15f406cb223bfd8f25c3822339f8cf30f5c8743cd35f08841b4441ae0f66da23965987a6373fc0732fde85de5116b49dd9191204a89685a2f2f103b4dbb74c5f9427af5f9ba9861092bf204875bfe3e328934"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x0, 0x482}, @generic={0x8a, 0x10, 0x4, "95a7f0b4aaf7a8f8d2dd9267b4da9c4be6dca17ef23861a23a6dd8f3fbc7b1f50a6f59b45a05b5827fe267cd26f6972cbc0e07e667482ff5c43ebd55665b095dd02606a8eaad70953f359866fb7f095ebf8fc0472c72b5b55fb9c89fd4a8fe0b8d6b9e54ad76393184c7ed0f8ac513fc3793d2531cb261afd88a694a0b2c15241ef86d683524d0"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x3, 0x6, "986447f3", "9fa830d0"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x7, 0x1, 0x81, 0x63ab, 0x35d0}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0xe, 0x3b, "7134dec130b52c30aac829b1c67c762168386606b4e6d7c221ddfa92b21fc4b4cde06ef06c30aa99255f4367e6328dfdbf635342e448bb066ff5b9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x1c}, &(0x7f0000000540)={0x40, 0xb, 0x2, "8b0d"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1f}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "2903"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x80}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xff}}) (async) 15:03:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r3, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000340)="870975fab258570a9ad185ac5cbe4bf641854c21a0d9fec4bb302d0a1c28d9ca635ee81e81a60e52e20ea5be724d6ba31b821e5a036c5a551177cc6a1a75df89c41a9c85a353ae0480e871046bd0ed68828639bb7870d120cf8fcf72b57870454a0021e6c812f2", 0x67}, {&(0x7f00000003c0)="ce5b09f1e503093871013a3ac75f774566f61b2c9df45fe79c22b7b67db065ee3ef9afaa9d6ed5aaa26834fff9bf8b1f481affe2d847343845101642ea5594525bbd52080f4c30c4516cd8530ec92b29ab640921ec24eb6a2b524237fc6d9555d814c6ec5fe71da0460822db0383e7b51e19a31a4fdccc99dd87d21d3c10486a2f8ac849a7b894692fb1227c3f0a1ab703fbcbf2d77e1648e93ecfc0a36636d0acb999fa417101d3d80c151242161f16dea6c2eadc34b004824795ab49184391e6f1d659d52dc672b8e394360168c9f481c4eb3265395560d7de560f79a2ce", 0xdf}], 0x2, 0x15}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x10002}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@newchain={0x14f4, 0x64, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0x4, 0x3}, {0xfff2, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2c, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xff}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}, @filter_kind_options=@f_route={{0xa}, {0x148c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x1478, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x76944553, 0x101, 0x5, 0x7fffffff, 0x8, 0xffff, 0xfffffffe, 0x4, 0x81, 0xfffffffa, 0x200, 0x5396, 0x9, 0xff, 0xffffffff, 0x2e8, 0xe0000000, 0x8, 0x7, 0x1f, 0x3ff, 0xffffffff, 0x4, 0x7, 0xac, 0x1f, 0x1f, 0x6, 0xffffffff, 0x81, 0xd84a, 0x1, 0x80000001, 0x26, 0x2, 0x3, 0x0, 0x2, 0x800, 0x7fff, 0x10001, 0xa7e, 0x7fffffff, 0xc6e, 0x2, 0xc38, 0xffff0000, 0x7d5, 0xfffffffa, 0xffff0000, 0xfffffffe, 0xfffffffc, 0x800, 0xf6f, 0x0, 0x1ea, 0x4, 0x2, 0x53, 0x1, 0x7fffffff, 0x0, 0x20, 0x5, 0x2, 0x8, 0x6, 0x9, 0x10001, 0x10000, 0x1, 0x3, 0x7, 0x8, 0xffff0e0e, 0xc216, 0x7, 0x5, 0x101, 0x1ff, 0x10000, 0x10001, 0x5, 0x1, 0x1f, 0x401, 0x1f, 0x9, 0x5, 0x8, 0x6, 0x9, 0x0, 0xfffffffe, 0x400, 0x101, 0xf48, 0x7fffffff, 0x10001, 0x7, 0x10001, 0x9, 0x1f, 0x4, 0x9, 0xfffffffe, 0x7fff, 0x400, 0x5, 0x100, 0x7ff, 0x100, 0x401, 0x1, 0x8, 0x6, 0x76f, 0x7, 0x5, 0x9, 0x3, 0x0, 0x1, 0x1, 0x9, 0x4, 0x7fffffff, 0x8000, 0x6, 0x80, 0x2, 0x100, 0x4, 0x401, 0xd56, 0x5, 0x8, 0x1000, 0x8, 0x7, 0x9, 0x5, 0x6, 0xffffb246, 0xffff, 0x1, 0x3, 0x2, 0x81, 0xffff523b, 0x0, 0x8, 0x71e, 0xdb, 0x4, 0xd39, 0x20, 0xffffffff, 0x8001, 0x7, 0x401, 0x80000001, 0x8, 0x6, 0x6, 0x371c, 0x6, 0x401, 0x3, 0x7756f24f, 0x9, 0x5, 0x3, 0x1ff, 0x7ff, 0x10000, 0x0, 0x4, 0x70eb, 0xccdf, 0x7f, 0x7, 0x676e, 0x0, 0x4911, 0x0, 0x7a, 0x7fff, 0x7, 0x8, 0x0, 0x4, 0x6, 0x6, 0x458ae9e, 0xc81, 0x7ff, 0x80000001, 0x10000, 0x6, 0x81b, 0x3, 0xe7, 0x6, 0x10c7, 0x0, 0xff, 0x10001, 0x2, 0x3f, 0x8, 0x200, 0x5, 0x83, 0x1, 0x5, 0x81, 0x7ff, 0x5, 0x10000, 0xfffffffb, 0x8, 0x80000001, 0x0, 0xe7, 0x7fffffff, 0xaf, 0x80, 0x73e, 0x9, 0xfffffffa, 0x58, 0x3f, 0x5, 0x1, 0x7, 0xf0, 0x8a, 0x0, 0x7f, 0x8, 0x4, 0x2, 0x3, 0xff, 0x7, 0x7fffffff, 0x1000, 0x2, 0x7, 0xf44d, 0x1, 0x1, 0x1, 0x20000000, 0xa7f]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x8, 0x3, 0x3, 0x6, 0x6, 0x8, 0x80000000, 0x1800000, 0x6, 0xffffffff, 0x9, 0x8000, 0x1, 0x7c8f7321, 0xfffffff9, 0x6, 0x4, 0x5, 0x40000000, 0x1f, 0xf5c, 0x0, 0x6d, 0x0, 0x8, 0x1f, 0x3, 0x2, 0x1f, 0x68, 0x3c17936, 0x4, 0x0, 0x5, 0x5, 0x4, 0x3, 0x8, 0xff, 0x6, 0x2, 0x3, 0xcfd2, 0x5, 0x98b7, 0x25, 0x7, 0x7, 0xbb940, 0x10000, 0x2, 0x100, 0x101, 0x1, 0xe46, 0x2, 0x3, 0x3, 0x0, 0x6, 0x2, 0x7ff, 0x40911cda, 0x8001, 0x80, 0x11c5, 0x1ff, 0x0, 0x8, 0x8, 0x6, 0x7, 0x8, 0x2, 0x80000001, 0x20, 0x4, 0x80, 0x364, 0x80000000, 0xe805, 0x58c4, 0x100, 0x7, 0xb5, 0x7, 0x8, 0x9, 0x1f, 0x101, 0x3, 0x7e, 0x4, 0xfffffff7, 0x4, 0x859, 0xff, 0x1, 0xddc, 0x6, 0x200, 0x7, 0xc4a7, 0x21aa, 0x1f, 0x4, 0x7, 0x7, 0xbd, 0x9, 0x400, 0x7, 0x4, 0x81, 0x2e96, 0x7, 0x4, 0x0, 0x10001, 0xffff, 0x5, 0x7, 0x80, 0x3, 0x5, 0x400, 0xc13b, 0x1ff, 0x1, 0x3, 0x4, 0x1, 0x5, 0x3, 0x1, 0x101, 0x800000, 0x39b5, 0x5, 0x80000001, 0x7, 0xff, 0x1, 0xb07, 0x8, 0x1, 0x8, 0x7d14, 0xf29, 0x0, 0x6, 0x7, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7fffffff, 0x7, 0x7f, 0x8, 0x3f, 0x1ff, 0x7, 0x6, 0x6, 0x8, 0x10001, 0x2, 0xfffff800, 0x183, 0x8000, 0x6, 0x8, 0x5c4, 0xfffffffd, 0x7, 0xfff, 0x1ff, 0x7, 0x0, 0x4, 0x5, 0x6, 0x10001, 0x7ff, 0x80000001, 0x7b, 0x7, 0x3, 0x10001, 0xc8bb, 0x9, 0x1, 0xaae, 0x80000000, 0x42, 0x101, 0xffff7fff, 0x4, 0x7f, 0x80000000, 0x9, 0xffffff7f, 0x80, 0x2, 0x1, 0x5, 0x200, 0x3ac, 0x80, 0x7, 0x0, 0x5, 0x4, 0x2, 0x5, 0x6, 0x2, 0x7, 0x6, 0x5, 0x7, 0x3f, 0xfffffffc, 0x4040000, 0x1, 0x4, 0x10001, 0x7, 0x19, 0x7, 0x4, 0x20, 0x6, 0x3, 0x2b, 0x1c, 0xf91, 0x0, 0x0, 0x4, 0x3, 0x7, 0x9, 0x40, 0xfffff800, 0x10001, 0xff, 0x814f, 0x2, 0x3ff, 0x3, 0x2, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x463e854616692bc4, 0xe1, 0x1, 0x5, {0xff, 0x0, 0x101, 0x0, 0x81, 0x1}, {0x87, 0x2, 0x8, 0x0, 0x6, 0x1ff}, 0x7f, 0x80000001, 0x843}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xd2bf, 0x8, 0x5, 0x5c, 0x3ff, 0x3, 0x0, 0x80, 0x5b72, 0xffffffff, 0x3, 0x6, 0x7fa, 0x800, 0x5, 0x20143991, 0x8000, 0x3a9c, 0x3, 0x400, 0x9, 0x100, 0x1, 0xbe, 0x5, 0x100, 0x5d2e8f79, 0xfff, 0x2, 0x20, 0x1, 0xffff, 0x1000, 0x2, 0x6, 0x7bb, 0x9, 0x0, 0x7, 0x1, 0x200, 0x0, 0xf966, 0x7ff, 0x7fffffff, 0xff, 0x9, 0x8, 0x7ff, 0x3, 0xcf8, 0x3, 0x0, 0x2, 0xf10, 0x37, 0xffffffff, 0x401, 0x401, 0x7, 0x800, 0x8, 0x800, 0x400, 0x3, 0x6, 0x400, 0x7a408190, 0x8, 0x8, 0x6, 0x3, 0xfffffff7, 0x7, 0x80000000, 0x5, 0xa4, 0x1, 0x7ff, 0x3e95, 0x3ff, 0xffff, 0x3d, 0x6, 0x8000, 0x5c7, 0xffffffff, 0x27f, 0xffff, 0x10001, 0x6f1a, 0x4, 0x3, 0x100, 0x2, 0xa5a, 0x9, 0x0, 0x7fffffff, 0x1ff, 0xff, 0x9325, 0x10000, 0x35, 0x0, 0x3, 0x7fff, 0x136, 0x5, 0x800, 0x4, 0x3ff, 0x1000, 0x8, 0x1ff, 0x40, 0x1, 0x32, 0x6e, 0x4, 0xfcc, 0x6, 0x6, 0x2, 0x8, 0x0, 0x200, 0x7ff, 0xff, 0x9, 0x4, 0x3, 0x3, 0x7fffffff, 0x0, 0x6, 0x7e6, 0x7, 0x1f, 0x4, 0x200, 0x1, 0x7, 0x9, 0x80000001, 0x20, 0x8000, 0x1, 0x2, 0x8001, 0x101, 0xdd, 0xfff, 0x4ab7, 0x7, 0x5a4, 0x5, 0x6, 0x3ff, 0x80000000, 0x20, 0xbaa7, 0x3, 0x4, 0x0, 0x5, 0x9, 0xe, 0x6, 0xffff52b0, 0x45c4, 0x6, 0x7, 0x0, 0x7, 0x2, 0x80000000, 0xff, 0x1000, 0x369, 0x100, 0x7ff, 0x2, 0x1, 0x5, 0x0, 0x400, 0x3d32, 0x7, 0x5, 0x8, 0x0, 0x6, 0x0, 0x1253, 0x200, 0x0, 0xf8000000, 0x1, 0x9a, 0x7fff, 0x2, 0x10000, 0x3, 0x40, 0x7fffffff, 0x7, 0x2, 0x6, 0xffffff50, 0xfff, 0x2, 0x5, 0x1584, 0x7, 0x0, 0x6, 0x20, 0x5, 0x2, 0x4, 0x5, 0xc141, 0x8, 0x5618f9d3, 0x8, 0xa559, 0x22c, 0x8, 0x263d, 0x1, 0x8, 0xbb, 0x0, 0x6, 0x5, 0x8, 0x9, 0x1, 0xe4, 0x7fffffff, 0x2, 0x2, 0x10001, 0x97c, 0x0, 0x4, 0x800, 0x400, 0x2, 0x7, 0x63fa2334, 0x7, 0x81, 0x12]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfc9, 0x0, 0x4, 0x0, 0x6, 0x71, 0x20, 0x8000, 0x58fa, 0x200, 0x5, 0x4, 0x3, 0x57, 0x200, 0x4, 0x80000001, 0x1ff, 0x0, 0x94e, 0x1, 0x400, 0x1ff, 0x3a1e, 0xfffffffd, 0xf7, 0x6ef1, 0x4, 0x1, 0x5, 0x6, 0x2, 0xfffffffa, 0xff, 0x2, 0x3, 0xcdd, 0xabad, 0x3, 0x2, 0x7, 0x3, 0x7, 0x9, 0xfffffe01, 0x8, 0x4, 0xff, 0x4, 0x7, 0x401, 0x9, 0x1, 0xffffcd19, 0x0, 0x3, 0x16071a6c, 0x2, 0x81, 0x1, 0x6, 0xfff, 0x1, 0x8, 0x3, 0xc949, 0x40, 0x8, 0x3, 0x367, 0x1, 0x0, 0x3, 0x3, 0x2, 0xfff, 0x0, 0x1, 0x3, 0x7ff, 0x7, 0x9, 0x1, 0x200, 0x3, 0x80, 0x1f, 0x1ff, 0xffffffff, 0x9, 0x8, 0xff, 0x1f, 0x7ff, 0xd0da, 0x9da, 0x4, 0x6, 0x18000000, 0xfffffff9, 0xc6, 0x4, 0x100, 0x3, 0x8, 0x0, 0x6, 0x5ef, 0x2, 0x98, 0x3, 0x4, 0x4, 0xee, 0x9009, 0x7, 0x10000, 0x1, 0x4a, 0x5, 0x67e, 0xffffffff, 0x9, 0x7, 0xd0, 0x3, 0x80000000, 0x5, 0x8001, 0xffff, 0x3f00000, 0x5, 0x2, 0xfff, 0x1, 0x2, 0x2, 0xa1, 0x80000000, 0xffffffd1, 0x729ab2f4, 0x2, 0x0, 0x5, 0x1, 0x3d, 0x6dda, 0x3, 0x100, 0x7, 0x1, 0x4, 0x3, 0x401, 0x401, 0x7fff, 0x7, 0x3, 0x400, 0xffff8000, 0x7, 0x0, 0x3, 0x80, 0x6, 0x3, 0xb1ec, 0x10001, 0x2, 0x3, 0x6, 0x4, 0x200, 0x3, 0x7ff, 0x2819, 0x400, 0x7fffffff, 0xfffffffb, 0x2, 0xffffffff, 0x1000, 0x5, 0x5, 0x6, 0x0, 0xe1, 0x800, 0x7a47, 0x0, 0xffffffff, 0x8, 0x9, 0x80, 0xfffffff9, 0x1, 0x7, 0x14, 0x1, 0x1, 0x4, 0x1, 0x7, 0xffff, 0x1, 0x9a, 0x80000001, 0xcc, 0x401, 0x3, 0x7fff, 0xfffffff7, 0xd01, 0x6, 0x0, 0xf612, 0x401, 0xfc5b, 0xffffff00, 0x1, 0x40, 0x7f, 0x81, 0x800, 0x8, 0x757, 0x1, 0x9, 0x6d, 0xfffffffb, 0x2, 0x8, 0x0, 0xccae, 0x6, 0x8, 0xa576, 0x8, 0xffffffff, 0x71b0fd0b, 0x6, 0x3ff, 0x7, 0x1000, 0x5, 0xfffffff7, 0x10000000, 0x0, 0x7fffffff, 0x1, 0x8001, 0xcffb, 0x9, 0xc5, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1, 0x9f, 0x7fffffff, 0xb5, 0xff, 0x4, 0xfffffff7, 0x5, 0x3, 0x7fffffff, 0x991, 0x1, 0x9, 0xfffffff8, 0x3, 0x80000001, 0x7f9, 0xffff, 0x10001, 0x0, 0xc8, 0x3f, 0x400, 0x1, 0x8, 0x44b, 0x5, 0x0, 0x7fffffff, 0x6, 0x400, 0x80000000, 0x2, 0x7, 0x2, 0x2, 0x2, 0x0, 0x9bb8, 0x80000001, 0x6, 0x9, 0x1ff, 0x3ff, 0x6, 0x100, 0xfffffeff, 0x9be, 0x4, 0x4, 0x0, 0x80000000, 0x0, 0x4a9534f5, 0x200, 0x9, 0xb213, 0x1ff, 0xe, 0x1, 0x19e, 0x9, 0x8000, 0x8, 0x1f, 0x7, 0x653d, 0x3a, 0x80, 0x2, 0x9, 0x2, 0x1fc00, 0x3, 0x5, 0xffffffff, 0xfff, 0x33, 0xffffffff, 0x4, 0x101, 0xf3, 0x1, 0x0, 0x3ff, 0x10001, 0xffffffff, 0xffffffff, 0x8, 0x7fff, 0xfffffffc, 0x7, 0x0, 0x6, 0x6, 0x58ba, 0x4, 0x3, 0x1, 0x2, 0x6, 0x9, 0x8, 0xffffffea, 0x9, 0x7, 0x8001, 0x1, 0x6, 0x1, 0x3, 0x3, 0x3, 0x8, 0xffff472e, 0x3, 0x0, 0x10001, 0x2c, 0x0, 0x9, 0x3, 0x5, 0x3, 0x8, 0x72f, 0x2, 0x7fffffff, 0x40, 0x8, 0x1b86, 0x3, 0x8, 0xfff, 0x79, 0x1f, 0x4, 0x400, 0x1f, 0x1, 0x6, 0x3b5, 0x1, 0x5, 0x9, 0x8, 0x4, 0x3, 0xb49, 0xf6, 0x8, 0x7ff, 0x7, 0x0, 0xff, 0x0, 0xffffffff, 0xffffffff, 0x6, 0x6d4, 0x80000001, 0x400, 0xff, 0x9, 0x20, 0x4, 0x5, 0x6, 0x66, 0x80000000, 0x7, 0x88, 0x9, 0x1, 0x5, 0xffff, 0x0, 0x7, 0x9, 0x2, 0x10000, 0x0, 0x7, 0x1, 0x2, 0x80000000, 0x4, 0x4, 0x1, 0xff, 0x1, 0x101, 0x1, 0xac6, 0x8, 0x2, 0x7, 0x10001, 0xffffcb7a, 0x4, 0x0, 0xffff, 0x0, 0x7f, 0x8, 0x80000000, 0x0, 0x5ed9, 0x6, 0x1, 0x3ff, 0x7, 0x101, 0x12000, 0x1f, 0x8, 0x81, 0x5, 0x82b, 0x4, 0x904, 0x4, 0x7ff, 0x200, 0x6, 0xc89, 0x1ff, 0x4, 0x3, 0xffffffff, 0x2, 0xd74, 0x0, 0x6, 0x800, 0x8000, 0x1, 0x6a1, 0x200, 0x5, 0x85bd, 0x9, 0x1, 0xffffff83, 0x8000, 0x1ff, 0x7fffffff, 0x400, 0x6, 0x3, 0x5, 0x8, 0xfff, 0x800000, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x6b}]}}]}, 0x14f4}, 0x1, 0x0, 0x0, 0x40}, 0x40028d0) (rerun: 32) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 32) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 60) 15:03:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd72) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0xb16f}}, 0x18) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r7, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2399.952544][ T7] usb 2-1: USB disconnect, device number 125 15:03:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x10002}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@newchain={0x14f4, 0x64, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0x4, 0x3}, {0xfff2, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2c, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xff}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}, @filter_kind_options=@f_route={{0xa}, {0x148c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x1478, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x76944553, 0x101, 0x5, 0x7fffffff, 0x8, 0xffff, 0xfffffffe, 0x4, 0x81, 0xfffffffa, 0x200, 0x5396, 0x9, 0xff, 0xffffffff, 0x2e8, 0xe0000000, 0x8, 0x7, 0x1f, 0x3ff, 0xffffffff, 0x4, 0x7, 0xac, 0x1f, 0x1f, 0x6, 0xffffffff, 0x81, 0xd84a, 0x1, 0x80000001, 0x26, 0x2, 0x3, 0x0, 0x2, 0x800, 0x7fff, 0x10001, 0xa7e, 0x7fffffff, 0xc6e, 0x2, 0xc38, 0xffff0000, 0x7d5, 0xfffffffa, 0xffff0000, 0xfffffffe, 0xfffffffc, 0x800, 0xf6f, 0x0, 0x1ea, 0x4, 0x2, 0x53, 0x1, 0x7fffffff, 0x0, 0x20, 0x5, 0x2, 0x8, 0x6, 0x9, 0x10001, 0x10000, 0x1, 0x3, 0x7, 0x8, 0xffff0e0e, 0xc216, 0x7, 0x5, 0x101, 0x1ff, 0x10000, 0x10001, 0x5, 0x1, 0x1f, 0x401, 0x1f, 0x9, 0x5, 0x8, 0x6, 0x9, 0x0, 0xfffffffe, 0x400, 0x101, 0xf48, 0x7fffffff, 0x10001, 0x7, 0x10001, 0x9, 0x1f, 0x4, 0x9, 0xfffffffe, 0x7fff, 0x400, 0x5, 0x100, 0x7ff, 0x100, 0x401, 0x1, 0x8, 0x6, 0x76f, 0x7, 0x5, 0x9, 0x3, 0x0, 0x1, 0x1, 0x9, 0x4, 0x7fffffff, 0x8000, 0x6, 0x80, 0x2, 0x100, 0x4, 0x401, 0xd56, 0x5, 0x8, 0x1000, 0x8, 0x7, 0x9, 0x5, 0x6, 0xffffb246, 0xffff, 0x1, 0x3, 0x2, 0x81, 0xffff523b, 0x0, 0x8, 0x71e, 0xdb, 0x4, 0xd39, 0x20, 0xffffffff, 0x8001, 0x7, 0x401, 0x80000001, 0x8, 0x6, 0x6, 0x371c, 0x6, 0x401, 0x3, 0x7756f24f, 0x9, 0x5, 0x3, 0x1ff, 0x7ff, 0x10000, 0x0, 0x4, 0x70eb, 0xccdf, 0x7f, 0x7, 0x676e, 0x0, 0x4911, 0x0, 0x7a, 0x7fff, 0x7, 0x8, 0x0, 0x4, 0x6, 0x6, 0x458ae9e, 0xc81, 0x7ff, 0x80000001, 0x10000, 0x6, 0x81b, 0x3, 0xe7, 0x6, 0x10c7, 0x0, 0xff, 0x10001, 0x2, 0x3f, 0x8, 0x200, 0x5, 0x83, 0x1, 0x5, 0x81, 0x7ff, 0x5, 0x10000, 0xfffffffb, 0x8, 0x80000001, 0x0, 0xe7, 0x7fffffff, 0xaf, 0x80, 0x73e, 0x9, 0xfffffffa, 0x58, 0x3f, 0x5, 0x1, 0x7, 0xf0, 0x8a, 0x0, 0x7f, 0x8, 0x4, 0x2, 0x3, 0xff, 0x7, 0x7fffffff, 0x1000, 0x2, 0x7, 0xf44d, 0x1, 0x1, 0x1, 0x20000000, 0xa7f]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x8, 0x3, 0x3, 0x6, 0x6, 0x8, 0x80000000, 0x1800000, 0x6, 0xffffffff, 0x9, 0x8000, 0x1, 0x7c8f7321, 0xfffffff9, 0x6, 0x4, 0x5, 0x40000000, 0x1f, 0xf5c, 0x0, 0x6d, 0x0, 0x8, 0x1f, 0x3, 0x2, 0x1f, 0x68, 0x3c17936, 0x4, 0x0, 0x5, 0x5, 0x4, 0x3, 0x8, 0xff, 0x6, 0x2, 0x3, 0xcfd2, 0x5, 0x98b7, 0x25, 0x7, 0x7, 0xbb940, 0x10000, 0x2, 0x100, 0x101, 0x1, 0xe46, 0x2, 0x3, 0x3, 0x0, 0x6, 0x2, 0x7ff, 0x40911cda, 0x8001, 0x80, 0x11c5, 0x1ff, 0x0, 0x8, 0x8, 0x6, 0x7, 0x8, 0x2, 0x80000001, 0x20, 0x4, 0x80, 0x364, 0x80000000, 0xe805, 0x58c4, 0x100, 0x7, 0xb5, 0x7, 0x8, 0x9, 0x1f, 0x101, 0x3, 0x7e, 0x4, 0xfffffff7, 0x4, 0x859, 0xff, 0x1, 0xddc, 0x6, 0x200, 0x7, 0xc4a7, 0x21aa, 0x1f, 0x4, 0x7, 0x7, 0xbd, 0x9, 0x400, 0x7, 0x4, 0x81, 0x2e96, 0x7, 0x4, 0x0, 0x10001, 0xffff, 0x5, 0x7, 0x80, 0x3, 0x5, 0x400, 0xc13b, 0x1ff, 0x1, 0x3, 0x4, 0x1, 0x5, 0x3, 0x1, 0x101, 0x800000, 0x39b5, 0x5, 0x80000001, 0x7, 0xff, 0x1, 0xb07, 0x8, 0x1, 0x8, 0x7d14, 0xf29, 0x0, 0x6, 0x7, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7fffffff, 0x7, 0x7f, 0x8, 0x3f, 0x1ff, 0x7, 0x6, 0x6, 0x8, 0x10001, 0x2, 0xfffff800, 0x183, 0x8000, 0x6, 0x8, 0x5c4, 0xfffffffd, 0x7, 0xfff, 0x1ff, 0x7, 0x0, 0x4, 0x5, 0x6, 0x10001, 0x7ff, 0x80000001, 0x7b, 0x7, 0x3, 0x10001, 0xc8bb, 0x9, 0x1, 0xaae, 0x80000000, 0x42, 0x101, 0xffff7fff, 0x4, 0x7f, 0x80000000, 0x9, 0xffffff7f, 0x80, 0x2, 0x1, 0x5, 0x200, 0x3ac, 0x80, 0x7, 0x0, 0x5, 0x4, 0x2, 0x5, 0x6, 0x2, 0x7, 0x6, 0x5, 0x7, 0x3f, 0xfffffffc, 0x4040000, 0x1, 0x4, 0x10001, 0x7, 0x19, 0x7, 0x4, 0x20, 0x6, 0x3, 0x2b, 0x1c, 0xf91, 0x0, 0x0, 0x4, 0x3, 0x7, 0x9, 0x40, 0xfffff800, 0x10001, 0xff, 0x814f, 0x2, 0x3ff, 0x3, 0x2, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x463e854616692bc4, 0xe1, 0x1, 0x5, {0xff, 0x0, 0x101, 0x0, 0x81, 0x1}, {0x87, 0x2, 0x8, 0x0, 0x6, 0x1ff}, 0x7f, 0x80000001, 0x843}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xd2bf, 0x8, 0x5, 0x5c, 0x3ff, 0x3, 0x0, 0x80, 0x5b72, 0xffffffff, 0x3, 0x6, 0x7fa, 0x800, 0x5, 0x20143991, 0x8000, 0x3a9c, 0x3, 0x400, 0x9, 0x100, 0x1, 0xbe, 0x5, 0x100, 0x5d2e8f79, 0xfff, 0x2, 0x20, 0x1, 0xffff, 0x1000, 0x2, 0x6, 0x7bb, 0x9, 0x0, 0x7, 0x1, 0x200, 0x0, 0xf966, 0x7ff, 0x7fffffff, 0xff, 0x9, 0x8, 0x7ff, 0x3, 0xcf8, 0x3, 0x0, 0x2, 0xf10, 0x37, 0xffffffff, 0x401, 0x401, 0x7, 0x800, 0x8, 0x800, 0x400, 0x3, 0x6, 0x400, 0x7a408190, 0x8, 0x8, 0x6, 0x3, 0xfffffff7, 0x7, 0x80000000, 0x5, 0xa4, 0x1, 0x7ff, 0x3e95, 0x3ff, 0xffff, 0x3d, 0x6, 0x8000, 0x5c7, 0xffffffff, 0x27f, 0xffff, 0x10001, 0x6f1a, 0x4, 0x3, 0x100, 0x2, 0xa5a, 0x9, 0x0, 0x7fffffff, 0x1ff, 0xff, 0x9325, 0x10000, 0x35, 0x0, 0x3, 0x7fff, 0x136, 0x5, 0x800, 0x4, 0x3ff, 0x1000, 0x8, 0x1ff, 0x40, 0x1, 0x32, 0x6e, 0x4, 0xfcc, 0x6, 0x6, 0x2, 0x8, 0x0, 0x200, 0x7ff, 0xff, 0x9, 0x4, 0x3, 0x3, 0x7fffffff, 0x0, 0x6, 0x7e6, 0x7, 0x1f, 0x4, 0x200, 0x1, 0x7, 0x9, 0x80000001, 0x20, 0x8000, 0x1, 0x2, 0x8001, 0x101, 0xdd, 0xfff, 0x4ab7, 0x7, 0x5a4, 0x5, 0x6, 0x3ff, 0x80000000, 0x20, 0xbaa7, 0x3, 0x4, 0x0, 0x5, 0x9, 0xe, 0x6, 0xffff52b0, 0x45c4, 0x6, 0x7, 0x0, 0x7, 0x2, 0x80000000, 0xff, 0x1000, 0x369, 0x100, 0x7ff, 0x2, 0x1, 0x5, 0x0, 0x400, 0x3d32, 0x7, 0x5, 0x8, 0x0, 0x6, 0x0, 0x1253, 0x200, 0x0, 0xf8000000, 0x1, 0x9a, 0x7fff, 0x2, 0x10000, 0x3, 0x40, 0x7fffffff, 0x7, 0x2, 0x6, 0xffffff50, 0xfff, 0x2, 0x5, 0x1584, 0x7, 0x0, 0x6, 0x20, 0x5, 0x2, 0x4, 0x5, 0xc141, 0x8, 0x5618f9d3, 0x8, 0xa559, 0x22c, 0x8, 0x263d, 0x1, 0x8, 0xbb, 0x0, 0x6, 0x5, 0x8, 0x9, 0x1, 0xe4, 0x7fffffff, 0x2, 0x2, 0x10001, 0x97c, 0x0, 0x4, 0x800, 0x400, 0x2, 0x7, 0x63fa2334, 0x7, 0x81, 0x12]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfc9, 0x0, 0x4, 0x0, 0x6, 0x71, 0x20, 0x8000, 0x58fa, 0x200, 0x5, 0x4, 0x3, 0x57, 0x200, 0x4, 0x80000001, 0x1ff, 0x0, 0x94e, 0x1, 0x400, 0x1ff, 0x3a1e, 0xfffffffd, 0xf7, 0x6ef1, 0x4, 0x1, 0x5, 0x6, 0x2, 0xfffffffa, 0xff, 0x2, 0x3, 0xcdd, 0xabad, 0x3, 0x2, 0x7, 0x3, 0x7, 0x9, 0xfffffe01, 0x8, 0x4, 0xff, 0x4, 0x7, 0x401, 0x9, 0x1, 0xffffcd19, 0x0, 0x3, 0x16071a6c, 0x2, 0x81, 0x1, 0x6, 0xfff, 0x1, 0x8, 0x3, 0xc949, 0x40, 0x8, 0x3, 0x367, 0x1, 0x0, 0x3, 0x3, 0x2, 0xfff, 0x0, 0x1, 0x3, 0x7ff, 0x7, 0x9, 0x1, 0x200, 0x3, 0x80, 0x1f, 0x1ff, 0xffffffff, 0x9, 0x8, 0xff, 0x1f, 0x7ff, 0xd0da, 0x9da, 0x4, 0x6, 0x18000000, 0xfffffff9, 0xc6, 0x4, 0x100, 0x3, 0x8, 0x0, 0x6, 0x5ef, 0x2, 0x98, 0x3, 0x4, 0x4, 0xee, 0x9009, 0x7, 0x10000, 0x1, 0x4a, 0x5, 0x67e, 0xffffffff, 0x9, 0x7, 0xd0, 0x3, 0x80000000, 0x5, 0x8001, 0xffff, 0x3f00000, 0x5, 0x2, 0xfff, 0x1, 0x2, 0x2, 0xa1, 0x80000000, 0xffffffd1, 0x729ab2f4, 0x2, 0x0, 0x5, 0x1, 0x3d, 0x6dda, 0x3, 0x100, 0x7, 0x1, 0x4, 0x3, 0x401, 0x401, 0x7fff, 0x7, 0x3, 0x400, 0xffff8000, 0x7, 0x0, 0x3, 0x80, 0x6, 0x3, 0xb1ec, 0x10001, 0x2, 0x3, 0x6, 0x4, 0x200, 0x3, 0x7ff, 0x2819, 0x400, 0x7fffffff, 0xfffffffb, 0x2, 0xffffffff, 0x1000, 0x5, 0x5, 0x6, 0x0, 0xe1, 0x800, 0x7a47, 0x0, 0xffffffff, 0x8, 0x9, 0x80, 0xfffffff9, 0x1, 0x7, 0x14, 0x1, 0x1, 0x4, 0x1, 0x7, 0xffff, 0x1, 0x9a, 0x80000001, 0xcc, 0x401, 0x3, 0x7fff, 0xfffffff7, 0xd01, 0x6, 0x0, 0xf612, 0x401, 0xfc5b, 0xffffff00, 0x1, 0x40, 0x7f, 0x81, 0x800, 0x8, 0x757, 0x1, 0x9, 0x6d, 0xfffffffb, 0x2, 0x8, 0x0, 0xccae, 0x6, 0x8, 0xa576, 0x8, 0xffffffff, 0x71b0fd0b, 0x6, 0x3ff, 0x7, 0x1000, 0x5, 0xfffffff7, 0x10000000, 0x0, 0x7fffffff, 0x1, 0x8001, 0xcffb, 0x9, 0xc5, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1, 0x9f, 0x7fffffff, 0xb5, 0xff, 0x4, 0xfffffff7, 0x5, 0x3, 0x7fffffff, 0x991, 0x1, 0x9, 0xfffffff8, 0x3, 0x80000001, 0x7f9, 0xffff, 0x10001, 0x0, 0xc8, 0x3f, 0x400, 0x1, 0x8, 0x44b, 0x5, 0x0, 0x7fffffff, 0x6, 0x400, 0x80000000, 0x2, 0x7, 0x2, 0x2, 0x2, 0x0, 0x9bb8, 0x80000001, 0x6, 0x9, 0x1ff, 0x3ff, 0x6, 0x100, 0xfffffeff, 0x9be, 0x4, 0x4, 0x0, 0x80000000, 0x0, 0x4a9534f5, 0x200, 0x9, 0xb213, 0x1ff, 0xe, 0x1, 0x19e, 0x9, 0x8000, 0x8, 0x1f, 0x7, 0x653d, 0x3a, 0x80, 0x2, 0x9, 0x2, 0x1fc00, 0x3, 0x5, 0xffffffff, 0xfff, 0x33, 0xffffffff, 0x4, 0x101, 0xf3, 0x1, 0x0, 0x3ff, 0x10001, 0xffffffff, 0xffffffff, 0x8, 0x7fff, 0xfffffffc, 0x7, 0x0, 0x6, 0x6, 0x58ba, 0x4, 0x3, 0x1, 0x2, 0x6, 0x9, 0x8, 0xffffffea, 0x9, 0x7, 0x8001, 0x1, 0x6, 0x1, 0x3, 0x3, 0x3, 0x8, 0xffff472e, 0x3, 0x0, 0x10001, 0x2c, 0x0, 0x9, 0x3, 0x5, 0x3, 0x8, 0x72f, 0x2, 0x7fffffff, 0x40, 0x8, 0x1b86, 0x3, 0x8, 0xfff, 0x79, 0x1f, 0x4, 0x400, 0x1f, 0x1, 0x6, 0x3b5, 0x1, 0x5, 0x9, 0x8, 0x4, 0x3, 0xb49, 0xf6, 0x8, 0x7ff, 0x7, 0x0, 0xff, 0x0, 0xffffffff, 0xffffffff, 0x6, 0x6d4, 0x80000001, 0x400, 0xff, 0x9, 0x20, 0x4, 0x5, 0x6, 0x66, 0x80000000, 0x7, 0x88, 0x9, 0x1, 0x5, 0xffff, 0x0, 0x7, 0x9, 0x2, 0x10000, 0x0, 0x7, 0x1, 0x2, 0x80000000, 0x4, 0x4, 0x1, 0xff, 0x1, 0x101, 0x1, 0xac6, 0x8, 0x2, 0x7, 0x10001, 0xffffcb7a, 0x4, 0x0, 0xffff, 0x0, 0x7f, 0x8, 0x80000000, 0x0, 0x5ed9, 0x6, 0x1, 0x3ff, 0x7, 0x101, 0x12000, 0x1f, 0x8, 0x81, 0x5, 0x82b, 0x4, 0x904, 0x4, 0x7ff, 0x200, 0x6, 0xc89, 0x1ff, 0x4, 0x3, 0xffffffff, 0x2, 0xd74, 0x0, 0x6, 0x800, 0x8000, 0x1, 0x6a1, 0x200, 0x5, 0x85bd, 0x9, 0x1, 0xffffff83, 0x8000, 0x1ff, 0x7fffffff, 0x400, 0x6, 0x3, 0x5, 0x8, 0xfff, 0x800000, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x6b}]}}]}, 0x14f4}, 0x1, 0x0, 0x0, 0x40}, 0x40028d0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:22 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) r3 = accept(r2, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0xffff, 0xd5ac, 0x1, 0x2, 0xc1}, 0x14) 15:03:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0xfffffffffffffc2f) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100), 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000d, 0x10, r0, 0x21986000) [ 2400.038631][ T4504] FAULT_INJECTION: forcing a failure. [ 2400.038631][ T4504] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:03:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:03:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0xfffffffffffffc2f) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100), 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000d, 0x10, r0, 0x21986000) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0xfffffffffffffc2f) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) (async) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100), 0x8) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000d, 0x10, r0, 0x21986000) (async) [ 2400.154847][ T4504] CPU: 0 PID: 4504 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2400.164891][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2400.174964][ T4504] Call Trace: [ 2400.178250][ T4504] [ 2400.181186][ T4504] dump_stack_lvl+0xcd/0x134 [ 2400.185802][ T4504] should_fail.cold+0x5/0xa [ 2400.190329][ T4504] _copy_from_user+0x2a/0x170 [ 2400.195035][ T4504] move_addr_to_kernel.part.0+0x31/0x110 [ 2400.200705][ T4504] move_addr_to_kernel+0x4f/0x70 [ 2400.205668][ T4504] io_connect+0x3c9/0x4b0 [ 2400.210124][ T4504] ? io_connect_prep+0x220/0x220 [ 2400.215088][ T4504] ? __fget_files+0x26a/0x440 [ 2400.219788][ T4504] ? io_connect_prep+0x220/0x220 [ 2400.224762][ T4504] io_issue_sqe+0x69d/0xd00 [ 2400.229283][ T4504] io_submit_sqes+0x936/0x1d10 [ 2400.234068][ T4504] __do_sys_io_uring_enter+0xadb/0x2430 [ 2400.239636][ T4504] ? lock_acquire+0x480/0x570 [ 2400.244326][ T4504] ? lock_release+0x560/0x780 [ 2400.249012][ T4504] ? rcu_read_lock_sched_held+0xd/0x70 [ 2400.254498][ T4504] ? __ct_user_exit+0xff/0x150 [ 2400.259291][ T4504] ? io_submit_sqes+0x1d10/0x1d10 [ 2400.264335][ T4504] ? lock_downgrade+0x6e0/0x6e0 [ 2400.269197][ T4504] ? vtime_user_exit+0x218/0x6c0 [ 2400.274158][ T4504] ? trace_hardirqs_on+0x2d/0x120 [ 2400.279209][ T4504] do_syscall_64+0x35/0xb0 [ 2400.283657][ T4504] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2400.289569][ T4504] RIP: 0033:0x7f9bb008a5a9 [ 2400.293992][ T4504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2400.313609][ T4504] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2400.322032][ T4504] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2400.330015][ T4504] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2400.338254][ T4504] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2400.346248][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2400.354225][ T4504] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2400.362215][ T4504] 15:03:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0xfffffffffffffc2f) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100), 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000d, 0x10, r0, 0x21986000) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0xfffffffffffffc2f) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) (async) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100), 0x8) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000d, 0x10, r0, 0x21986000) (async) 15:03:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x8, 0x800, 0x0, 0x7, 0x400}, 0x14) bind$inet(r0, &(0x7f0000000040)={0x2, 0x100, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000200)={&(0x7f00000002c0)=""/124, 0x7c}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) [ 2400.575894][ T7] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2400.834877][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2400.983747][ T7] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2400.994926][ T7] usb 2-1: config 0 has no interface number 0 [ 2401.184617][ T7] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2401.194423][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.205767][ T7] usb 2-1: Product: syz [ 2401.210003][ T7] usb 2-1: Manufacturer: syz [ 2401.215342][ T7] usb 2-1: SerialNumber: syz [ 2401.221274][ T7] usb 2-1: config 0 descriptor?? [ 2401.826465][ T4545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.837504][ T4545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:03:25 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b6e75410bf0a7031730601000063994d00"], 0x0) 15:03:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 61) 15:03:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd72) (async, rerun: 32) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (rerun: 32) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0xb16f}}, 0x18) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 32) r6 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 32) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) (async, rerun: 32) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r7, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 32) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async, rerun: 64) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:03:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x8, 0x800, 0x0, 0x7, 0x400}, 0x14) bind$inet(r0, &(0x7f0000000040)={0x2, 0x100, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r1 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000200)={&(0x7f00000002c0)=""/124, 0x7c}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) [ 2402.990940][ T7] usb 2-1: USB disconnect, device number 126 15:03:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x8, 0x800, 0x0, 0x7, 0x400}, 0x14) (async, rerun: 64) bind$inet(r0, &(0x7f0000000040)={0x2, 0x100, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (rerun: 64) r1 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000200)={&(0x7f00000002c0)=""/124, 0x7c}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) 15:03:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd72) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0xb16f}}, 0x18) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r7, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) 15:03:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000380)='\xd0,J\xda\xe0\xba\xe8\xab*:\x9b\xa2\xc9\x8e\x8d\xfc\xfa\x16m\x9d\xbbbPd\x00\x00\x00\xb7\xdb\xd9>\xa6\v\xa6sa\x1b\xd9\xad:M\xf7\xe8\x8e\xad\xb2\xf8\b\x11V%\xb0\xfb\xf2\xd5\xafH\x99f\x9eR,\xe03\x1a\x9f\xd9n\xbe\xf1\xa4\xd6\xa1\'\xf5P\x80\x1e\xd2:\a', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x696b}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000480)="2693e23330c3fa535d939942c918d48ee9813131fbed5dfe0aa36df96414068ed2191b4dfcc16ebdbd3a7cf99b853fcd65343a6ed6999a22699928aa28eb1521d4f1979169853d671b07b4154e3e6ee10a1f20c3a454518c6527c70288020ebaf33a1fa6999559e54478efc65d6bda79309c7ed7ebd399bea3582e28df8bfe19f05de771c9532823356781308f21a2df739ed2b1ee3d41e9e51be53f09d5499e", 0xa0}, {&(0x7f0000000340)="9f6055c6c572c7ba36fa63eb6b326f", 0xf}, {&(0x7f0000000540)="8da9ed59575b5a24ceec9a305dcda16a3eca8599c8cedc3ad1d01bb4546114a9351a97dac39a25112c78074d17af8deb011e1fc80ce6cb2152b803e614569aec086c38012a4f483cc37186fcbe1c320edd3caf8b27cc641fe3d02b69e058874454f4d3579f9ecc8568e5130c9837d448966bff1531daf42893ae88447e0e792a8b2b9900d8d70a5297a76b456a12787ed4ae832827cc5a", 0x97}, {&(0x7f0000000600)="22a6f6dd2ffc0de463183c3db23e0be1134c49f595772607374d3bb5e844c33cc276fcba9476a7f36bc3e084c4ee35ba3a39b9c4ce", 0x35}, {&(0x7f0000000640)="61ecf8b9d68973b0e2c590ad2aadca306c66f76004cbfb0c7fedef76158d6e0bf4ac2f0390ef92f221a82d6650d6cdbacdbe003a22937b9fde0b22ad283e36f5ec5ffd4f51778b8d39de22840fbbd9f5a55ed86fda82ae33ebf4628eae0c91c4c84ad2cbaa7c36dd74f922c7f827519f714ca83f016bfac176f48bebf7c1e158ec57d465564a703e456d517c12277ecab455118f38e8419316b74c224ea0339b98bc5a5a53e3e46c8b8e40ba4afc9b7088158d55bc24ae8236888a8f50afdfb9c08b4fcadfc9a74991d41ca64489f3d276a62b6ab101a2905cb689290e", 0xdd}, {&(0x7f0000000740)="41f6b17e07ca139acb947e7af083d42512dbba3519fd4a520edc924ab656e564b0a53fd91f492d02206f74289a684c6846fa15a2e1c19e9585d45d2217afeb324b741a0caf4239dd169e0db21b6adefa711b73328b93fd4ce55bc7d400e630b2fe", 0x61}, {&(0x7f00000007c0)="978d6df5cf7b89f998fcd8f499448e252fdd75a57d97c6944d62e3fc2b0ce008fefc258ea689c6137cec4d7ba9e33012d57fc6d55aef09c2274ded17113806df3a655665f4e662e483846bcfb244b22f8925370a6fa33af3e750f104637c24edca0ab85c486b1961cb84bbcb755b567f6b805becb9a33ecea54c1bbb3994fc58760fdcb2684bde247b581b18baebdb9806a33a2e4650f04eb421c5a35e9e738f8a95d2cdf93d0f106e62e7cab9e1957d0470af27a764cc53c287efd43a43b5af5dadabd3968dea", 0xc7}, {&(0x7f00000008c0)="827e65897c4a2bb6f099478a82eca66f17d0916ec770bdd1f7c13b7bb18d1f25944f4a88b2cc4bbb244c295f94a32a42721547acd15c774fcfc0c2e2155c4ba7d99b", 0x42}, {&(0x7f0000000940)="72b6cd48a82e893f58acded939e091fd65afa38d576b0e44f04218935062226de4d4fa08a57b9500dca1ebf84127d9e7c0016771e77d88565999f408bbd612722972b504357017948b23b97a572faf9304a615b270e992274aaec04697633cecff70783da351abf9c86d5d488315482700fca25dd0e6dc6a36f5f7eb8c07e2d4fdc370d153a6f436d5e65db1086f8e5032e277e2809c97cc027533eb7af96f2dac78cc28e885455f5db1a1fe7f86133be861e9dc3bb5e71e164f5df877eac79972d40c2fe15b201c3bbb", 0xca}, {&(0x7f0000000a40)="0ab4535b14d300816d6431c6769a428d77bcd9787160615378c4a5c0801586d545fc07b9965e55f0e1a8d98526ff6784f102e1eb59c2a1de9c542ccbb2300c8a41b5b8", 0x43}], 0xa, &(0x7f0000000b80)}, 0x0, 0xc080}, 0xfffffffd) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2403.136530][ T4568] FAULT_INJECTION: forcing a failure. [ 2403.136530][ T4568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2403.223549][ T4568] CPU: 0 PID: 4568 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2403.233573][ T4568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2403.243642][ T4568] Call Trace: [ 2403.246911][ T4568] [ 2403.249837][ T4568] dump_stack_lvl+0xcd/0x134 [ 2403.254434][ T4568] should_fail.cold+0x5/0xa [ 2403.258970][ T4568] _copy_from_user+0x2a/0x170 [ 2403.263651][ T4568] move_addr_to_kernel.part.0+0x31/0x110 [ 2403.269286][ T4568] move_addr_to_kernel+0x4f/0x70 [ 2403.274222][ T4568] io_connect+0x3c9/0x4b0 [ 2403.278551][ T4568] ? io_connect_prep+0x220/0x220 [ 2403.283493][ T4568] ? __fget_files+0x26a/0x440 [ 2403.288160][ T4568] ? io_connect_prep+0x220/0x220 [ 2403.293094][ T4568] io_issue_sqe+0x69d/0xd00 [ 2403.297592][ T4568] io_submit_sqes+0x936/0x1d10 [ 2403.302350][ T4568] __do_sys_io_uring_enter+0xadb/0x2430 [ 2403.307894][ T4568] ? lock_acquire+0x480/0x570 [ 2403.312569][ T4568] ? lock_release+0x560/0x780 [ 2403.317238][ T4568] ? rcu_read_lock_sched_held+0xd/0x70 [ 2403.322697][ T4568] ? __ct_user_exit+0xff/0x150 [ 2403.327483][ T4568] ? io_submit_sqes+0x1d10/0x1d10 [ 2403.332519][ T4568] ? lock_downgrade+0x6e0/0x6e0 [ 2403.337366][ T4568] ? vtime_user_exit+0x218/0x6c0 [ 2403.342298][ T4568] ? trace_hardirqs_on+0x2d/0x120 [ 2403.347321][ T4568] do_syscall_64+0x35/0xb0 [ 2403.351734][ T4568] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2403.357628][ T4568] RIP: 0033:0x7f9bb008a5a9 [ 2403.362058][ T4568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2403.381674][ T4568] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2403.390188][ T4568] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2403.398150][ T4568] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2403.406111][ T4568] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2403.414078][ T4568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.422040][ T4568] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2403.430006][ T4568] [ 2403.583336][ T7] usb 2-1: new high-speed USB device number 127 using dummy_hcd 15:03:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x1) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x100000, 0x0, 0x4000000}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x0, @mcast1, 0x1ca5}}}}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, &(0x7f0000000180)=0x80, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, 0x180000}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2403.716594][ T4601] net_ratelimit: 935 callbacks suppressed [ 2403.716707][ T4601] dccp_time_wait: time wait bucket table overflow [ 2403.740550][ T4574] dccp_time_wait: time wait bucket table overflow [ 2403.787373][ T4574] dccp_time_wait: time wait bucket table overflow [ 2403.819857][ T4601] dccp_time_wait: time wait bucket table overflow [ 2403.833354][ T7] usb 2-1: Using ep0 maxpacket: 16 15:03:26 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10143, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @empty}, &(0x7f0000000100)=0x8) [ 2403.873443][ T7] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2403.908414][ T4574] dccp_time_wait: time wait bucket table overflow 15:03:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 62) [ 2403.995166][ T4601] dccp_time_wait: time wait bucket table overflow [ 2404.003993][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2404.018291][ T7] usb 2-1: can't read configurations, error -61 [ 2404.055804][ T4574] dccp_time_wait: time wait bucket table overflow [ 2404.107157][ T4610] FAULT_INJECTION: forcing a failure. [ 2404.107157][ T4610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2404.120806][ T4610] CPU: 1 PID: 4610 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2404.130840][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2404.140903][ T4610] Call Trace: [ 2404.144190][ T4610] [ 2404.147134][ T4610] dump_stack_lvl+0xcd/0x134 [ 2404.151745][ T4610] should_fail.cold+0x5/0xa [ 2404.156273][ T4610] _copy_from_user+0x2a/0x170 [ 2404.160969][ T4610] move_addr_to_kernel.part.0+0x31/0x110 [ 2404.166629][ T4610] move_addr_to_kernel+0x4f/0x70 [ 2404.171590][ T4610] io_connect+0x3c9/0x4b0 [ 2404.175949][ T4610] ? io_connect_prep+0x220/0x220 [ 2404.180917][ T4610] ? __fget_files+0x26a/0x440 [ 2404.185610][ T4610] ? io_connect_prep+0x220/0x220 [ 2404.190571][ T4610] io_issue_sqe+0x69d/0xd00 [ 2404.195091][ T4610] io_submit_sqes+0x936/0x1d10 [ 2404.199900][ T4610] __do_sys_io_uring_enter+0xadb/0x2430 [ 2404.205466][ T4610] ? lock_acquire+0x480/0x570 [ 2404.210151][ T4610] ? lock_release+0x560/0x780 [ 2404.214835][ T4610] ? rcu_read_lock_sched_held+0xd/0x70 [ 2404.220320][ T4610] ? __ct_user_exit+0xff/0x150 [ 2404.225110][ T4610] ? io_submit_sqes+0x1d10/0x1d10 [ 2404.230152][ T4610] ? lock_downgrade+0x6e0/0x6e0 [ 2404.235018][ T4610] ? vtime_user_exit+0x218/0x6c0 [ 2404.239978][ T4610] ? trace_hardirqs_on+0x2d/0x120 [ 2404.245024][ T4610] do_syscall_64+0x35/0xb0 [ 2404.249461][ T4610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2404.255388][ T4610] RIP: 0033:0x7f9bb008a5a9 [ 2404.259813][ T4610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2404.279429][ T4610] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2404.287865][ T4610] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2404.295841][ T4610] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2404.303826][ T4610] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2404.311802][ T4610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2404.319778][ T4610] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2404.327762][ T4610] [ 2404.346746][ T4574] dccp_time_wait: time wait bucket table overflow [ 2404.376519][ T4574] dccp_time_wait: time wait bucket table overflow [ 2404.386192][ T4601] dccp_time_wait: time wait bucket table overflow [ 2404.403306][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2404.653328][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2404.693445][ T7] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2404.813544][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2404.821135][ T7] usb 2-1: can't read configurations, error -61 [ 2404.829055][ T7] usb usb2-port1: attempt power cycle [ 2405.243340][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2405.334817][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2405.373400][ T7] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2405.503479][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2405.511063][ T7] usb 2-1: can't read configurations, error -61 [ 2405.663310][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2405.753651][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2405.820480][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.822326][ T7] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2405.826939][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 15:03:28 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b6e75410bf0a7031730601000063994d00"], 0x0) 15:03:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000380)='\xd0,J\xda\xe0\xba\xe8\xab*:\x9b\xa2\xc9\x8e\x8d\xfc\xfa\x16m\x9d\xbbbPd\x00\x00\x00\xb7\xdb\xd9>\xa6\v\xa6sa\x1b\xd9\xad:M\xf7\xe8\x8e\xad\xb2\xf8\b\x11V%\xb0\xfb\xf2\xd5\xafH\x99f\x9eR,\xe03\x1a\x9f\xd9n\xbe\xf1\xa4\xd6\xa1\'\xf5P\x80\x1e\xd2:\a', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x696b}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000480)="2693e23330c3fa535d939942c918d48ee9813131fbed5dfe0aa36df96414068ed2191b4dfcc16ebdbd3a7cf99b853fcd65343a6ed6999a22699928aa28eb1521d4f1979169853d671b07b4154e3e6ee10a1f20c3a454518c6527c70288020ebaf33a1fa6999559e54478efc65d6bda79309c7ed7ebd399bea3582e28df8bfe19f05de771c9532823356781308f21a2df739ed2b1ee3d41e9e51be53f09d5499e", 0xa0}, {&(0x7f0000000340)="9f6055c6c572c7ba36fa63eb6b326f", 0xf}, {&(0x7f0000000540)="8da9ed59575b5a24ceec9a305dcda16a3eca8599c8cedc3ad1d01bb4546114a9351a97dac39a25112c78074d17af8deb011e1fc80ce6cb2152b803e614569aec086c38012a4f483cc37186fcbe1c320edd3caf8b27cc641fe3d02b69e058874454f4d3579f9ecc8568e5130c9837d448966bff1531daf42893ae88447e0e792a8b2b9900d8d70a5297a76b456a12787ed4ae832827cc5a", 0x97}, {&(0x7f0000000600)="22a6f6dd2ffc0de463183c3db23e0be1134c49f595772607374d3bb5e844c33cc276fcba9476a7f36bc3e084c4ee35ba3a39b9c4ce", 0x35}, {&(0x7f0000000640)="61ecf8b9d68973b0e2c590ad2aadca306c66f76004cbfb0c7fedef76158d6e0bf4ac2f0390ef92f221a82d6650d6cdbacdbe003a22937b9fde0b22ad283e36f5ec5ffd4f51778b8d39de22840fbbd9f5a55ed86fda82ae33ebf4628eae0c91c4c84ad2cbaa7c36dd74f922c7f827519f714ca83f016bfac176f48bebf7c1e158ec57d465564a703e456d517c12277ecab455118f38e8419316b74c224ea0339b98bc5a5a53e3e46c8b8e40ba4afc9b7088158d55bc24ae8236888a8f50afdfb9c08b4fcadfc9a74991d41ca64489f3d276a62b6ab101a2905cb689290e", 0xdd}, {&(0x7f0000000740)="41f6b17e07ca139acb947e7af083d42512dbba3519fd4a520edc924ab656e564b0a53fd91f492d02206f74289a684c6846fa15a2e1c19e9585d45d2217afeb324b741a0caf4239dd169e0db21b6adefa711b73328b93fd4ce55bc7d400e630b2fe", 0x61}, {&(0x7f00000007c0)="978d6df5cf7b89f998fcd8f499448e252fdd75a57d97c6944d62e3fc2b0ce008fefc258ea689c6137cec4d7ba9e33012d57fc6d55aef09c2274ded17113806df3a655665f4e662e483846bcfb244b22f8925370a6fa33af3e750f104637c24edca0ab85c486b1961cb84bbcb755b567f6b805becb9a33ecea54c1bbb3994fc58760fdcb2684bde247b581b18baebdb9806a33a2e4650f04eb421c5a35e9e738f8a95d2cdf93d0f106e62e7cab9e1957d0470af27a764cc53c287efd43a43b5af5dadabd3968dea", 0xc7}, {&(0x7f00000008c0)="827e65897c4a2bb6f099478a82eca66f17d0916ec770bdd1f7c13b7bb18d1f25944f4a88b2cc4bbb244c295f94a32a42721547acd15c774fcfc0c2e2155c4ba7d99b", 0x42}, {&(0x7f0000000940)="72b6cd48a82e893f58acded939e091fd65afa38d576b0e44f04218935062226de4d4fa08a57b9500dca1ebf84127d9e7c0016771e77d88565999f408bbd612722972b504357017948b23b97a572faf9304a615b270e992274aaec04697633cecff70783da351abf9c86d5d488315482700fca25dd0e6dc6a36f5f7eb8c07e2d4fdc370d153a6f436d5e65db1086f8e5032e277e2809c97cc027533eb7af96f2dac78cc28e885455f5db1a1fe7f86133be861e9dc3bb5e71e164f5df877eac79972d40c2fe15b201c3bbb", 0xca}, {&(0x7f0000000a40)="0ab4535b14d300816d6431c6769a428d77bcd9787160615378c4a5c0801586d545fc07b9965e55f0e1a8d98526ff6784f102e1eb59c2a1de9c542ccbb2300c8a41b5b8", 0x43}], 0xa, &(0x7f0000000b80)}, 0x0, 0xc080}, 0xfffffffd) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000380)='\xd0,J\xda\xe0\xba\xe8\xab*:\x9b\xa2\xc9\x8e\x8d\xfc\xfa\x16m\x9d\xbbbPd\x00\x00\x00\xb7\xdb\xd9>\xa6\v\xa6sa\x1b\xd9\xad:M\xf7\xe8\x8e\xad\xb2\xf8\b\x11V%\xb0\xfb\xf2\xd5\xafH\x99f\x9eR,\xe03\x1a\x9f\xd9n\xbe\xf1\xa4\xd6\xa1\'\xf5P\x80\x1e\xd2:\a', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x696b}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000480)="2693e23330c3fa535d939942c918d48ee9813131fbed5dfe0aa36df96414068ed2191b4dfcc16ebdbd3a7cf99b853fcd65343a6ed6999a22699928aa28eb1521d4f1979169853d671b07b4154e3e6ee10a1f20c3a454518c6527c70288020ebaf33a1fa6999559e54478efc65d6bda79309c7ed7ebd399bea3582e28df8bfe19f05de771c9532823356781308f21a2df739ed2b1ee3d41e9e51be53f09d5499e", 0xa0}, {&(0x7f0000000340)="9f6055c6c572c7ba36fa63eb6b326f", 0xf}, {&(0x7f0000000540)="8da9ed59575b5a24ceec9a305dcda16a3eca8599c8cedc3ad1d01bb4546114a9351a97dac39a25112c78074d17af8deb011e1fc80ce6cb2152b803e614569aec086c38012a4f483cc37186fcbe1c320edd3caf8b27cc641fe3d02b69e058874454f4d3579f9ecc8568e5130c9837d448966bff1531daf42893ae88447e0e792a8b2b9900d8d70a5297a76b456a12787ed4ae832827cc5a", 0x97}, {&(0x7f0000000600)="22a6f6dd2ffc0de463183c3db23e0be1134c49f595772607374d3bb5e844c33cc276fcba9476a7f36bc3e084c4ee35ba3a39b9c4ce", 0x35}, {&(0x7f0000000640)="61ecf8b9d68973b0e2c590ad2aadca306c66f76004cbfb0c7fedef76158d6e0bf4ac2f0390ef92f221a82d6650d6cdbacdbe003a22937b9fde0b22ad283e36f5ec5ffd4f51778b8d39de22840fbbd9f5a55ed86fda82ae33ebf4628eae0c91c4c84ad2cbaa7c36dd74f922c7f827519f714ca83f016bfac176f48bebf7c1e158ec57d465564a703e456d517c12277ecab455118f38e8419316b74c224ea0339b98bc5a5a53e3e46c8b8e40ba4afc9b7088158d55bc24ae8236888a8f50afdfb9c08b4fcadfc9a74991d41ca64489f3d276a62b6ab101a2905cb689290e", 0xdd}, {&(0x7f0000000740)="41f6b17e07ca139acb947e7af083d42512dbba3519fd4a520edc924ab656e564b0a53fd91f492d02206f74289a684c6846fa15a2e1c19e9585d45d2217afeb324b741a0caf4239dd169e0db21b6adefa711b73328b93fd4ce55bc7d400e630b2fe", 0x61}, {&(0x7f00000007c0)="978d6df5cf7b89f998fcd8f499448e252fdd75a57d97c6944d62e3fc2b0ce008fefc258ea689c6137cec4d7ba9e33012d57fc6d55aef09c2274ded17113806df3a655665f4e662e483846bcfb244b22f8925370a6fa33af3e750f104637c24edca0ab85c486b1961cb84bbcb755b567f6b805becb9a33ecea54c1bbb3994fc58760fdcb2684bde247b581b18baebdb9806a33a2e4650f04eb421c5a35e9e738f8a95d2cdf93d0f106e62e7cab9e1957d0470af27a764cc53c287efd43a43b5af5dadabd3968dea", 0xc7}, {&(0x7f00000008c0)="827e65897c4a2bb6f099478a82eca66f17d0916ec770bdd1f7c13b7bb18d1f25944f4a88b2cc4bbb244c295f94a32a42721547acd15c774fcfc0c2e2155c4ba7d99b", 0x42}, {&(0x7f0000000940)="72b6cd48a82e893f58acded939e091fd65afa38d576b0e44f04218935062226de4d4fa08a57b9500dca1ebf84127d9e7c0016771e77d88565999f408bbd612722972b504357017948b23b97a572faf9304a615b270e992274aaec04697633cecff70783da351abf9c86d5d488315482700fca25dd0e6dc6a36f5f7eb8c07e2d4fdc370d153a6f436d5e65db1086f8e5032e277e2809c97cc027533eb7af96f2dac78cc28e885455f5db1a1fe7f86133be861e9dc3bb5e71e164f5df877eac79972d40c2fe15b201c3bbb", 0xca}, {&(0x7f0000000a40)="0ab4535b14d300816d6431c6769a428d77bcd9787160615378c4a5c0801586d545fc07b9965e55f0e1a8d98526ff6784f102e1eb59c2a1de9c542ccbb2300c8a41b5b8", 0x43}], 0xa, &(0x7f0000000b80)}, 0x0, 0xc080}, 0xfffffffd) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x1) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x100000, 0x0, 0x4000000}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x0, @mcast1, 0x1ca5}}}}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, &(0x7f0000000180)=0x80, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, 0x180000}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x1) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x100000, 0x0, 0x4000000}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000380)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x0, @mcast1, 0x1ca5}}}}, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, &(0x7f0000000180)=0x80, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, 0x180000}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:03:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 63) 15:03:28 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10143, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @empty}, &(0x7f0000000100)=0x8) [ 2405.973505][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2405.981110][ T7] usb 2-1: can't read configurations, error -61 [ 2405.988988][ T7] usb usb2-port1: unable to enumerate USB device [ 2406.118967][ T4627] FAULT_INJECTION: forcing a failure. [ 2406.118967][ T4627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2406.164288][ T4627] CPU: 1 PID: 4627 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2406.174324][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2406.184411][ T4627] Call Trace: [ 2406.187706][ T4627] [ 2406.190655][ T4627] dump_stack_lvl+0xcd/0x134 [ 2406.195285][ T4627] should_fail.cold+0x5/0xa [ 2406.199838][ T4627] _copy_from_user+0x2a/0x170 [ 2406.204553][ T4627] move_addr_to_kernel.part.0+0x31/0x110 [ 2406.210233][ T4627] move_addr_to_kernel+0x4f/0x70 [ 2406.215222][ T4627] io_connect+0x3c9/0x4b0 [ 2406.219612][ T4627] ? io_connect_prep+0x220/0x220 [ 2406.224596][ T4627] ? __fget_files+0x26a/0x440 [ 2406.229312][ T4627] ? io_connect_prep+0x220/0x220 [ 2406.234291][ T4627] io_issue_sqe+0x69d/0xd00 [ 2406.238833][ T4627] io_submit_sqes+0x936/0x1d10 [ 2406.243640][ T4627] __do_sys_io_uring_enter+0xadb/0x2430 [ 2406.249232][ T4627] ? lock_acquire+0x480/0x570 [ 2406.253944][ T4627] ? lock_release+0x560/0x780 [ 2406.258671][ T4627] ? rcu_read_lock_sched_held+0xd/0x70 [ 2406.264170][ T4627] ? __ct_user_exit+0xff/0x150 [ 2406.268980][ T4627] ? io_submit_sqes+0x1d10/0x1d10 [ 2406.274043][ T4627] ? lock_downgrade+0x6e0/0x6e0 [ 2406.278914][ T4627] ? vtime_user_exit+0x218/0x6c0 [ 2406.283868][ T4627] ? trace_hardirqs_on+0x2d/0x120 [ 2406.288935][ T4627] do_syscall_64+0x35/0xb0 [ 2406.293392][ T4627] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2406.299313][ T4627] RIP: 0033:0x7f9bb008a5a9 [ 2406.303719][ T4627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2406.323323][ T4627] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2406.331746][ T4627] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2406.339709][ T4627] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2406.347674][ T4627] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2406.355635][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:03:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000380)='\xd0,J\xda\xe0\xba\xe8\xab*:\x9b\xa2\xc9\x8e\x8d\xfc\xfa\x16m\x9d\xbbbPd\x00\x00\x00\xb7\xdb\xd9>\xa6\v\xa6sa\x1b\xd9\xad:M\xf7\xe8\x8e\xad\xb2\xf8\b\x11V%\xb0\xfb\xf2\xd5\xafH\x99f\x9eR,\xe03\x1a\x9f\xd9n\xbe\xf1\xa4\xd6\xa1\'\xf5P\x80\x1e\xd2:\a', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x696b}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000480)="2693e23330c3fa535d939942c918d48ee9813131fbed5dfe0aa36df96414068ed2191b4dfcc16ebdbd3a7cf99b853fcd65343a6ed6999a22699928aa28eb1521d4f1979169853d671b07b4154e3e6ee10a1f20c3a454518c6527c70288020ebaf33a1fa6999559e54478efc65d6bda79309c7ed7ebd399bea3582e28df8bfe19f05de771c9532823356781308f21a2df739ed2b1ee3d41e9e51be53f09d5499e", 0xa0}, {&(0x7f0000000340)="9f6055c6c572c7ba36fa63eb6b326f", 0xf}, {&(0x7f0000000540)="8da9ed59575b5a24ceec9a305dcda16a3eca8599c8cedc3ad1d01bb4546114a9351a97dac39a25112c78074d17af8deb011e1fc80ce6cb2152b803e614569aec086c38012a4f483cc37186fcbe1c320edd3caf8b27cc641fe3d02b69e058874454f4d3579f9ecc8568e5130c9837d448966bff1531daf42893ae88447e0e792a8b2b9900d8d70a5297a76b456a12787ed4ae832827cc5a", 0x97}, {&(0x7f0000000600)="22a6f6dd2ffc0de463183c3db23e0be1134c49f595772607374d3bb5e844c33cc276fcba9476a7f36bc3e084c4ee35ba3a39b9c4ce", 0x35}, {&(0x7f0000000640)="61ecf8b9d68973b0e2c590ad2aadca306c66f76004cbfb0c7fedef76158d6e0bf4ac2f0390ef92f221a82d6650d6cdbacdbe003a22937b9fde0b22ad283e36f5ec5ffd4f51778b8d39de22840fbbd9f5a55ed86fda82ae33ebf4628eae0c91c4c84ad2cbaa7c36dd74f922c7f827519f714ca83f016bfac176f48bebf7c1e158ec57d465564a703e456d517c12277ecab455118f38e8419316b74c224ea0339b98bc5a5a53e3e46c8b8e40ba4afc9b7088158d55bc24ae8236888a8f50afdfb9c08b4fcadfc9a74991d41ca64489f3d276a62b6ab101a2905cb689290e", 0xdd}, {&(0x7f0000000740)="41f6b17e07ca139acb947e7af083d42512dbba3519fd4a520edc924ab656e564b0a53fd91f492d02206f74289a684c6846fa15a2e1c19e9585d45d2217afeb324b741a0caf4239dd169e0db21b6adefa711b73328b93fd4ce55bc7d400e630b2fe", 0x61}, {&(0x7f00000007c0)="978d6df5cf7b89f998fcd8f499448e252fdd75a57d97c6944d62e3fc2b0ce008fefc258ea689c6137cec4d7ba9e33012d57fc6d55aef09c2274ded17113806df3a655665f4e662e483846bcfb244b22f8925370a6fa33af3e750f104637c24edca0ab85c486b1961cb84bbcb755b567f6b805becb9a33ecea54c1bbb3994fc58760fdcb2684bde247b581b18baebdb9806a33a2e4650f04eb421c5a35e9e738f8a95d2cdf93d0f106e62e7cab9e1957d0470af27a764cc53c287efd43a43b5af5dadabd3968dea", 0xc7}, {&(0x7f00000008c0)="827e65897c4a2bb6f099478a82eca66f17d0916ec770bdd1f7c13b7bb18d1f25944f4a88b2cc4bbb244c295f94a32a42721547acd15c774fcfc0c2e2155c4ba7d99b", 0x42}, {&(0x7f0000000940)="72b6cd48a82e893f58acded939e091fd65afa38d576b0e44f04218935062226de4d4fa08a57b9500dca1ebf84127d9e7c0016771e77d88565999f408bbd612722972b504357017948b23b97a572faf9304a615b270e992274aaec04697633cecff70783da351abf9c86d5d488315482700fca25dd0e6dc6a36f5f7eb8c07e2d4fdc370d153a6f436d5e65db1086f8e5032e277e2809c97cc027533eb7af96f2dac78cc28e885455f5db1a1fe7f86133be861e9dc3bb5e71e164f5df877eac79972d40c2fe15b201c3bbb", 0xca}, {&(0x7f0000000a40)="0ab4535b14d300816d6431c6769a428d77bcd9787160615378c4a5c0801586d545fc07b9965e55f0e1a8d98526ff6784f102e1eb59c2a1de9c542ccbb2300c8a41b5b8", 0x43}], 0xa, &(0x7f0000000b80)}, 0x0, 0xc080}, 0xfffffffd) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x1) (async) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x100000, 0x0, 0x4000000}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x0, @mcast1, 0x1ca5}}}}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, &(0x7f0000000180)=0x80, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, 0x180000}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2406.363594][ T4627] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2406.371558][ T4627] 15:03:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x4, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000001c0)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) sendfile(r6, r7, &(0x7f0000000180)=0x5149, 0x1000) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2406.643498][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd 15:03:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 64) 15:03:29 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10143, 0x0) (rerun: 32) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @empty}, &(0x7f0000000100)=0x8) [ 2406.903393][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2406.943426][ T7] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2407.069163][ T4679] FAULT_INJECTION: forcing a failure. [ 2407.069163][ T4679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2407.082827][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2407.095789][ T7] usb 2-1: can't read configurations, error -61 [ 2407.171685][ T4679] CPU: 0 PID: 4679 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2407.181712][ T4679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2407.191763][ T4679] Call Trace: [ 2407.195031][ T4679] [ 2407.197952][ T4679] dump_stack_lvl+0xcd/0x134 [ 2407.202540][ T4679] should_fail.cold+0x5/0xa [ 2407.207057][ T4679] _copy_from_user+0x2a/0x170 [ 2407.211764][ T4679] move_addr_to_kernel.part.0+0x31/0x110 [ 2407.217413][ T4679] move_addr_to_kernel+0x4f/0x70 [ 2407.222359][ T4679] io_connect+0x3c9/0x4b0 [ 2407.226709][ T4679] ? io_connect_prep+0x220/0x220 [ 2407.231784][ T4679] ? __fget_files+0x26a/0x440 [ 2407.236496][ T4679] ? io_connect_prep+0x220/0x220 [ 2407.241482][ T4679] io_issue_sqe+0x69d/0xd00 [ 2407.246022][ T4679] io_submit_sqes+0x936/0x1d10 [ 2407.250831][ T4679] __do_sys_io_uring_enter+0xadb/0x2430 [ 2407.256441][ T4679] ? lock_acquire+0x480/0x570 [ 2407.261177][ T4679] ? lock_release+0x560/0x780 [ 2407.266143][ T4679] ? rcu_read_lock_sched_held+0xd/0x70 [ 2407.271647][ T4679] ? __ct_user_exit+0xff/0x150 [ 2407.276457][ T4679] ? io_submit_sqes+0x1d10/0x1d10 [ 2407.281526][ T4679] ? lock_downgrade+0x6e0/0x6e0 [ 2407.286404][ T4679] ? vtime_user_exit+0x218/0x6c0 [ 2407.291384][ T4679] ? trace_hardirqs_on+0x2d/0x120 [ 2407.296454][ T4679] do_syscall_64+0x35/0xb0 [ 2407.301863][ T4679] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2407.307794][ T4679] RIP: 0033:0x7f9bb008a5a9 [ 2407.312231][ T4679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2407.332039][ T4679] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2407.340443][ T4679] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2407.348405][ T4679] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2407.356364][ T4679] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2407.364323][ T4679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.372280][ T4679] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2407.380246][ T4679] [ 2407.463337][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2407.723372][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2407.783565][ T7] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2407.913400][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2407.921051][ T7] usb 2-1: can't read configurations, error -61 [ 2407.927663][ T7] usb usb2-port1: attempt power cycle [ 2408.333323][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2408.423456][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2408.463488][ T7] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2408.583486][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2408.591112][ T7] usb 2-1: can't read configurations, error -61 [ 2408.743415][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2408.834038][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2408.873525][ T7] usb 2-1: too many configurations: 99, using maximum allowed: 8 15:03:31 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b6e75410bf0a7031730601000063994d00"], 0x0) 15:03:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x4, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000001c0)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) sendfile(r6, r7, &(0x7f0000000180)=0x5149, 0x1000) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000140), 0x4, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000001c0)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) (async) sendfile(r6, r7, &(0x7f0000000180)=0x5149, 0x1000) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:31 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (rerun: 32) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 65) 15:03:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, r6}, 0xc) [ 2409.013614][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2409.021259][ T7] usb 2-1: can't read configurations, error -61 [ 2409.027998][ T7] usb usb2-port1: unable to enumerate USB device 15:03:31 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (rerun: 64) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (rerun: 32) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async, rerun: 64) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2409.163113][ T4717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2409.195792][ T4701] FAULT_INJECTION: forcing a failure. [ 2409.195792][ T4701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2409.272484][ T4718] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2409.320643][ T4701] CPU: 0 PID: 4701 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2409.330675][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2409.340723][ T4701] Call Trace: [ 2409.343993][ T4701] [ 2409.346913][ T4701] dump_stack_lvl+0xcd/0x134 [ 2409.351504][ T4701] should_fail.cold+0x5/0xa [ 2409.356035][ T4701] _copy_from_user+0x2a/0x170 [ 2409.360713][ T4701] move_addr_to_kernel.part.0+0x31/0x110 [ 2409.366365][ T4701] move_addr_to_kernel+0x4f/0x70 [ 2409.371350][ T4701] io_connect+0x3c9/0x4b0 [ 2409.375710][ T4701] ? io_connect_prep+0x220/0x220 [ 2409.380671][ T4701] ? __fget_files+0x26a/0x440 [ 2409.385362][ T4701] ? io_connect_prep+0x220/0x220 [ 2409.390321][ T4701] io_issue_sqe+0x69d/0xd00 [ 2409.394837][ T4701] io_submit_sqes+0x936/0x1d10 [ 2409.399623][ T4701] __do_sys_io_uring_enter+0xadb/0x2430 [ 2409.405181][ T4701] ? lock_acquire+0x480/0x570 [ 2409.409866][ T4701] ? lock_release+0x560/0x780 [ 2409.414548][ T4701] ? rcu_read_lock_sched_held+0xd/0x70 [ 2409.420034][ T4701] ? __ct_user_exit+0xff/0x150 [ 2409.424855][ T4701] ? io_submit_sqes+0x1d10/0x1d10 [ 2409.429896][ T4701] ? lock_downgrade+0x6e0/0x6e0 [ 2409.434759][ T4701] ? vtime_user_exit+0x218/0x6c0 [ 2409.439717][ T4701] ? trace_hardirqs_on+0x2d/0x120 [ 2409.444761][ T4701] do_syscall_64+0x35/0xb0 [ 2409.449202][ T4701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2409.455109][ T4701] RIP: 0033:0x7f9bb008a5a9 [ 2409.459532][ T4701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2409.479148][ T4701] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2409.487567][ T4701] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2409.495545][ T4701] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2409.503522][ T4701] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2409.511495][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:03:32 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2409.519466][ T4701] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2409.527450][ T4701] [ 2409.603956][ T3690] usb 2-1: new high-speed USB device number 9 using dummy_hcd 15:03:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x4, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000001c0)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) (async) sendfile(r6, r7, &(0x7f0000000180)=0x5149, 0x1000) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x8108551b, &(0x7f0000000040)) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000002, 0x4010, r5, 0x83ef2000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x80000, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async, rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, r6}, 0xc) 15:03:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 66) [ 2409.883592][ T3690] usb 2-1: Using ep0 maxpacket: 16 [ 2409.924383][ T3690] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2410.051527][ T4742] FAULT_INJECTION: forcing a failure. [ 2410.051527][ T4742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2410.094125][ T3690] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2410.110898][ T3690] usb 2-1: can't read configurations, error -61 [ 2410.123426][ T4742] CPU: 0 PID: 4742 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2410.133463][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2410.143527][ T4742] Call Trace: [ 2410.146799][ T4742] [ 2410.149722][ T4742] dump_stack_lvl+0xcd/0x134 [ 2410.154308][ T4742] should_fail.cold+0x5/0xa [ 2410.158815][ T4742] _copy_from_user+0x2a/0x170 [ 2410.163492][ T4742] move_addr_to_kernel.part.0+0x31/0x110 [ 2410.169128][ T4742] move_addr_to_kernel+0x4f/0x70 [ 2410.174067][ T4742] io_connect+0x3c9/0x4b0 [ 2410.178395][ T4742] ? io_connect_prep+0x220/0x220 [ 2410.183345][ T4742] ? __fget_files+0x26a/0x440 [ 2410.188039][ T4742] ? io_connect_prep+0x220/0x220 [ 2410.192978][ T4742] io_issue_sqe+0x69d/0xd00 [ 2410.197480][ T4742] io_submit_sqes+0x936/0x1d10 [ 2410.202251][ T4742] __do_sys_io_uring_enter+0xadb/0x2430 [ 2410.207793][ T4742] ? lock_acquire+0x480/0x570 [ 2410.212471][ T4742] ? lock_release+0x560/0x780 [ 2410.217154][ T4742] ? rcu_read_lock_sched_held+0xd/0x70 [ 2410.222609][ T4742] ? __ct_user_exit+0xff/0x150 [ 2410.227371][ T4742] ? io_submit_sqes+0x1d10/0x1d10 [ 2410.232391][ T4742] ? lock_downgrade+0x6e0/0x6e0 [ 2410.237241][ T4742] ? vtime_user_exit+0x218/0x6c0 [ 2410.242199][ T4742] ? trace_hardirqs_on+0x2d/0x120 [ 2410.247246][ T4742] do_syscall_64+0x35/0xb0 [ 2410.251682][ T4742] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2410.257599][ T4742] RIP: 0033:0x7f9bb008a5a9 [ 2410.262018][ T4742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2410.281637][ T4742] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2410.290057][ T4742] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2410.298036][ T4742] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2410.306016][ T4742] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2410.314029][ T4742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2410.322004][ T4742] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2410.329988][ T4742] [ 2410.497814][ T4700] net_ratelimit: 284 callbacks suppressed [ 2410.497830][ T4700] dccp_time_wait: time wait bucket table overflow [ 2410.513292][ T3690] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2410.521499][ T4700] dccp_time_wait: time wait bucket table overflow [ 2410.528515][ T4700] dccp_time_wait: time wait bucket table overflow [ 2410.528787][ T4727] dccp_time_wait: time wait bucket table overflow [ 2410.541901][ T4700] dccp_time_wait: time wait bucket table overflow [ 2410.550091][ T4700] dccp_time_wait: time wait bucket table overflow [ 2410.558463][ T4700] dccp_time_wait: time wait bucket table overflow [ 2410.565768][ T4700] dccp_time_wait: time wait bucket table overflow [ 2410.574795][ C1] dccp_time_wait: time wait bucket table overflow [ 2410.590317][ T4727] dccp_time_wait: time wait bucket table overflow [ 2410.783329][ T3690] usb 2-1: Using ep0 maxpacket: 16 [ 2410.833515][ T3690] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2410.963490][ T3690] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2410.971178][ T3690] usb 2-1: can't read configurations, error -61 [ 2410.977922][ T3690] usb usb2-port1: attempt power cycle [ 2411.404443][ T3690] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2411.493445][ T3690] usb 2-1: Using ep0 maxpacket: 16 [ 2411.533443][ T3690] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 2411.653481][ T3690] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2411.662710][ T3690] usb 2-1: can't read configurations, error -61 [ 2411.813329][ T3690] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2411.903394][ T3690] usb 2-1: Using ep0 maxpacket: 16 [ 2411.943515][ T3690] usb 2-1: too many configurations: 99, using maximum allowed: 8 15:03:34 executing program 1: syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) 15:03:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000900f1ffffff"], 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, r6}, 0xc) 15:03:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x8108551b, &(0x7f0000000040)) (async) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000002, 0x4010, r5, 0x83ef2000) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x80000, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:34 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 67) [ 2412.074100][ T3690] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2412.081754][ T3690] usb 2-1: can't read configurations, error -61 [ 2412.088341][ T3690] usb usb2-port1: unable to enumerate USB device 15:03:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x8108551b, &(0x7f0000000040)) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000002, 0x4010, r5, 0x83ef2000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x80000, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x8108551b, &(0x7f0000000040)) (async) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000002, 0x4010, r5, 0x83ef2000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r6, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x80000, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, &(0x7f0000000040)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x50, r1, 0xa456b000) [ 2412.251332][ T4767] FAULT_INJECTION: forcing a failure. [ 2412.251332][ T4767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2412.315554][ T4767] CPU: 0 PID: 4767 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2412.325600][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2412.335678][ T4767] Call Trace: [ 2412.338970][ T4767] [ 2412.341917][ T4767] dump_stack_lvl+0xcd/0x134 [ 2412.346535][ T4767] should_fail.cold+0x5/0xa [ 2412.351077][ T4767] _copy_from_user+0x2a/0x170 [ 2412.355783][ T4767] move_addr_to_kernel.part.0+0x31/0x110 [ 2412.361461][ T4767] move_addr_to_kernel+0x4f/0x70 [ 2412.366448][ T4767] io_connect+0x3c9/0x4b0 [ 2412.370848][ T4767] ? io_connect_prep+0x220/0x220 [ 2412.375828][ T4767] ? __fget_files+0x26a/0x440 [ 2412.380533][ T4767] ? io_connect_prep+0x220/0x220 [ 2412.385504][ T4767] io_issue_sqe+0x69d/0xd00 [ 2412.390040][ T4767] io_submit_sqes+0x936/0x1d10 [ 2412.394847][ T4767] __do_sys_io_uring_enter+0xadb/0x2430 [ 2412.400427][ T4767] ? lock_acquire+0x480/0x570 [ 2412.405134][ T4767] ? lock_release+0x560/0x780 [ 2412.409830][ T4767] ? rcu_read_lock_sched_held+0xd/0x70 [ 2412.415325][ T4767] ? __ct_user_exit+0xff/0x150 [ 2412.420123][ T4767] ? io_submit_sqes+0x1d10/0x1d10 [ 2412.425177][ T4767] ? lock_downgrade+0x6e0/0x6e0 [ 2412.430057][ T4767] ? vtime_user_exit+0x218/0x6c0 [ 2412.435024][ T4767] ? trace_hardirqs_on+0x2d/0x120 [ 2412.440076][ T4767] do_syscall_64+0x35/0xb0 [ 2412.444489][ T4767] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2412.450380][ T4767] RIP: 0033:0x7f9bb008a5a9 [ 2412.454796][ T4767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2412.474400][ T4767] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2412.482814][ T4767] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2412.490773][ T4767] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2412.498730][ T4767] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2412.506692][ T4767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2412.514649][ T4767] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2412.522617][ T4767] 15:03:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_setup(0xb2d, &(0x7f0000000180)={0x0, 0x6e56, 0x4, 0x2, 0x12e, 0x0, r2}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:35 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 68) [ 2412.773887][ T3691] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2412.791068][ T4810] FAULT_INJECTION: forcing a failure. [ 2412.791068][ T4810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2412.856586][ T4810] CPU: 1 PID: 4810 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2412.866604][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2412.876660][ T4810] Call Trace: [ 2412.879937][ T4810] [ 2412.882858][ T4810] dump_stack_lvl+0xcd/0x134 [ 2412.887447][ T4810] should_fail.cold+0x5/0xa [ 2412.891953][ T4810] _copy_from_user+0x2a/0x170 [ 2412.896651][ T4810] move_addr_to_kernel.part.0+0x31/0x110 [ 2412.902286][ T4810] move_addr_to_kernel+0x4f/0x70 [ 2412.907227][ T4810] io_connect+0x3c9/0x4b0 [ 2412.911734][ T4810] ? io_connect_prep+0x220/0x220 [ 2412.916695][ T4810] ? __fget_files+0x26a/0x440 [ 2412.921407][ T4810] ? io_connect_prep+0x220/0x220 [ 2412.926398][ T4810] io_issue_sqe+0x69d/0xd00 [ 2412.931037][ T4810] io_submit_sqes+0x936/0x1d10 [ 2412.935848][ T4810] __do_sys_io_uring_enter+0xadb/0x2430 [ 2412.941538][ T4810] ? lock_acquire+0x480/0x570 [ 2412.946254][ T4810] ? lock_release+0x560/0x780 [ 2412.950959][ T4810] ? rcu_read_lock_sched_held+0xd/0x70 [ 2412.956463][ T4810] ? __ct_user_exit+0xff/0x150 [ 2412.961274][ T4810] ? io_submit_sqes+0x1d10/0x1d10 [ 2412.966336][ T4810] ? lock_downgrade+0x6e0/0x6e0 [ 2412.971218][ T4810] ? vtime_user_exit+0x218/0x6c0 [ 2412.976187][ T4810] ? trace_hardirqs_on+0x2d/0x120 [ 2412.981329][ T4810] do_syscall_64+0x35/0xb0 [ 2412.985751][ T4810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2412.991639][ T4810] RIP: 0033:0x7f9bb008a5a9 [ 2412.996046][ T4810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2413.015645][ T4810] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2413.023295][ T3691] usb 2-1: Using ep0 maxpacket: 16 [ 2413.024046][ T4810] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2413.037117][ T4810] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2413.045094][ T4810] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 15:03:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, &(0x7f0000000040)) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x50, r1, 0xa456b000) [ 2413.053166][ T4810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2413.061136][ T4810] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2413.069111][ T4810] 15:03:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r8}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2413.164999][ T3691] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2413.173107][ T3691] usb 2-1: config 0 has no interface number 0 [ 2413.343602][ T3691] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2413.361856][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.405026][ T3691] usb 2-1: Product: syz [ 2413.421692][ T3691] usb 2-1: Manufacturer: syz [ 2413.450595][ T3691] usb 2-1: SerialNumber: syz [ 2413.475819][ T3691] usb 2-1: config 0 descriptor?? [ 2413.729165][T28611] usb 2-1: USB disconnect, device number 13 15:03:36 executing program 1: syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) 15:03:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 69) 15:03:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (rerun: 64) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (rerun: 32) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_setup(0xb2d, &(0x7f0000000180)={0x0, 0x6e56, 0x4, 0x2, 0x12e, 0x0, r2}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x8108551b, &(0x7f0000000040)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x50, r1, 0xa456b000) 15:03:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async, rerun: 64) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_setup(0xb2d, &(0x7f0000000180)={0x0, 0x6e56, 0x4, 0x2, 0x12e, 0x0, r2}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2414.315915][ T4850] FAULT_INJECTION: forcing a failure. [ 2414.315915][ T4850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2414.363496][ T4850] CPU: 1 PID: 4850 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2414.373508][ T4850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2414.383573][ T4850] Call Trace: [ 2414.386843][ T4850] [ 2414.389769][ T4850] dump_stack_lvl+0xcd/0x134 [ 2414.394364][ T4850] should_fail.cold+0x5/0xa [ 2414.398899][ T4850] _copy_from_user+0x2a/0x170 [ 2414.403583][ T4850] move_addr_to_kernel.part.0+0x31/0x110 [ 2414.409239][ T4850] move_addr_to_kernel+0x4f/0x70 [ 2414.414191][ T4850] io_connect+0x3c9/0x4b0 [ 2414.418537][ T4850] ? io_connect_prep+0x220/0x220 [ 2414.423497][ T4850] ? __fget_files+0x26a/0x440 [ 2414.428172][ T4850] ? io_connect_prep+0x220/0x220 [ 2414.433105][ T4850] io_issue_sqe+0x69d/0xd00 [ 2414.437603][ T4850] io_submit_sqes+0x936/0x1d10 [ 2414.442378][ T4850] __do_sys_io_uring_enter+0xadb/0x2430 [ 2414.447926][ T4850] ? lock_acquire+0x480/0x570 [ 2414.452623][ T4850] ? lock_release+0x560/0x780 [ 2414.457298][ T4850] ? rcu_read_lock_sched_held+0xd/0x70 [ 2414.462760][ T4850] ? __ct_user_exit+0xff/0x150 [ 2414.467532][ T4850] ? io_submit_sqes+0x1d10/0x1d10 [ 2414.472567][ T4850] ? lock_downgrade+0x6e0/0x6e0 [ 2414.477439][ T4850] ? vtime_user_exit+0x218/0x6c0 [ 2414.482378][ T4850] ? trace_hardirqs_on+0x2d/0x120 [ 2414.487414][ T4850] do_syscall_64+0x35/0xb0 [ 2414.491826][ T4850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2414.497730][ T4850] RIP: 0033:0x7f9bb008a5a9 [ 2414.502156][ T4850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2414.521761][ T4850] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2414.530174][ T4850] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2414.538148][ T4850] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2414.546107][ T4850] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2414.553315][ T3691] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2414.554061][ T4850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2414.554080][ T4850] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2414.577531][ T4850] 15:03:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffe, 0x141101) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x4) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x817d, &(0x7f0000000300)={0x0, 0x1f6a, 0x0, 0x3}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000180)={r1, 0x0, 0xfffffffffffff000, 0x4000}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffe, 0x141101) r1 = dup(r0) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x4) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x817d, &(0x7f0000000300)={0x0, 0x1f6a, 0x0, 0x3}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000180)={r1, 0x0, 0xfffffffffffff000, 0x4000}) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2414.803318][ T3691] usb 2-1: Using ep0 maxpacket: 16 15:03:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffe, 0x141101) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x4) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x817d, &(0x7f0000000300)={0x0, 0x1f6a, 0x0, 0x3}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000180)={r1, 0x0, 0xfffffffffffff000, 0x4000}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffe, 0x141101) (async) dup(r0) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x4) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x817d, &(0x7f0000000300)={0x0, 0x1f6a, 0x0, 0x3}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000180)={r1, 0x0, 0xfffffffffffff000, 0x4000}) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2414.924052][ T3691] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2414.953058][ T3691] usb 2-1: config 0 has no interface number 0 15:03:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1858) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 15:03:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @sack_perm], 0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2415.143587][ T3691] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2415.157255][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.174317][ T3691] usb 2-1: Product: syz [ 2415.178651][ T3691] usb 2-1: Manufacturer: syz [ 2415.183676][ T3691] usb 2-1: SerialNumber: syz [ 2415.195421][ T3691] usb 2-1: config 0 descriptor?? [ 2415.436358][ T3691] usb 2-1: USB disconnect, device number 14 15:03:38 executing program 1: syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) 15:03:38 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 70) 15:03:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, 0x0, 0x3) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 64) r3 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1858) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 15:03:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @sack_perm], 0x3) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 64) memfd_create(0x0, 0x0) (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x0) (rerun: 32) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (rerun: 64) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1858) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 15:03:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2423, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="7a723c833741789141f0270727a4dd13f171a3dea967df873dd0a4bbf6379f4696210dbc6f38cb673c9a8ae1ab1709135be957b8b861aeb00dfccc73dae2f6c3d22881c47d5518a5b4d54d3c526c66362c523c9b86a8fde60ebc3c68", 0x5c, 0xc084, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x5, 0x81, @vifc_lcl_addr=@multicast1, @empty}, 0x10) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2416.071225][ T4904] FAULT_INJECTION: forcing a failure. [ 2416.071225][ T4904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2416.090043][ T4904] CPU: 1 PID: 4904 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2416.100070][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2416.111077][ T4904] Call Trace: [ 2416.114351][ T4904] 15:03:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2416.117270][ T4904] dump_stack_lvl+0xcd/0x134 [ 2416.121867][ T4904] should_fail.cold+0x5/0xa [ 2416.126389][ T4904] _copy_from_user+0x2a/0x170 [ 2416.131068][ T4904] move_addr_to_kernel.part.0+0x31/0x110 [ 2416.136706][ T4904] move_addr_to_kernel+0x4f/0x70 [ 2416.141655][ T4904] io_connect+0x3c9/0x4b0 [ 2416.146000][ T4904] ? io_connect_prep+0x220/0x220 [ 2416.150980][ T4904] ? __fget_files+0x26a/0x440 [ 2416.156651][ T4904] ? io_connect_prep+0x220/0x220 [ 2416.161616][ T4904] io_issue_sqe+0x69d/0xd00 [ 2416.166131][ T4904] io_submit_sqes+0x936/0x1d10 [ 2416.170915][ T4904] __do_sys_io_uring_enter+0xadb/0x2430 [ 2416.176476][ T4904] ? lock_acquire+0x480/0x570 [ 2416.181267][ T4904] ? lock_release+0x560/0x780 [ 2416.185952][ T4904] ? rcu_read_lock_sched_held+0xd/0x70 [ 2416.191433][ T4904] ? __ct_user_exit+0xff/0x150 [ 2416.196224][ T4904] ? io_submit_sqes+0x1d10/0x1d10 [ 2416.201280][ T4904] ? lock_downgrade+0x6e0/0x6e0 [ 2416.206142][ T4904] ? vtime_user_exit+0x218/0x6c0 [ 2416.211711][ T4904] ? trace_hardirqs_on+0x2d/0x120 [ 2416.216759][ T4904] do_syscall_64+0x35/0xb0 [ 2416.221194][ T4904] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2416.227102][ T4904] RIP: 0033:0x7f9bb008a5a9 [ 2416.231534][ T4904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2416.251167][ T4904] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2416.259594][ T4904] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2416.267659][ T4904] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2416.275634][ T4904] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2416.283609][ T4904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2416.291592][ T4904] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2416.299581][ T4904] [ 2416.373290][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd 15:03:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2416.633436][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2416.753446][ T7] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 15:03:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 71) 15:03:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @sack_perm], 0x3) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2416.800591][ T7] usb 2-1: config 0 has no interface number 0 [ 2416.979642][ T4934] FAULT_INJECTION: forcing a failure. [ 2416.979642][ T4934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2417.003842][ T7] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2417.023339][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.062175][ T7] usb 2-1: Product: syz [ 2417.066817][ T4934] CPU: 0 PID: 4934 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2417.076909][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2417.086965][ T4934] Call Trace: [ 2417.090331][ T4934] [ 2417.093861][ T4934] dump_stack_lvl+0xcd/0x134 [ 2417.098448][ T4934] should_fail.cold+0x5/0xa [ 2417.102952][ T4934] _copy_from_user+0x2a/0x170 [ 2417.107632][ T4934] move_addr_to_kernel.part.0+0x31/0x110 [ 2417.113279][ T4934] move_addr_to_kernel+0x4f/0x70 [ 2417.118229][ T4934] io_connect+0x3c9/0x4b0 [ 2417.122569][ T4934] ? io_connect_prep+0x220/0x220 [ 2417.127525][ T4934] ? __fget_files+0x26a/0x440 [ 2417.132237][ T4934] ? io_connect_prep+0x220/0x220 [ 2417.137207][ T4934] io_issue_sqe+0x69d/0xd00 [ 2417.141741][ T4934] io_submit_sqes+0x936/0x1d10 [ 2417.146538][ T4934] __do_sys_io_uring_enter+0xadb/0x2430 [ 2417.152111][ T4934] ? lock_acquire+0x480/0x570 [ 2417.156809][ T4934] ? lock_release+0x560/0x780 [ 2417.161510][ T4934] ? rcu_read_lock_sched_held+0xd/0x70 [ 2417.167009][ T4934] ? __ct_user_exit+0xff/0x150 [ 2417.171813][ T4934] ? io_submit_sqes+0x1d10/0x1d10 [ 2417.176869][ T4934] ? lock_downgrade+0x6e0/0x6e0 [ 2417.181734][ T4934] ? vtime_user_exit+0x218/0x6c0 [ 2417.186691][ T4934] ? trace_hardirqs_on+0x2d/0x120 [ 2417.191742][ T4934] do_syscall_64+0x35/0xb0 [ 2417.196178][ T4934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2417.202085][ T4934] RIP: 0033:0x7f9bb008a5a9 [ 2417.206524][ T4934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2417.226139][ T4934] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2417.234588][ T4934] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2417.242567][ T4934] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2417.250543][ T4934] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2417.258519][ T4934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2417.266493][ T4934] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2417.274477][ T4934] [ 2417.301281][ T7] usb 2-1: Manufacturer: syz [ 2417.318613][ T7] usb 2-1: SerialNumber: syz [ 2417.352495][ T7] usb 2-1: config 0 descriptor?? [ 2417.594313][ T4280] usb 2-1: USB disconnect, device number 15 15:03:40 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async, rerun: 64) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:40 executing program 1: syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0xb8, 0xa1, 0xb, 0x10, 0x67b, 0x27a1, 0x5b6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x24}}]}}, 0x0) syz_usb_connect$printer(0xa19e619d09d4b8e0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x9e, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x40, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7f, 0x5, 0x80, 0x20}, 0x32, &(0x7f00000000c0)={0x5, 0xf, 0x32, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0xc, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x20, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x6, 0x30, 0xf4, 0x0, 0x2000, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x9, 0x703}, @ext_cap={0x7, 0x10, 0x2, 0x1b, 0x1, 0x1}]}, 0x4, [{0xc7, &(0x7f0000000100)=@string={0xc7, 0x3, "d1bbe60c5eae2f6633236bbc13e762467392bfebd591580f89db9497a3bb6426137eb55c926d6a76adab87f30efe7d565af01faa0e2cbc0823a0360fd4c0bc4f5e55e8926ab9b125a7a6534ba8f301b61bf76431fb9034386607e8072946c52254a27513e69b692c46e538fd78fe64f80c1c498d76f457701222fc1d24c9578d147d58a0674b86f038687508833586f29e9626148c673049380c75b77e63e87fd66f2301309fa2eebb31e619525e168ec72bea0f54707c8146f9df9ce6fc06abc7e86f9f0c"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x142e}}, {0x2d, &(0x7f0000000240)=@string={0x2d, 0x3, "319be3d0f08ac883fdafaf32bc8f585c67b397a07ff20f970ec977f952770cad291aa43887282bb93fde6b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}]}) 15:03:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 64) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x2423, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (rerun: 32) r6 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async, rerun: 64) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (rerun: 64) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="7a723c833741789141f0270727a4dd13f171a3dea967df873dd0a4bbf6379f4696210dbc6f38cb673c9a8ae1ab1709135be957b8b861aeb00dfccc73dae2f6c3d22881c47d5518a5b4d54d3c526c66362c523c9b86a8fde60ebc3c68", 0x5c, 0xc084, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 64) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x5, 0x81, @vifc_lcl_addr=@multicast1, @empty}, 0x10) (async, rerun: 64) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (rerun: 64) 15:03:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 72) 15:03:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x2423, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="7a723c833741789141f0270727a4dd13f171a3dea967df873dd0a4bbf6379f4696210dbc6f38cb673c9a8ae1ab1709135be957b8b861aeb00dfccc73dae2f6c3d22881c47d5518a5b4d54d3c526c66362c523c9b86a8fde60ebc3c68", 0x5c, 0xc084, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x5, 0x81, @vifc_lcl_addr=@multicast1, @empty}, 0x10) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:40 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)=""/27, 0x1b}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x18, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x6, @empty, 0x2aa}, @in6={0xa, 0x4e21, 0x3, @remote, 0x2b000000}, @in6={0xa, 0x4e24, 0x2, @local, 0x1}], 0x80) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000380)) [ 2418.185019][ T4957] FAULT_INJECTION: forcing a failure. [ 2418.185019][ T4957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2418.244528][ T4957] CPU: 1 PID: 4957 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2418.254557][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2418.264710][ T4957] Call Trace: [ 2418.267991][ T4957] [ 2418.270916][ T4957] dump_stack_lvl+0xcd/0x134 [ 2418.275507][ T4957] should_fail.cold+0x5/0xa [ 2418.280034][ T4957] _copy_from_user+0x2a/0x170 [ 2418.284743][ T4957] move_addr_to_kernel.part.0+0x31/0x110 [ 2418.290417][ T4957] move_addr_to_kernel+0x4f/0x70 [ 2418.295475][ T4957] io_connect+0x3c9/0x4b0 [ 2418.299841][ T4957] ? io_connect_prep+0x220/0x220 [ 2418.304785][ T4957] ? __fget_files+0x26a/0x440 [ 2418.309469][ T4957] ? io_connect_prep+0x220/0x220 [ 2418.314411][ T4957] io_issue_sqe+0x69d/0xd00 [ 2418.318912][ T4957] io_submit_sqes+0x936/0x1d10 [ 2418.323680][ T4957] __do_sys_io_uring_enter+0xadb/0x2430 [ 2418.329225][ T4957] ? lock_acquire+0x480/0x570 [ 2418.333894][ T4957] ? lock_release+0x560/0x780 [ 2418.338564][ T4957] ? rcu_read_lock_sched_held+0xd/0x70 [ 2418.344067][ T4957] ? __ct_user_exit+0xff/0x150 [ 2418.348843][ T4957] ? io_submit_sqes+0x1d10/0x1d10 [ 2418.353876][ T4957] ? lock_downgrade+0x6e0/0x6e0 [ 2418.358825][ T4957] ? vtime_user_exit+0x218/0x6c0 [ 2418.363760][ T4957] ? trace_hardirqs_on+0x2d/0x120 [ 2418.368784][ T4957] do_syscall_64+0x35/0xb0 [ 2418.373203][ T4957] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2418.379091][ T4957] RIP: 0033:0x7f9bb008a5a9 [ 2418.383495][ T4957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2418.403089][ T4957] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2418.411490][ T4957] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2418.413326][ T4280] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2418.419473][ T4957] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2418.434996][ T4957] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2418.442954][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2418.450919][ T4957] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2418.458896][ T4957] [ 2418.698028][ T4969] net_ratelimit: 243 callbacks suppressed [ 2418.698044][ T4969] dccp_time_wait: time wait bucket table overflow [ 2418.698699][ T4970] dccp_time_wait: time wait bucket table overflow [ 2418.718957][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 2418.737349][ T4970] dccp_time_wait: time wait bucket table overflow [ 2418.756092][ T4969] dccp_time_wait: time wait bucket table overflow [ 2418.765830][ T4956] dccp_time_wait: time wait bucket table overflow [ 2418.778130][ T4970] dccp_time_wait: time wait bucket table overflow [ 2418.785460][ T4969] dccp_time_wait: time wait bucket table overflow [ 2418.793487][ T4956] dccp_time_wait: time wait bucket table overflow [ 2418.802344][ T4970] dccp_time_wait: time wait bucket table overflow [ 2418.811116][ T4969] dccp_time_wait: time wait bucket table overflow [ 2418.843458][ T4280] usb 2-1: config 36 has no interfaces? 15:03:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) 15:03:41 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x141501) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f00000003c0)='y\x105\x01\x01\x02\x00\xbe\x04\x00\x00\x00\xe7\x17\xa0=\x0e~F\xcds', 0x0) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x5, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5b, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000380)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0xb, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}, 0xf4}}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) 15:03:41 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 73) [ 2419.003596][ T4280] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=5b.6e [ 2419.012995][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.035387][ T4280] usb 2-1: Product: syz [ 2419.043574][ T4280] usb 2-1: Manufacturer: syz [ 2419.048271][ T4280] usb 2-1: SerialNumber: syz 15:03:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000003300)=ANY=[@ANYBLOB="6301000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a505cd477945558bc338907adb98c4fd762f9db69bcccb41668380f2470a462996842a69948b77be45106d5adcb6e69acd3104e1913bfda8619160cbd0cd01b93915a9e0a6f8087cabd14a811d07c915f3c92303d577871ce6a2ea404b02f14aa2c083b4db6ce054372cc26c1a6bc0b22d1a8148a10a65208a4ff7a646a992fe2ea6ed7257e87234921c580a2a05d5817de3524ebd3c3ea2a0c0fc8f66088f8213707c62110accdbddf88a21e4f81123ede184739e3600f823c4e027c9c4dfa75b16a656c0d5c49e6682c223190b83ef578eea796d9a3c1f2116151d72f582f4ad5"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000180)={0x9, "115b95fc9dd267de59d43fc073b8c263025c467f7a24955731be3e7a8af5d435", 0x3, 0x1}) close(r1) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10}}], 0x700, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040)=0x7fffffff, 0x4) [ 2419.256005][ T4999] FAULT_INJECTION: forcing a failure. [ 2419.256005][ T4999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2419.286126][ T4999] CPU: 0 PID: 4999 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2419.296170][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2419.306251][ T4999] Call Trace: [ 2419.309548][ T4999] [ 2419.312500][ T4999] dump_stack_lvl+0xcd/0x134 [ 2419.317124][ T4999] should_fail.cold+0x5/0xa [ 2419.321683][ T4999] _copy_from_user+0x2a/0x170 [ 2419.326404][ T4999] move_addr_to_kernel.part.0+0x31/0x110 [ 2419.332086][ T4999] move_addr_to_kernel+0x4f/0x70 [ 2419.337072][ T4999] io_connect+0x3c9/0x4b0 [ 2419.341446][ T4999] ? io_connect_prep+0x220/0x220 [ 2419.346394][ T4999] ? __fget_files+0x26a/0x440 [ 2419.351072][ T4999] ? io_connect_prep+0x220/0x220 [ 2419.356012][ T4999] io_issue_sqe+0x69d/0xd00 [ 2419.360513][ T4999] io_submit_sqes+0x936/0x1d10 [ 2419.365280][ T4999] __do_sys_io_uring_enter+0xadb/0x2430 [ 2419.370829][ T4999] ? lock_acquire+0x480/0x570 [ 2419.375521][ T4999] ? lock_release+0x560/0x780 [ 2419.380199][ T4999] ? rcu_read_lock_sched_held+0xd/0x70 [ 2419.385666][ T4999] ? __ct_user_exit+0xff/0x150 [ 2419.390462][ T4999] ? io_submit_sqes+0x1d10/0x1d10 [ 2419.395481][ T4999] ? lock_downgrade+0x6e0/0x6e0 [ 2419.400324][ T4999] ? vtime_user_exit+0x218/0x6c0 [ 2419.405289][ T4999] ? trace_hardirqs_on+0x2d/0x120 [ 2419.410319][ T4999] do_syscall_64+0x35/0xb0 [ 2419.414760][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2419.420660][ T4999] RIP: 0033:0x7f9bb008a5a9 [ 2419.425067][ T4999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2419.444674][ T4999] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2419.453090][ T4999] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2419.461073][ T4999] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2419.469034][ T4999] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2419.476996][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2419.484971][ T4999] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2419.492962][ T4999] [ 2419.507362][ T4280] usb 2-1: USB disconnect, device number 16 15:03:42 executing program 1: syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0xb8, 0xa1, 0xb, 0x10, 0x67b, 0x27a1, 0x5b6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x24}}]}}, 0x0) syz_usb_connect$printer(0xa19e619d09d4b8e0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x9e, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x40, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7f, 0x5, 0x80, 0x20}, 0x32, &(0x7f00000000c0)={0x5, 0xf, 0x32, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0xc, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x20, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x6, 0x30, 0xf4, 0x0, 0x2000, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x9, 0x703}, @ext_cap={0x7, 0x10, 0x2, 0x1b, 0x1, 0x1}]}, 0x4, [{0xc7, &(0x7f0000000100)=@string={0xc7, 0x3, "d1bbe60c5eae2f6633236bbc13e762467392bfebd591580f89db9497a3bb6426137eb55c926d6a76adab87f30efe7d565af01faa0e2cbc0823a0360fd4c0bc4f5e55e8926ab9b125a7a6534ba8f301b61bf76431fb9034386607e8072946c52254a27513e69b692c46e538fd78fe64f80c1c498d76f457701222fc1d24c9578d147d58a0674b86f038687508833586f29e9626148c673049380c75b77e63e87fd66f2301309fa2eebb31e619525e168ec72bea0f54707c8146f9df9ce6fc06abc7e86f9f0c"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x142e}}, {0x2d, &(0x7f0000000240)=@string={0x2d, 0x3, "319be3d0f08ac883fdafaf32bc8f585c67b397a07ff20f970ec977f952770cad291aa43887282bb93fde6b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}]}) 15:03:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x141501) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f00000003c0)='y\x105\x01\x01\x02\x00\xbe\x04\x00\x00\x00\xe7\x17\xa0=\x0e~F\xcds', 0x0) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x5, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5b, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000380)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0xb, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}, 0xf4}}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x141501) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f00000003c0)='y\x105\x01\x01\x02\x00\xbe\x04\x00\x00\x00\xe7\x17\xa0=\x0e~F\xcds', 0x0) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x5, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x5b, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000380)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0xb, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}, 0xf4}}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)=""/27, 0x1b}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x18, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x6, @empty, 0x2aa}, @in6={0xa, 0x4e21, 0x3, @remote, 0x2b000000}, @in6={0xa, 0x4e24, 0x2, @local, 0x1}], 0x80) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000380)) 15:03:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x4, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000001c0)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x8108551b, &(0x7f0000000040)) sendfile(r6, r7, &(0x7f0000000180)=0x5149, 0x1000) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 74) 15:03:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) (async, rerun: 64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') (async, rerun: 64) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000003300)=ANY=[@ANYBLOB="6301000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a505cd477945558bc338907adb98c4fd762f9db69bcccb41668380f2470a462996842a69948b77be45106d5adcb6e69acd3104e1913bfda8619160cbd0cd01b93915a9e0a6f8087cabd14a811d07c915f3c92303d577871ce6a2ea404b02f14aa2c083b4db6ce054372cc26c1a6bc0b22d1a8148a10a65208a4ff7a646a992fe2ea6ed7257e87234921c580a2a05d5817de3524ebd3c3ea2a0c0fc8f66088f8213707c62110accdbddf88a21e4f81123ede184739e3600f823c4e027c9c4dfa75b16a656c0d5c49e6682c223190b83ef578eea796d9a3c1f2116151d72f582f4ad5"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) (async) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000180)={0x9, "115b95fc9dd267de59d43fc073b8c263025c467f7a24955731be3e7a8af5d435", 0x3, 0x1}) close(r1) (async, rerun: 32) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10}}], 0x700, 0x2, 0x0) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040)=0x7fffffff, 0x4) 15:03:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x141501) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 64) r2 = memfd_create(&(0x7f00000003c0)='y\x105\x01\x01\x02\x00\xbe\x04\x00\x00\x00\xe7\x17\xa0=\x0e~F\xcds', 0x0) (rerun: 64) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x5, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5b, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000380)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0xb, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}, 0xf4}}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)=""/27, 0x1b}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x18, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x6, @empty, 0x2aa}, @in6={0xa, 0x4e21, 0x3, @remote, 0x2b000000}, @in6={0xa, 0x4e24, 0x2, @local, 0x1}], 0x80) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000380)) 15:03:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000003300)=ANY=[@ANYBLOB="6301000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a505cd477945558bc338907adb98c4fd762f9db69bcccb41668380f2470a462996842a69948b77be45106d5adcb6e69acd3104e1913bfda8619160cbd0cd01b93915a9e0a6f8087cabd14a811d07c915f3c92303d577871ce6a2ea404b02f14aa2c083b4db6ce054372cc26c1a6bc0b22d1a8148a10a65208a4ff7a646a992fe2ea6ed7257e87234921c580a2a05d5817de3524ebd3c3ea2a0c0fc8f66088f8213707c62110accdbddf88a21e4f81123ede184739e3600f823c4e027c9c4dfa75b16a656c0d5c49e6682c223190b83ef578eea796d9a3c1f2116151d72f582f4ad5"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000180)={0x9, "115b95fc9dd267de59d43fc073b8c263025c467f7a24955731be3e7a8af5d435", 0x3, 0x1}) close(r1) (async) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10}}], 0x700, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040)=0x7fffffff, 0x4) [ 2420.092744][ T5044] FAULT_INJECTION: forcing a failure. [ 2420.092744][ T5044] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:03:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/arp\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xffffffff, 0x1, 0x0, 0x234}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000280)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x100000000, 0x7, 0x40c2a26a}) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x8108551b, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r6, 0xfffe, 0x0, 0x7, 0x7, 0x0, {0x0, r7}}, 0x1858) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2420.213367][ T5044] CPU: 1 PID: 5044 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2420.223406][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2420.233472][ T5044] Call Trace: [ 2420.236741][ T5044] [ 2420.239658][ T5044] dump_stack_lvl+0xcd/0x134 [ 2420.244241][ T5044] should_fail.cold+0x5/0xa [ 2420.248740][ T5044] _copy_from_user+0x2a/0x170 [ 2420.253425][ T5044] move_addr_to_kernel.part.0+0x31/0x110 [ 2420.259058][ T5044] move_addr_to_kernel+0x4f/0x70 [ 2420.263994][ T5044] io_connect+0x3c9/0x4b0 [ 2420.268323][ T5044] ? io_connect_prep+0x220/0x220 [ 2420.273271][ T5044] ? __fget_files+0x26a/0x440 [ 2420.277950][ T5044] ? io_connect_prep+0x220/0x220 [ 2420.282886][ T5044] io_issue_sqe+0x69d/0xd00 [ 2420.287381][ T5044] io_submit_sqes+0x936/0x1d10 [ 2420.292175][ T5044] __do_sys_io_uring_enter+0xadb/0x2430 [ 2420.297713][ T5044] ? lock_acquire+0x480/0x570 [ 2420.302383][ T5044] ? lock_release+0x560/0x780 [ 2420.307048][ T5044] ? rcu_read_lock_sched_held+0xd/0x70 [ 2420.312503][ T5044] ? __ct_user_exit+0xff/0x150 [ 2420.317264][ T5044] ? io_submit_sqes+0x1d10/0x1d10 [ 2420.322294][ T5044] ? lock_downgrade+0x6e0/0x6e0 [ 2420.327143][ T5044] ? vtime_user_exit+0x218/0x6c0 [ 2420.332096][ T5044] ? trace_hardirqs_on+0x2d/0x120 [ 2420.337131][ T5044] do_syscall_64+0x35/0xb0 [ 2420.341553][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2420.347447][ T5044] RIP: 0033:0x7f9bb008a5a9 [ 2420.351852][ T5044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2420.371537][ T5044] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2420.379936][ T5044] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2420.387895][ T5044] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2420.395851][ T5044] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 [ 2420.403810][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:03:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2420.411765][ T5044] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2420.419727][ T5044] 15:03:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2420.493374][ T4280] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2420.743315][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 2420.863446][ T4280] usb 2-1: config 36 has no interfaces? [ 2421.023513][ T4280] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=5b.6e [ 2421.060277][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.144070][ T4280] usb 2-1: Product: syz [ 2421.209068][ T4280] usb 2-1: Manufacturer: syz [ 2421.236458][ T4280] usb 2-1: SerialNumber: syz [ 2421.499791][ T4280] usb 2-1: USB disconnect, device number 17 15:03:44 executing program 1: syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0xb8, 0xa1, 0xb, 0x10, 0x67b, 0x27a1, 0x5b6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x24}}]}}, 0x0) (async) syz_usb_connect$printer(0xa19e619d09d4b8e0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x9e, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x40, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7f, 0x5, 0x80, 0x20}, 0x32, &(0x7f00000000c0)={0x5, 0xf, 0x32, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0xc, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x20, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x6, 0x30, 0xf4, 0x0, 0x2000, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x9, 0x703}, @ext_cap={0x7, 0x10, 0x2, 0x1b, 0x1, 0x1}]}, 0x4, [{0xc7, &(0x7f0000000100)=@string={0xc7, 0x3, "d1bbe60c5eae2f6633236bbc13e762467392bfebd591580f89db9497a3bb6426137eb55c926d6a76adab87f30efe7d565af01faa0e2cbc0823a0360fd4c0bc4f5e55e8926ab9b125a7a6534ba8f301b61bf76431fb9034386607e8072946c52254a27513e69b692c46e538fd78fe64f80c1c498d76f457701222fc1d24c9578d147d58a0674b86f038687508833586f29e9626148c673049380c75b77e63e87fd66f2301309fa2eebb31e619525e168ec72bea0f54707c8146f9df9ce6fc06abc7e86f9f0c"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x142e}}, {0x2d, &(0x7f0000000240)=@string={0x2d, 0x3, "319be3d0f08ac883fdafaf32bc8f585c67b397a07ff20f970ec977f952770cad291aa43887282bb93fde6b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}]}) 15:03:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 75) 15:03:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)="cb36c4672b821d06e2026a4d1a40341563d6ec8ee5ab769893a076a31e57a3e1367d025911bb0ce3a619d58ff7278918010a5aec669f08520e7695a234499d4f7a0fff6bdee9efe7f3f7cfa45b861a57be1ccb8658bc1dffd95e070a202a24815579e759eb3e20327a741612b2b76680a06e7cb538c82f4b834ace98088018a29372f5925df0ce6e9a389ca48c69822474714eb537", 0x95}, {&(0x7f0000000240)="fb9a618191ff0f8ad08655bd579be4beef12737b935c1377fdba6f5b56d342b40e4fef66a81ba6c421d6c6f22a17e78713850ced02eb6a66939d588b2574ddc43ae49e7c80230c440100000000000000aef727c636a2865a20b1d328532c0cbf6466dc2337fd2812e261090c1c12e4785f5537fcfcc517840cbea3224f6961d9787399062fdc0c8a6b003e11295b42208b3d06eb77d76f9a812a79a8cae5a24ba6ee5cc58896609985f059957b9e7e6be43f9a032e08eaaeb3bd74bc63cd5c3d9004c8687b6daef6c6985e0133f48e5ff8bda658e9379149a28c1bee783a9500"/242, 0xf2}, {&(0x7f0000000340)="1a090eaa4f423fe88fb0e7fc82d7965bc151ae98d04ce7175ff8dc99f1b41b931c73718bceca7a74ed538d4cb2f2bc26222bbe3ca714a14ba5dbf35f86d0f3192f55be827a3bfc0de4851adabfd2d38fd803b4dd9908036f5692384d9fc46eb9fa0ffa3113e89f28ab2fe8430c76692d25ac74b80ee98baac2fba5514399f388b97c5aaa160988edc7964ea757e7b95369aaa33e1145643e0ea2d438f03d6d1aebe9f5696cc4f47549896df0ad7f2fadd51237f27a3c8855a93def33f383a89f9508c1ef7c1662d6ecd4efee317adf0ff5f78568d7f722e7bff6e4e14b018d97e0116039cbdec9ee3970fbb6", 0xec}, {&(0x7f0000000440)="220cb50087ebe9136d66b3775a61dddee5d52b2e913adbc36d1444a44eaa534767fe8d85a29e63b93da2fe0b3ed0c57c89abb1b856b4761009ed25eb06c2d83b2f18286073aedb0fce71c0b34bce0d146a1d4af1f5df2e6ec2fd0044c6a7a0e4bded577b3f5cd923eac21029ee7955daefe290ac5814e919333080d0deaf71bf1fe84d767e72f2dd0f9a097e0459745d8ca76a2ebee105d863962c6138ee9c2518fd9641958fb58509220e182c98ea12de0debc34ff47fac8c1d492c7e52c619a169ec0658aa92790cbf63a80c2b4934ef3f530d6267e112825d", 0xffffffffffffff34}, {&(0x7f0000000000)="08a1c71f5823ec41ed1200188cbcff9a32fe70e0ae67bd", 0x17}, {&(0x7f00000001c0)}], 0x6) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:03:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='net/arp\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xffffffff, 0x1, 0x0, 0x234}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000280)) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x100000000, 0x7, 0x40c2a26a}) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x8108551b, &(0x7f0000000040)) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r6, 0xfffe, 0x0, 0x7, 0x7, 0x0, {0x0, r7}}, 0x1858) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 64) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 64) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (rerun: 32) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) (async, rerun: 64) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (rerun: 64) 15:03:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xfffffffd, 0x22, 0x0, 0x14c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) syz_io_uring_submit(r7, r4, 0x0, 0xfffffffd) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='net/arp\x00') (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xffffffff, 0x1, 0x0, 0x234}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000280)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x100000000, 0x7, 0x40c2a26a}) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x8108551b, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r6, 0xfffe, 0x0, 0x7, 0x7, 0x0, {0x0, r7}}, 0x1858) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)="cb36c4672b821d06e2026a4d1a40341563d6ec8ee5ab769893a076a31e57a3e1367d025911bb0ce3a619d58ff7278918010a5aec669f08520e7695a234499d4f7a0fff6bdee9efe7f3f7cfa45b861a57be1ccb8658bc1dffd95e070a202a24815579e759eb3e20327a741612b2b76680a06e7cb538c82f4b834ace98088018a29372f5925df0ce6e9a389ca48c69822474714eb537", 0x95}, {&(0x7f0000000240)="fb9a618191ff0f8ad08655bd579be4beef12737b935c1377fdba6f5b56d342b40e4fef66a81ba6c421d6c6f22a17e78713850ced02eb6a66939d588b2574ddc43ae49e7c80230c440100000000000000aef727c636a2865a20b1d328532c0cbf6466dc2337fd2812e261090c1c12e4785f5537fcfcc517840cbea3224f6961d9787399062fdc0c8a6b003e11295b42208b3d06eb77d76f9a812a79a8cae5a24ba6ee5cc58896609985f059957b9e7e6be43f9a032e08eaaeb3bd74bc63cd5c3d9004c8687b6daef6c6985e0133f48e5ff8bda658e9379149a28c1bee783a9500"/242, 0xf2}, {&(0x7f0000000340)="1a090eaa4f423fe88fb0e7fc82d7965bc151ae98d04ce7175ff8dc99f1b41b931c73718bceca7a74ed538d4cb2f2bc26222bbe3ca714a14ba5dbf35f86d0f3192f55be827a3bfc0de4851adabfd2d38fd803b4dd9908036f5692384d9fc46eb9fa0ffa3113e89f28ab2fe8430c76692d25ac74b80ee98baac2fba5514399f388b97c5aaa160988edc7964ea757e7b95369aaa33e1145643e0ea2d438f03d6d1aebe9f5696cc4f47549896df0ad7f2fadd51237f27a3c8855a93def33f383a89f9508c1ef7c1662d6ecd4efee317adf0ff5f78568d7f722e7bff6e4e14b018d97e0116039cbdec9ee3970fbb6", 0xec}, {&(0x7f0000000440)="220cb50087ebe9136d66b3775a61dddee5d52b2e913adbc36d1444a44eaa534767fe8d85a29e63b93da2fe0b3ed0c57c89abb1b856b4761009ed25eb06c2d83b2f18286073aedb0fce71c0b34bce0d146a1d4af1f5df2e6ec2fd0044c6a7a0e4bded577b3f5cd923eac21029ee7955daefe290ac5814e919333080d0deaf71bf1fe84d767e72f2dd0f9a097e0459745d8ca76a2ebee105d863962c6138ee9c2518fd9641958fb58509220e182c98ea12de0debc34ff47fac8c1d492c7e52c619a169ec0658aa92790cbf63a80c2b4934ef3f530d6267e112825d", 0xffffffffffffff34}, {&(0x7f0000000000)="08a1c71f5823ec41ed1200188cbcff9a32fe70e0ae67bd", 0x17}, {&(0x7f00000001c0)}], 0x6) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:03:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000300)={0x0, 0x6cd4, 0x0, 0x0, 0x72}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @remote, 'pimreg0\x00'}}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x13, r1, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x110, r0, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x54c) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)="cb36c4672b821d06e2026a4d1a40341563d6ec8ee5ab769893a076a31e57a3e1367d025911bb0ce3a619d58ff7278918010a5aec669f08520e7695a234499d4f7a0fff6bdee9efe7f3f7cfa45b861a57be1ccb8658bc1dffd95e070a202a24815579e759eb3e20327a741612b2b76680a06e7cb538c82f4b834ace98088018a29372f5925df0ce6e9a389ca48c69822474714eb537", 0x95}, {&(0x7f0000000240)="fb9a618191ff0f8ad08655bd579be4beef12737b935c1377fdba6f5b56d342b40e4fef66a81ba6c421d6c6f22a17e78713850ced02eb6a66939d588b2574ddc43ae49e7c80230c440100000000000000aef727c636a2865a20b1d328532c0cbf6466dc2337fd2812e261090c1c12e4785f5537fcfcc517840cbea3224f6961d9787399062fdc0c8a6b003e11295b42208b3d06eb77d76f9a812a79a8cae5a24ba6ee5cc58896609985f059957b9e7e6be43f9a032e08eaaeb3bd74bc63cd5c3d9004c8687b6daef6c6985e0133f48e5ff8bda658e9379149a28c1bee783a9500"/242, 0xf2}, {&(0x7f0000000340)="1a090eaa4f423fe88fb0e7fc82d7965bc151ae98d04ce7175ff8dc99f1b41b931c73718bceca7a74ed538d4cb2f2bc26222bbe3ca714a14ba5dbf35f86d0f3192f55be827a3bfc0de4851adabfd2d38fd803b4dd9908036f5692384d9fc46eb9fa0ffa3113e89f28ab2fe8430c76692d25ac74b80ee98baac2fba5514399f388b97c5aaa160988edc7964ea757e7b95369aaa33e1145643e0ea2d438f03d6d1aebe9f5696cc4f47549896df0ad7f2fadd51237f27a3c8855a93def33f383a89f9508c1ef7c1662d6ecd4efee317adf0ff5f78568d7f722e7bff6e4e14b018d97e0116039cbdec9ee3970fbb6", 0xec}, {&(0x7f0000000440)="220cb50087ebe9136d66b3775a61dddee5d52b2e913adbc36d1444a44eaa534767fe8d85a29e63b93da2fe0b3ed0c57c89abb1b856b4761009ed25eb06c2d83b2f18286073aedb0fce71c0b34bce0d146a1d4af1f5df2e6ec2fd0044c6a7a0e4bded577b3f5cd923eac21029ee7955daefe290ac5814e919333080d0deaf71bf1fe84d767e72f2dd0f9a097e0459745d8ca76a2ebee105d863962c6138ee9c2518fd9641958fb58509220e182c98ea12de0debc34ff47fac8c1d492c7e52c619a169ec0658aa92790cbf63a80c2b4934ef3f530d6267e112825d", 0xffffffffffffff34}, {&(0x7f0000000000)="08a1c71f5823ec41ed1200188cbcff9a32fe70e0ae67bd", 0x17}, {&(0x7f00000001c0)}], 0x6) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:03:44 executing program 2: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040)=0x9, 0x4) [ 2422.313291][ T4280] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2422.563391][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 2422.693501][ T4280] usb 2-1: config 36 has no interfaces? [ 2422.853437][ T4280] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=5b.6e [ 2422.872033][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.888291][ T4280] usb 2-1: Product: syz [ 2422.907833][ T4280] usb 2-1: Manufacturer: syz [ 2422.912617][ T4280] usb 2-1: SerialNumber: syz [ 2423.175397][T28611] usb 2-1: USB disconnect, device number 18 15:03:46 executing program 1: syz_usb_connect(0x2, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xec, 0x6b, 0x59, 0x10, 0x10b8, 0xbb9, 0xb4ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) 15:03:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x200, 0x100}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x7a, 0x218200) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000340)=0xc6) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) (fail_nth: 76) 15:03:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000300)={0x0, 0x6cd4, 0x0, 0x0, 0x72}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @remote, 'pimreg0\x00'}}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x13, r1, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x110, r0, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x54c) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000300)={0x0, 0x6cd4, 0x0, 0x0, 0x72}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @remote, 'pimreg0\x00'}}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x13, r1, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x110, r0, 0x10000000) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x54c) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:46 executing program 2: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) (async) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040)=0x9, 0x4) 15:03:46 executing program 2: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040)=0x9, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) (async) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040)=0x9, 0x4) (async) 15:03:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000300)={0x0, 0x6cd4, 0x0, 0x0, 0x72}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @remote, 'pimreg0\x00'}}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x13, r1, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x110, r0, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x54c) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000300)={0x0, 0x6cd4, 0x0, 0x0, 0x72}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @remote, 'pimreg0\x00'}}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x13, r1, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x110, r0, 0x10000000) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x54c) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000900000000000000000000801854000009010000000000000000000035b6f8ffffffffff85000000900000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x70, &(0x7f0000000140)=""/112, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xf, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1, 0x1, r2, 0x1, r5]}, 0x80) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) [ 2423.789209][ T5136] FAULT_INJECTION: forcing a failure. [ 2423.789209][ T5136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2423.960152][ T5136] CPU: 0 PID: 5136 Comm: syz-executor.5 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2423.970182][ T5136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2423.980230][ T5136] Call Trace: [ 2423.983503][ T5136] [ 2423.986437][ T5136] dump_stack_lvl+0xcd/0x134 [ 2423.991131][ T5136] should_fail.cold+0x5/0xa [ 2423.993301][T28611] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 2423.995636][ T5136] _copy_from_user+0x2a/0x170 [ 2424.007874][ T5136] move_addr_to_kernel.part.0+0x31/0x110 [ 2424.013511][ T5136] move_addr_to_kernel+0x4f/0x70 [ 2424.018459][ T5136] io_connect+0x3c9/0x4b0 [ 2424.022806][ T5136] ? io_connect_prep+0x220/0x220 [ 2424.027908][ T5136] ? __fget_files+0x26a/0x440 [ 2424.032588][ T5136] ? io_connect_prep+0x220/0x220 [ 2424.037537][ T5136] io_issue_sqe+0x69d/0xd00 [ 2424.042071][ T5136] io_submit_sqes+0x936/0x1d10 [ 2424.046849][ T5136] __do_sys_io_uring_enter+0xadb/0x2430 [ 2424.052403][ T5136] ? lock_acquire+0x480/0x570 [ 2424.057093][ T5136] ? lock_release+0x560/0x780 [ 2424.061772][ T5136] ? rcu_read_lock_sched_held+0xd/0x70 [ 2424.067240][ T5136] ? __ct_user_exit+0xff/0x150 [ 2424.072023][ T5136] ? io_submit_sqes+0x1d10/0x1d10 [ 2424.077066][ T5136] ? lock_downgrade+0x6e0/0x6e0 [ 2424.081960][ T5136] ? vtime_user_exit+0x218/0x6c0 [ 2424.086899][ T5136] ? trace_hardirqs_on+0x2d/0x120 [ 2424.091924][ T5136] do_syscall_64+0x35/0xb0 [ 2424.096341][ T5136] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2424.102235][ T5136] RIP: 0033:0x7f9bb008a5a9 [ 2424.106640][ T5136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2424.126241][ T5136] RSP: 002b:00007f9bb127e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2424.134661][ T5136] RAX: ffffffffffffffda RBX: 00007f9bb01ac050 RCX: 00007f9bb008a5a9 [ 2424.142625][ T5136] RDX: 0000000000000e00 RSI: 00000000000045f5 RDI: 0000000000000006 [ 2424.150583][ T5136] RBP: 00007f9bb127e1d0 R08: 0000000000000000 R09: 0000000000000004 15:03:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000900000000000000000000801854000009010000000000000000000035b6f8ffffffffff85000000900000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x70, &(0x7f0000000140)=""/112, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xf, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1, 0x1, r2, 0x1, r5]}, 0x80) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) 15:03:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000000000ea030000006c653000"]) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x6c000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f00000004c0)='0', 0x1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r8 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r5, r6, 0x0, 0x1858) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2424.158543][ T5136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2424.166504][ T5136] R13: 00007f9bb06dfb1f R14: 00007f9bb127e300 R15: 0000000000022000 [ 2424.174473][ T5136] 15:03:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async, rerun: 32) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000900000000000000000000801854000009010000000000000000000035b6f8ffffffffff85000000900000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x70, &(0x7f0000000140)=""/112, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xf, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1, 0x1, r2, 0x1, r5]}, 0x80) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) [ 2424.523463][T28611] usb 2-1: config 0 has no interfaces? [ 2424.683900][T28611] usb 2-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=b4.ea [ 2424.695064][T28611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.732627][T28611] usb 2-1: Product: syz [ 2424.748905][T28611] usb 2-1: Manufacturer: syz [ 2424.778586][T28611] usb 2-1: SerialNumber: syz [ 2424.794863][T28611] usb 2-1: config 0 descriptor?? [ 2424.857253][ T5137] net_ratelimit: 1306 callbacks suppressed [ 2424.857268][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.870640][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.878780][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.886639][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.895688][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.902423][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.909827][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.916896][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.923922][ T5137] dccp_time_wait: time wait bucket table overflow [ 2424.930705][ T5137] dccp_time_wait: time wait bucket table overflow [ 2425.046718][ T7] usb 2-1: USB disconnect, device number 19 15:03:47 executing program 1: syz_usb_connect(0x2, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xec, 0x6b, 0x59, 0x10, 0x10b8, 0xbb9, 0xb4ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) 15:03:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x0, 0x0, 0x4) 15:03:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x200, 0x100}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x7a, 0x218200) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000340)=0xc6) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0xb02, &(0x7f0000001540)={0x0, 0xcb64, 0x8, 0x2, 0x30a}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000015c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001500)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)="bf8a0cc2ce579766652eca56461314e7b002199b975050635af59e7934801004ff6cd80a828f65886cf4c2285e2554382dbad26277ea11699978a3e9ba484da5b7abcbafedaa5d0eb952643bc6d89064f7836203be5b0efdb5", 0x59}, {&(0x7f00000002c0)="c3223e45fe5f191db796621e5bf5a163887af42b028f8c97d30a1c8d8241e799fc7cb64795e64137e3a7568444b46c19c2258a9df1672bd35adf152d35f4af90d2d2b29e", 0x44}, {&(0x7f00000000c0)}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="b88ce1554210a77ebea4f3ae1e92d7efc081a545a1f733334d1293dfb8e4181a80328756db16552fd3673f36ef7cdf7f6689da2dff3e195ea59fa4fdd3ea728c116defc8b34bee394ab7a6d100a112d9be42fad5e56fa032248ffe3d979f006ba5cf03a300848a71a18b09f99c69e01b8c3a6a63144d5109c08a47403ebb2c1487e689bc", 0x84}, {&(0x7f0000000200)="dcb674eca63a71b4006682245bf8c2c5e6ebe5938e7f3fe3763c647b9b719299151c5e587bf2a8", 0x27}, {&(0x7f0000001400)="d80781545ec8c70e644a6244af32533f0d5782b9ac53ebf63c826700ce5c86a8c939fae1543b79477967", 0x2a}], 0x7}, 0x0, 0x8000}, 0x24) syz_io_uring_complete(r1) 15:03:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000000000ea030000006c653000"]) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x6c000) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f00000004c0)='0', 0x1) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r8 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r5, r6, 0x0, 0x1858) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000000000ea030000006c653000"]) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) (rerun: 64) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x6c000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f00000004c0)='0', 0x1) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 32) memfd_create(0x0, 0x0) (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, 0x0, 0x3) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 64) r8 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r5, r6, 0x0, 0x1858) (async, rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (rerun: 32) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (rerun: 64) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x200, 0x100}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x7a, 0x218200) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000340)=0xc6) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x101) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x2e2b, 0x6d20, 0x3, &(0x7f0000000180)={[0x8]}, 0x8) [ 2425.873465][ T7] usb 2-1: new full-speed USB device number 20 using dummy_hcd 15:03:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe02, 0x0, 0x0, 0x4) [ 2426.253495][ T7] usb 2-1: config 0 has no interfaces? 15:03:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0xb02, &(0x7f0000001540)={0x0, 0xcb64, 0x8, 0x2, 0x30a}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000015c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001500)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)="bf8a0cc2ce579766652eca56461314e7b002199b975050635af59e7934801004ff6cd80a828f65886cf4c2285e2554382dbad26277ea11699978a3e9ba484da5b7abcbafedaa5d0eb952643bc6d89064f7836203be5b0efdb5", 0x59}, {&(0x7f00000002c0)="c3223e45fe5f191db796621e5bf5a163887af42b028f8c97d30a1c8d8241e799fc7cb64795e64137e3a7568444b46c19c2258a9df1672bd35adf152d35f4af90d2d2b29e", 0x44}, {&(0x7f00000000c0)}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="b88ce1554210a77ebea4f3ae1e92d7efc081a545a1f733334d1293dfb8e4181a80328756db16552fd3673f36ef7cdf7f6689da2dff3e195ea59fa4fdd3ea728c116defc8b34bee394ab7a6d100a112d9be42fad5e56fa032248ffe3d979f006ba5cf03a300848a71a18b09f99c69e01b8c3a6a63144d5109c08a47403ebb2c1487e689bc", 0x84}, {&(0x7f0000000200)="dcb674eca63a71b4006682245bf8c2c5e6ebe5938e7f3fe3763c647b9b719299151c5e587bf2a8", 0x27}, {&(0x7f0000001400)="d80781545ec8c70e644a6244af32533f0d5782b9ac53ebf63c826700ce5c86a8c939fae1543b79477967", 0x2a}], 0x7}, 0x0, 0x8000}, 0x24) syz_io_uring_complete(r1) [ 2426.413480][ T7] usb 2-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=b4.ea [ 2426.422586][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2426.510242][ T7] usb 2-1: Product: syz [ 2426.537068][ T7] usb 2-1: Manufacturer: syz [ 2426.566786][ T7] usb 2-1: SerialNumber: syz [ 2426.606414][ T7] usb 2-1: config 0 descriptor?? [ 2426.855376][ T2586] usb 2-1: USB disconnect, device number 20 15:03:49 executing program 1: syz_usb_connect(0x2, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xec, 0x6b, 0x59, 0x10, 0x10b8, 0xbb9, 0xb4ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) 15:03:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0xb02, &(0x7f0000001540)={0x0, 0xcb64, 0x8, 0x2, 0x30a}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000015c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001500)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)="bf8a0cc2ce579766652eca56461314e7b002199b975050635af59e7934801004ff6cd80a828f65886cf4c2285e2554382dbad26277ea11699978a3e9ba484da5b7abcbafedaa5d0eb952643bc6d89064f7836203be5b0efdb5", 0x59}, {&(0x7f00000002c0)="c3223e45fe5f191db796621e5bf5a163887af42b028f8c97d30a1c8d8241e799fc7cb64795e64137e3a7568444b46c19c2258a9df1672bd35adf152d35f4af90d2d2b29e", 0x44}, {&(0x7f00000000c0)}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="b88ce1554210a77ebea4f3ae1e92d7efc081a545a1f733334d1293dfb8e4181a80328756db16552fd3673f36ef7cdf7f6689da2dff3e195ea59fa4fdd3ea728c116defc8b34bee394ab7a6d100a112d9be42fad5e56fa032248ffe3d979f006ba5cf03a300848a71a18b09f99c69e01b8c3a6a63144d5109c08a47403ebb2c1487e689bc", 0x84}, {&(0x7f0000000200)="dcb674eca63a71b4006682245bf8c2c5e6ebe5938e7f3fe3763c647b9b719299151c5e587bf2a8", 0x27}, {&(0x7f0000001400)="d80781545ec8c70e644a6244af32533f0d5782b9ac53ebf63c826700ce5c86a8c939fae1543b79477967", 0x2a}], 0x7}, 0x0, 0x8000}, 0x24) syz_io_uring_complete(r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) syz_io_uring_setup(0xb02, &(0x7f0000001540)={0x0, 0xcb64, 0x8, 0x2, 0x30a}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000015c0)) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000001500)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)="bf8a0cc2ce579766652eca56461314e7b002199b975050635af59e7934801004ff6cd80a828f65886cf4c2285e2554382dbad26277ea11699978a3e9ba484da5b7abcbafedaa5d0eb952643bc6d89064f7836203be5b0efdb5", 0x59}, {&(0x7f00000002c0)="c3223e45fe5f191db796621e5bf5a163887af42b028f8c97d30a1c8d8241e799fc7cb64795e64137e3a7568444b46c19c2258a9df1672bd35adf152d35f4af90d2d2b29e", 0x44}, {&(0x7f00000000c0)}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="b88ce1554210a77ebea4f3ae1e92d7efc081a545a1f733334d1293dfb8e4181a80328756db16552fd3673f36ef7cdf7f6689da2dff3e195ea59fa4fdd3ea728c116defc8b34bee394ab7a6d100a112d9be42fad5e56fa032248ffe3d979f006ba5cf03a300848a71a18b09f99c69e01b8c3a6a63144d5109c08a47403ebb2c1487e689bc", 0x84}, {&(0x7f0000000200)="dcb674eca63a71b4006682245bf8c2c5e6ebe5938e7f3fe3763c647b9b719299151c5e587bf2a8", 0x27}, {&(0x7f0000001400)="d80781545ec8c70e644a6244af32533f0d5782b9ac53ebf63c826700ce5c86a8c939fae1543b79477967", 0x2a}], 0x7}, 0x0, 0x8000}, 0x24) (async) syz_io_uring_complete(r1) (async) 15:03:49 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 1) 15:03:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x101) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 64) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async, rerun: 64) io_uring_enter(r1, 0x2e2b, 0x6d20, 0x3, &(0x7f0000000180)={[0x8]}, 0x8) 15:03:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000340)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe03, 0x0, 0x0, 0x4) 15:03:49 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 2) 15:03:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x101) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 32) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) io_uring_enter(r1, 0x2e2b, 0x6d20, 0x3, &(0x7f0000000180)={[0x8]}, 0x8) 15:03:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe5d) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="0100d0e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x5a, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x4008080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:49 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 3) 15:03:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$key(0xf, 0x3, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd_index=0xa, 0x7b1e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a1240fc09c444884208e75c8244e059c654f515cb9eec19596d6ef81572f5fd608333631cd9e722c366b8be9961344f717b8c4bb598b787505aee1d1f56cf2db2500189f24e617b391acd10dc0abf55e5a416f12672438fa94420a730a296038935b37d7ddf449e4c90470a8c7491c2f2454f603a71fe2c1eae67d3889883f70c30a704fa7d77e140730b6714d37135fd8975e35a3572e532796bf4634762f82e32cc3350e851b36f3c33edc917c48d0776825a04c37d3b59801c37b0b879057cdedaf5d41cf906a9de3febc5b", 0xcd}, {&(0x7f0000000080)="3c5c3161c6267d695f8f6d6cda1b933edea7c186c55f45bfcc982551755788187a12f17da82109a00b4b0ec7ba6a17f3e916bf1b3b7158b22da65f7ff65fa573cf93496f1ebdcc5b7f9aac002701631ef2742ce9268b3eff53020dd5dc800d41ab5a7e8123ad794f2caaf53c568d57ae90ebaba7a155dc40191b0839c9c342845e1df70404433c34922856498e683bdce641f86032fb1344c2d57a748477d2e1e4e2d308aca531b518beadcbecd856d0c07a0b6f0f8a103c3d8251dc", 0xbc}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="42e5e73711b03c882b189640b1ebc5bf1c6b83eb5436ec28e50d70d4ad70", 0x1e}], 0x4, 0x14, 0x0, {0x2}}, 0x20) syz_io_uring_submit(0x0, r2, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1858) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2427.516201][ T5272] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 15:03:50 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 4) [ 2427.693312][ T4280] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 2428.133395][ T4280] usb 2-1: config 0 has no interfaces? [ 2428.333509][ T4280] usb 2-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=b4.ea [ 2428.342618][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2428.350962][ T4280] usb 2-1: Product: syz [ 2428.355906][ T4280] usb 2-1: Manufacturer: syz [ 2428.360539][ T4280] usb 2-1: SerialNumber: syz [ 2428.369424][ T4280] usb 2-1: config 0 descriptor?? [ 2428.627241][ T3690] usb 2-1: USB disconnect, device number 21 15:03:51 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe04, 0x0, 0x0, 0x4) 15:03:51 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 5) 15:03:51 executing program 1: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000440)=0x8) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="60211600000011203ce18ef0cd62d5f81d69682cc516ad5885779ec1"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="4006bb00000070a841d4ed4ef764fd8f2f04ac7a58ecfe92a5665d4de0a75a98c1b28342879627bbe393d094e2c894dc7e666aa201e360407a3917f0bd2767b031324ce1f3cbf5e5a914524ca21bfab44e5d7375531ef03966f19a5be778f4310f6a399c3dfcf28889f12d66aec962604558c38bf18924042f0144b002ae6945fd124ce8c13d370a4170120449837ad6550dd12646dfabdbd8c8953f871dd32c8fca5d3a842fec8a994a4a250a37e6a0420fc13a3b0db0379a0c156829d12ab18b03fa86638c1349a91ba22d2ab58fd982a13eb14019"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xc16, 0x7bcf, 0x0, 0x5, 0x5, 0x2, 0x40, 0x5, 0x7270, 0x400, 0x3, 0x2}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x0, 0x4d, {0x4d, 0x8, "1c82423e18b0541319ea4a7271a036f0fd1e744a3ae7cd5fd08827de7b92804e92ccdb59fbe4c418d973683104a646b2c6cfc004f94678596a3a00f7c72322cf45a33c2312969b8dc77e80"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x0, 0x17, 0x39, "1e91d3e8dfad77726a1fc3204da3574cfa266842dcd21b6a6c78512cd209c59d3e8c6ce56aa9a8229670f5f4557b08f62e04ccea2d7ea188d0"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x795d, 0x7, 0xfffffffe, 0x7fff, 0x3269, 0x1, 0x2, 0x72, 0xf85a, 0x1, 0x101, 0xef8}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0xfffffffc}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) 15:03:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$key(0xf, 0x3, 0x2) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd_index=0xa, 0x7b1e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a1240fc09c444884208e75c8244e059c654f515cb9eec19596d6ef81572f5fd608333631cd9e722c366b8be9961344f717b8c4bb598b787505aee1d1f56cf2db2500189f24e617b391acd10dc0abf55e5a416f12672438fa94420a730a296038935b37d7ddf449e4c90470a8c7491c2f2454f603a71fe2c1eae67d3889883f70c30a704fa7d77e140730b6714d37135fd8975e35a3572e532796bf4634762f82e32cc3350e851b36f3c33edc917c48d0776825a04c37d3b59801c37b0b879057cdedaf5d41cf906a9de3febc5b", 0xcd}, {&(0x7f0000000080)="3c5c3161c6267d695f8f6d6cda1b933edea7c186c55f45bfcc982551755788187a12f17da82109a00b4b0ec7ba6a17f3e916bf1b3b7158b22da65f7ff65fa573cf93496f1ebdcc5b7f9aac002701631ef2742ce9268b3eff53020dd5dc800d41ab5a7e8123ad794f2caaf53c568d57ae90ebaba7a155dc40191b0839c9c342845e1df70404433c34922856498e683bdce641f86032fb1344c2d57a748477d2e1e4e2d308aca531b518beadcbecd856d0c07a0b6f0f8a103c3d8251dc", 0xbc}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="42e5e73711b03c882b189640b1ebc5bf1c6b83eb5436ec28e50d70d4ad70", 0x1e}], 0x4, 0x14, 0x0, {0x2}}, 0x20) (async) syz_io_uring_submit(0x0, r2, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1858) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:51 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000340)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe5d) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="0100d0e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x5a, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x4008080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) write$binfmt_script(r4, 0x0, 0xfffffe5d) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="0100d0e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x5a, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x4008080) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) 15:03:51 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 6) 15:03:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$key(0xf, 0x3, 0x2) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd_index=0xa, 0x7b1e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a1240fc09c444884208e75c8244e059c654f515cb9eec19596d6ef81572f5fd608333631cd9e722c366b8be9961344f717b8c4bb598b787505aee1d1f56cf2db2500189f24e617b391acd10dc0abf55e5a416f12672438fa94420a730a296038935b37d7ddf449e4c90470a8c7491c2f2454f603a71fe2c1eae67d3889883f70c30a704fa7d77e140730b6714d37135fd8975e35a3572e532796bf4634762f82e32cc3350e851b36f3c33edc917c48d0776825a04c37d3b59801c37b0b879057cdedaf5d41cf906a9de3febc5b", 0xcd}, {&(0x7f0000000080)="3c5c3161c6267d695f8f6d6cda1b933edea7c186c55f45bfcc982551755788187a12f17da82109a00b4b0ec7ba6a17f3e916bf1b3b7158b22da65f7ff65fa573cf93496f1ebdcc5b7f9aac002701631ef2742ce9268b3eff53020dd5dc800d41ab5a7e8123ad794f2caaf53c568d57ae90ebaba7a155dc40191b0839c9c342845e1df70404433c34922856498e683bdce641f86032fb1344c2d57a748477d2e1e4e2d308aca531b518beadcbecd856d0c07a0b6f0f8a103c3d8251dc", 0xbc}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="42e5e73711b03c882b189640b1ebc5bf1c6b83eb5436ec28e50d70d4ad70", 0x1e}], 0x4, 0x14, 0x0, {0x2}}, 0x20) (async) syz_io_uring_submit(0x0, r2, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1858) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:51 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 7) [ 2429.145779][ T5299] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 15:03:51 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000340)=@in={0x2, 0x0, @private}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe5d) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="0100d0e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x5a, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x4008080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) write$binfmt_script(r4, 0x0, 0xfffffe5d) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="0100d0e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x5a, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x4008080) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) 15:03:51 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 8) [ 2429.285032][ T5333] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2429.484513][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd 15:03:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe06, 0x0, 0x0, 0x4) 15:03:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x3, 0x0, 0x0) [ 2429.743326][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2429.883682][ T7] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2429.904502][ T7] usb 2-1: config 0 has no interface number 0 [ 2430.093570][ T7] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2430.106349][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.122191][ T7] usb 2-1: Product: syz [ 2430.131869][ T7] usb 2-1: Manufacturer: syz [ 2430.143064][ T7] usb 2-1: SerialNumber: syz [ 2430.160134][ T7] usb 2-1: config 0 descriptor?? 15:03:54 executing program 1: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000440)=0x8) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="60211600000011203ce18ef0cd62d5f81d69682cc516ad5885779ec1"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="4006bb00000070a841d4ed4ef764fd8f2f04ac7a58ecfe92a5665d4de0a75a98c1b28342879627bbe393d094e2c894dc7e666aa201e360407a3917f0bd2767b031324ce1f3cbf5e5a914524ca21bfab44e5d7375531ef03966f19a5be778f4310f6a399c3dfcf28889f12d66aec962604558c38bf18924042f0144b002ae6945fd124ce8c13d370a4170120449837ad6550dd12646dfabdbd8c8953f871dd32c8fca5d3a842fec8a994a4a250a37e6a0420fc13a3b0db0379a0c156829d12ab18b03fa86638c1349a91ba22d2ab58fd982a13eb14019"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xc16, 0x7bcf, 0x0, 0x5, 0x5, 0x2, 0x40, 0x5, 0x7270, 0x400, 0x3, 0x2}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x0, 0x4d, {0x4d, 0x8, "1c82423e18b0541319ea4a7271a036f0fd1e744a3ae7cd5fd08827de7b92804e92ccdb59fbe4c418d973683104a646b2c6cfc004f94678596a3a00f7c72322cf45a33c2312969b8dc77e80"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x0, 0x17, 0x39, "1e91d3e8dfad77726a1fc3204da3574cfa266842dcd21b6a6c78512cd209c59d3e8c6ce56aa9a8229670f5f4557b08f62e04ccea2d7ea188d0"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x795d, 0x7, 0xfffffffe, 0x7fff, 0x3269, 0x1, 0x2, 0x72, 0xf85a, 0x1, 0x101, 0xef8}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0xfffffffc}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000440)=0x8) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="60211600000011203ce18ef0cd62d5f81d69682cc516ad5885779ec1"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="4006bb00000070a841d4ed4ef764fd8f2f04ac7a58ecfe92a5665d4de0a75a98c1b28342879627bbe393d094e2c894dc7e666aa201e360407a3917f0bd2767b031324ce1f3cbf5e5a914524ca21bfab44e5d7375531ef03966f19a5be778f4310f6a399c3dfcf28889f12d66aec962604558c38bf18924042f0144b002ae6945fd124ce8c13d370a4170120449837ad6550dd12646dfabdbd8c8953f871dd32c8fca5d3a842fec8a994a4a250a37e6a0420fc13a3b0db0379a0c156829d12ab18b03fa86638c1349a91ba22d2ab58fd982a13eb14019"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xc16, 0x7bcf, 0x0, 0x5, 0x5, 0x2, 0x40, 0x5, 0x7270, 0x400, 0x3, 0x2}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x0, 0x4d, {0x4d, 0x8, "1c82423e18b0541319ea4a7271a036f0fd1e744a3ae7cd5fd08827de7b92804e92ccdb59fbe4c418d973683104a646b2c6cfc004f94678596a3a00f7c72322cf45a33c2312969b8dc77e80"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x0, 0x17, 0x39, "1e91d3e8dfad77726a1fc3204da3574cfa266842dcd21b6a6c78512cd209c59d3e8c6ce56aa9a8229670f5f4557b08f62e04ccea2d7ea188d0"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x795d, 0x7, 0xfffffffe, 0x7fff, 0x3269, 0x1, 0x2, 0x72, 0xf85a, 0x1, 0x101, 0xef8}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0xfffffffc}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) (async) 15:03:54 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 9) 15:03:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r2 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) socket$rxrpc(0x21, 0x2, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 15:03:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000340)=@in={0x2, 0x0, @private}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe07, 0x0, 0x0, 0x4) 15:03:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @loopback}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x3, 0x0, 0x0) 15:03:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000340)=@in={0x2, 0x0, @private}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2432.189474][T28611] usb 2-1: USB disconnect, device number 22 15:03:54 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 10) 15:03:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r2 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) socket$rxrpc(0x21, 0x2, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) dup3(r0, r0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async) 15:03:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async, rerun: 64) syz_io_uring_submit(r3, r4, 0x0, 0x1858) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x3, 0x0, 0x0) 15:03:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f00000001c0)=0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xfffb, 0x0, 0xffffffff, 0x7, 0x1, {0x0, r9}}, 0x1818) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) [ 2432.605385][T28611] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2432.843422][T28611] usb 2-1: Using ep0 maxpacket: 16 [ 2432.983463][T28611] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2432.991582][T28611] usb 2-1: config 0 has no interface number 0 [ 2433.153492][T28611] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2433.162602][T28611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2433.170863][T28611] usb 2-1: Product: syz [ 2433.175232][T28611] usb 2-1: Manufacturer: syz [ 2433.179869][T28611] usb 2-1: SerialNumber: syz [ 2433.190254][T28611] usb 2-1: config 0 descriptor?? 15:03:56 executing program 1: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000440)=0x8) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="60211600000011203ce18ef0cd62d5f81d69682cc516ad5885779ec1"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="4006bb00000070a841d4ed4ef764fd8f2f04ac7a58ecfe92a5665d4de0a75a98c1b28342879627bbe393d094e2c894dc7e666aa201e360407a3917f0bd2767b031324ce1f3cbf5e5a914524ca21bfab44e5d7375531ef03966f19a5be778f4310f6a399c3dfcf28889f12d66aec962604558c38bf18924042f0144b002ae6945fd124ce8c13d370a4170120449837ad6550dd12646dfabdbd8c8953f871dd32c8fca5d3a842fec8a994a4a250a37e6a0420fc13a3b0db0379a0c156829d12ab18b03fa86638c1349a91ba22d2ab58fd982a13eb14019"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xc16, 0x7bcf, 0x0, 0x5, 0x5, 0x2, 0x40, 0x5, 0x7270, 0x400, 0x3, 0x2}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x0, 0x4d, {0x4d, 0x8, "1c82423e18b0541319ea4a7271a036f0fd1e744a3ae7cd5fd08827de7b92804e92ccdb59fbe4c418d973683104a646b2c6cfc004f94678596a3a00f7c72322cf45a33c2312969b8dc77e80"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x0, 0x17, 0x39, "1e91d3e8dfad77726a1fc3204da3574cfa266842dcd21b6a6c78512cd209c59d3e8c6ce56aa9a8229670f5f4557b08f62e04ccea2d7ea188d0"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x795d, 0x7, 0xfffffffe, 0x7fff, 0x3269, 0x1, 0x2, 0x72, 0xf85a, 0x1, 0x101, 0xef8}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0xfffffffc}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000440)=0x8) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="60211600000011203ce18ef0cd62d5f81d69682cc516ad5885779ec1"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="4006bb00000070a841d4ed4ef764fd8f2f04ac7a58ecfe92a5665d4de0a75a98c1b28342879627bbe393d094e2c894dc7e666aa201e360407a3917f0bd2767b031324ce1f3cbf5e5a914524ca21bfab44e5d7375531ef03966f19a5be778f4310f6a399c3dfcf28889f12d66aec962604558c38bf18924042f0144b002ae6945fd124ce8c13d370a4170120449837ad6550dd12646dfabdbd8c8953f871dd32c8fca5d3a842fec8a994a4a250a37e6a0420fc13a3b0db0379a0c156829d12ab18b03fa86638c1349a91ba22d2ab58fd982a13eb14019"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xc16, 0x7bcf, 0x0, 0x5, 0x5, 0x2, 0x40, 0x5, 0x7270, 0x400, 0x3, 0x2}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x0, 0x4d, {0x4d, 0x8, "1c82423e18b0541319ea4a7271a036f0fd1e744a3ae7cd5fd08827de7b92804e92ccdb59fbe4c418d973683104a646b2c6cfc004f94678596a3a00f7c72322cf45a33c2312969b8dc77e80"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x0, 0x17, 0x39, "1e91d3e8dfad77726a1fc3204da3574cfa266842dcd21b6a6c78512cd209c59d3e8c6ce56aa9a8229670f5f4557b08f62e04ccea2d7ea188d0"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x795d, 0x7, 0xfffffffe, 0x7fff, 0x3269, 0x1, 0x2, 0x72, 0xf85a, 0x1, 0x101, 0xef8}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0xfffffffc}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) (async) 15:03:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 11) 15:03:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000040)=0x7fff, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6445762f6c6f8a74b0008a40ddce3ff15129c9ed738b76be338933f3eb8ab1f3eeec8341e65747e2b7d93ad1d93f218d3db99475ce093bc99a1d537ac6f480ae8d2fc6e6c9cd1efca097804efae4735eca31050c35b09ddbe1c61c6f729ecba2398c11a4166fd654268b8eddbbd28627527e89"], &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='squashfs\x00', 0x1000000, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2e2f66696c653000dfcae9349b4a68528be625c695a99bcc41beed794dbf7e437cbaf299c33d787d75f58cc4bb4960c3bc75d7df5fca7550ad9a546a4feff59a2cf02bf3ac09008c1c3d1b5af90e78abc3a81247c797b0051ef6bc3ed6991e6336945fb186d4925f47740592384243855262efc65faf8224db547eb39b6e"], &(0x7f0000000180)='./file0\x00', 0x0, 0x2002000, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) memfd_create(&(0x7f0000000180)='`-#.\x00', 0x6) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x12345}, 0xfffff800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7fffffff) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe08, 0x0, 0x0, 0x4) 15:03:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f00000001c0)=0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xfffb, 0x0, 0xffffffff, 0x7, 0x1, {0x0, r9}}, 0x1818) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f00000001c0)=0x3) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xfffb, 0x0, 0xffffffff, 0x7, 0x1, {0x0, r9}}, 0x1818) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2434.139879][T27197] usb 2-1: USB disconnect, device number 23 15:03:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 12) 15:03:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 13) 15:03:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 14) [ 2434.301645][ T5411] net_ratelimit: 701 callbacks suppressed [ 2434.301659][ T5411] dccp_time_wait: time wait bucket table overflow [ 2434.315556][ T5410] dccp_time_wait: time wait bucket table overflow [ 2434.333925][ T5411] dccp_time_wait: time wait bucket table overflow [ 2434.342639][ T5410] dccp_time_wait: time wait bucket table overflow 15:03:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 15) [ 2434.349689][ T5411] dccp_time_wait: time wait bucket table overflow [ 2434.370191][ T5411] dccp_time_wait: time wait bucket table overflow [ 2434.380994][ T5410] dccp_time_wait: time wait bucket table overflow [ 2434.390516][ T5410] dccp_time_wait: time wait bucket table overflow [ 2434.398649][ T5410] dccp_time_wait: time wait bucket table overflow [ 2434.408154][ T5410] dccp_time_wait: time wait bucket table overflow 15:03:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 16) 15:03:57 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 17) [ 2434.583326][T27197] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2434.853308][T27197] usb 2-1: Using ep0 maxpacket: 16 [ 2434.993566][T27197] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2435.001686][T27197] usb 2-1: config 0 has no interface number 0 [ 2435.183521][T27197] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2435.192653][T27197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.200745][T27197] usb 2-1: Product: syz [ 2435.204960][T27197] usb 2-1: Manufacturer: syz [ 2435.209575][T27197] usb 2-1: SerialNumber: syz [ 2435.216429][T27197] usb 2-1: config 0 descriptor?? 15:03:58 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b6e75410bf0a70337306010203010902120100000000090416000063994d00"], 0x0) 15:03:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe09, 0x0, 0x0, 0x4) 15:03:58 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 18) 15:03:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f00000001c0)=0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xfffb, 0x0, 0xffffffff, 0x7, 0x1, {0x0, r9}}, 0x1818) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f00000001c0)=0x3) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xfffb, 0x0, 0xffffffff, 0x7, 0x1, {0x0, r9}}, 0x1818) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:03:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) memfd_create(&(0x7f0000000180)='`-#.\x00', 0x6) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x12345}, 0xfffff800) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7fffffff) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000040)=0x7fff, 0x4) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6445762f6c6f8a74b0008a40ddce3ff15129c9ed738b76be338933f3eb8ab1f3eeec8341e65747e2b7d93ad1d93f218d3db99475ce093bc99a1d537ac6f480ae8d2fc6e6c9cd1efca097804efae4735eca31050c35b09ddbe1c61c6f729ecba2398c11a4166fd654268b8eddbbd28627527e89"], &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='squashfs\x00', 0x1000000, 0x0) (async) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) (async) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2e2f66696c653000dfcae9349b4a68528be625c695a99bcc41beed794dbf7e437cbaf299c33d787d75f58cc4bb4960c3bc75d7df5fca7550ad9a546a4feff59a2cf02bf3ac09008c1c3d1b5af90e78abc3a81247c797b0051ef6bc3ed6991e6336945fb186d4925f47740592384243855262efc65faf8224db547eb39b6e"], &(0x7f0000000180)='./file0\x00', 0x0, 0x2002000, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:03:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000040)=0x7fff, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) (rerun: 64) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6445762f6c6f8a74b0008a40ddce3ff15129c9ed738b76be338933f3eb8ab1f3eeec8341e65747e2b7d93ad1d93f218d3db99475ce093bc99a1d537ac6f480ae8d2fc6e6c9cd1efca097804efae4735eca31050c35b09ddbe1c61c6f729ecba2398c11a4166fd654268b8eddbbd28627527e89"], &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='squashfs\x00', 0x1000000, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) (async) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2e2f66696c653000dfcae9349b4a68528be625c695a99bcc41beed794dbf7e437cbaf299c33d787d75f58cc4bb4960c3bc75d7df5fca7550ad9a546a4feff59a2cf02bf3ac09008c1c3d1b5af90e78abc3a81247c797b0051ef6bc3ed6991e6336945fb186d4925f47740592384243855262efc65faf8224db547eb39b6e"], &(0x7f0000000180)='./file0\x00', 0x0, 0x2002000, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2436.162028][ T2586] usb 2-1: USB disconnect, device number 24 [ 2436.190984][ T5445] FAULT_INJECTION: forcing a failure. [ 2436.190984][ T5445] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:03:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) memfd_create(&(0x7f0000000180)='`-#.\x00', 0x6) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 64) r6 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async, rerun: 32) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) (async, rerun: 32) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x12345}, 0xfffff800) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7fffffff) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 32) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) (rerun: 32) [ 2436.253570][ T5445] CPU: 0 PID: 5445 Comm: syz-executor.3 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2436.263665][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2436.273743][ T5445] Call Trace: [ 2436.277019][ T5445] [ 2436.279943][ T5445] dump_stack_lvl+0xcd/0x134 [ 2436.284541][ T5445] should_fail.cold+0x5/0xa [ 2436.289060][ T5445] _copy_to_user+0x2a/0x140 [ 2436.293570][ T5445] simple_read_from_buffer+0xcc/0x160 [ 2436.299120][ T5445] proc_fail_nth_read+0x187/0x220 [ 2436.304167][ T5445] ? proc_exe_link+0x1d0/0x1d0 [ 2436.308960][ T5445] ? security_file_permission+0xab/0xd0 [ 2436.314509][ T5445] vfs_read+0x257/0x930 [ 2436.318664][ T5445] ? proc_exe_link+0x1d0/0x1d0 [ 2436.323432][ T5445] ? kernel_read+0x1c0/0x1c0 [ 2436.328017][ T5445] ? __fget_files+0x26a/0x440 [ 2436.332691][ T5445] ksys_read+0x127/0x250 [ 2436.336938][ T5445] ? vfs_write+0xdd0/0xdd0 [ 2436.341350][ T5445] ? trace_hardirqs_on+0x2d/0x120 [ 2436.346375][ T5445] do_syscall_64+0x35/0xb0 [ 2436.350793][ T5445] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2436.356695][ T5445] RIP: 0033:0x7f94ece3c2ec [ 2436.361125][ T5445] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2436.380731][ T5445] RSP: 002b:00007f94ee096160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2436.389141][ T5445] RAX: ffffffffffffffda RBX: 00007f94ecfabf80 RCX: 00007f94ece3c2ec 15:03:58 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 2436.397108][ T5445] RDX: 000000000000000f RSI: 00007f94ee0961e0 RDI: 0000000000000005 [ 2436.405087][ T5445] RBP: 00007f94ee0961d0 R08: 0000000000000000 R09: 0000000000000004 [ 2436.413084][ T5445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2436.421077][ T5445] R13: 00007f94ed4dfb1f R14: 00007f94ee096300 R15: 0000000000022000 [ 2436.429047][ T5445] 15:03:58 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:03:58 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x2, 0x0, 0x0, 0x4) 15:03:58 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x4, 0x0, 0x0, 0x4) 15:03:59 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe0a, 0x0, 0x0, 0x4) [ 2436.733369][ T2586] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2437.003468][ T2586] usb 2-1: Using ep0 maxpacket: 16 [ 2437.144357][ T2586] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 2437.152629][ T2586] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 2437.162916][ T2586] usb 2-1: config 0 has no interfaces? [ 2437.323676][ T2586] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2437.332730][ T2586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.342082][ T2586] usb 2-1: Product: syz [ 2437.346289][ T2586] usb 2-1: Manufacturer: syz [ 2437.350888][ T2586] usb 2-1: SerialNumber: syz [ 2437.361206][ T2586] usb 2-1: config 0 descriptor?? [ 2437.607237][ T2586] usb 2-1: USB disconnect, device number 25 15:04:00 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b6e75410bf0a70337306010203010902120100000000090416000063994d00"], 0x0) 15:04:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="15988703d872780df1b6f8921300f2dec82cca585bba9a3661c0e6fbbebb0b459fd36f58089fed2b63ba255b55cb73facbcb91afb1e61305eb405899410999cbbd310597668d846d78411c12fcae65e2c1a038a05c62db055587ea6e368b86aa1c2898b39be2f707755f0f1626225ee64a775b4f2945fca934d976412a84e74c70772073e533b7ce080c745a687fa3cdc921b4d595fb89a154b120c1dbf0f3631e0e9731d522eadeb9af65da1b2ff1addd6bca0479687da8d40a", 0xba, 0x800, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 15:04:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1858) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @local}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 15:04:00 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x6, 0x0, 0x0, 0x4) 15:04:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000380)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000340)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe0c, 0x0, 0x0, 0x4) 15:04:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) sendto$inet(r0, &(0x7f00000000c0)="15988703d872780df1b6f8921300f2dec82cca585bba9a3661c0e6fbbebb0b459fd36f58089fed2b63ba255b55cb73facbcb91afb1e61305eb405899410999cbbd310597668d846d78411c12fcae65e2c1a038a05c62db055587ea6e368b86aa1c2898b39be2f707755f0f1626225ee64a775b4f2945fca934d976412a84e74c70772073e533b7ce080c745a687fa3cdc921b4d595fb89a154b120c1dbf0f3631e0e9731d522eadeb9af65da1b2ff1addd6bca0479687da8d40a", 0xba, 0x800, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 15:04:00 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x7, 0x0, 0x0, 0x4) 15:04:00 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x8, 0x0, 0x0, 0x4) 15:04:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) sendto$inet(r0, &(0x7f00000000c0)="15988703d872780df1b6f8921300f2dec82cca585bba9a3661c0e6fbbebb0b459fd36f58089fed2b63ba255b55cb73facbcb91afb1e61305eb405899410999cbbd310597668d846d78411c12fcae65e2c1a038a05c62db055587ea6e368b86aa1c2898b39be2f707755f0f1626225ee64a775b4f2945fca934d976412a84e74c70772073e533b7ce080c745a687fa3cdc921b4d595fb89a154b120c1dbf0f3631e0e9731d522eadeb9af65da1b2ff1addd6bca0479687da8d40a", 0xba, 0x800, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 15:04:00 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x9, 0x0, 0x0, 0x4) 15:04:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "f12de0daa4e01197", "14fd9b998915d91f440f47d6baf66f56", "23f468b4", "dd34f34544509623"}, 0x28) [ 2438.413626][ T3690] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2438.703353][ T3690] usb 2-1: Using ep0 maxpacket: 16 [ 2438.833495][ T3690] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 2438.855823][ T3690] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 2438.929610][ T3690] usb 2-1: config 0 has no interfaces? [ 2439.153464][ T3690] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2439.162656][ T3690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.170965][ T3690] usb 2-1: Product: syz [ 2439.175327][ T3690] usb 2-1: Manufacturer: syz [ 2439.179927][ T3690] usb 2-1: SerialNumber: syz [ 2439.185906][ T3690] usb 2-1: config 0 descriptor?? [ 2439.424632][ T3690] usb 2-1: USB disconnect, device number 26 15:04:02 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b6e75410bf0a70337306010203010902120100000000090416000063994d00"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b6e75410bf0a70337306010203010902120100000000090416000063994d00"], 0x0) (async) 15:04:02 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xc, 0x0, 0x0, 0x4) 15:04:02 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe12, 0x0, 0x0, 0x4) 15:04:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000380)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000340)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000380)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000340)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:04:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1858) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @local}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) (async) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 15:04:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "f12de0daa4e01197", "14fd9b998915d91f440f47d6baf66f56", "23f468b4", "dd34f34544509623"}, 0x28) 15:04:02 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xe, 0x0, 0x0, 0x4) 15:04:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) r5 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1858) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @local}}, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) (async) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 15:04:02 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x12, 0x0, 0x0, 0x4) 15:04:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000380)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000340)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000380)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000340)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:04:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f00000001c0)=0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xfffb, 0x0, 0xffffffff, 0x7, 0x1, {0x0, r9}}, 0x1818) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:02 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x18, 0x0, 0x0, 0x4) [ 2440.273403][ T3690] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2440.533443][ T3690] usb 2-1: Using ep0 maxpacket: 16 [ 2440.655774][ T5562] net_ratelimit: 842 callbacks suppressed [ 2440.655788][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.669241][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.677899][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.684651][ T3690] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 2440.693488][ T3690] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 2440.704182][ T3690] usb 2-1: config 0 has no interfaces? [ 2440.705423][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.716843][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.724181][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.730928][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.738222][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.745788][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.752757][ T5562] dccp_time_wait: time wait bucket table overflow [ 2440.883476][ T3690] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2440.892530][ T3690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.900776][ T3690] usb 2-1: Product: syz [ 2440.905141][ T3690] usb 2-1: Manufacturer: syz [ 2440.909745][ T3690] usb 2-1: SerialNumber: syz [ 2440.915290][ T3690] usb 2-1: config 0 descriptor?? [ 2441.154532][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2441.163087][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2441.173803][ T4280] usb 2-1: USB disconnect, device number 27 15:04:04 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x81, 0x9c, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xd3, 0x81, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x20, 0x40, 0xbb, 0x8, 0x80}, 0x1e, &(0x7f0000000500)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x7f, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0x7f, &(0x7f0000000540)=@string={0x7f, 0x3, "35d49ee16c68c1b2a9e7b8a2090e3cf5ff8e2cb3918315585fb2b788079d3cefcf590465cfd30786d8970ad73c2985dd70d8bd329eae42ed3566e226abeba0d52eb7b63777dee7d507d883decf8ec7256e09e919d53f47c10004a4acd2fa5cfc6c1eed365e73be0e442713371bd0bd2692ac9ff9deb3013dc6518fb58a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x20, 0x23, 0x51, {0x51, 0x23, "c4855cc69911284d1ea664729a8e32433ebaff50c36fbd4afd4ab212d9b341fd6e8a249408a8fdbc18be8c9a47688dbb13e8eb8b37dec6673c148bd3338962355a4fdc85b87323dedbf990dac49ad3"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000740)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1e, "2b554df4015aa43d81b43a8538c7d8b9"}, @generic={0x21, 0x10, 0x3, "f44503263293ac549560f662852d49847b5e0a0bdb8e9a4dea4d3d79e6de"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x1, 0x14, "f57ebdaf", "1b30a30e"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x4, 0xff, 0x5, 0x7f, 0x15b4, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x14, 0x6d, "4375fc9d4901fbbc7502bd2d5ca658a3feab1dcf969965ad55b7fd850d1eb4d71b3f240ed672ccdc6fc0a1818687e02eb3be520e3e69e544882ad091ea8b8a3336e7e520b78584ef9bee40f28c02462ab618a149c380adfd207c621396fc7f65d6be011c2edf1ce469922b47ac"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0xc0, 0x80}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xe9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "88b8"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @random="a2ca87beba79"}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "b140"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x81, 0x80, 0x5, 0x40, 0xff}, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x120, 0xf00, 0x5}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0xfffffffffffffdb3, 0x3, 0x100a}}, {0xffffffffffffff44, &(0x7f0000000140)=@string={0x28, 0x3, "f1e835fb2b154358847b9a249d97ea56ef33721d6f6d4ddf24ce154b46be45f6bfffc4b3fc58"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1007}}, {0x63, &(0x7f00000001c0)=@string={0x63, 0x3, "805569894729ec5b5198c76bc8fe8b5e0af9f24a8b56b2ea6a1b87297bbdf1c3379fe35ce217d73434c04401c83b59850924bc3eb1f97a789d9ff550fa986386cbe423d2e0f5f816ec6b1c66c7961e442ba933940b60a8555511901c73f3680550"}}, {0x9a, &(0x7f0000000340)=@string={0x9a, 0x3, "a1b017a95db244f174e4495d6e581a95db263fc346d64e5b8a1536d8c6cd5367dce05209591d7920f27ac00f5252dc0e0a3e38c6cadbce9fb77342352211e8f56fa3f92cf78635141dd1944e38a94aa22d5985da17ecad421cfec234c988612742150805f1b282e5f16005cd45b980c6e528c89878637ce4f1b943cae74715caffb0489b816c84fed106247a863b679deb94938cd88eb817"}}, {0x4, &(0x7f0000000400)=@string={0x0, 0x3, "002498b642151fbc1891f88d08dcec329cb62cbcdb2d2bda29af39d1b8c5c30f619edfcd4ee24eb6065dd76da46bd8f8e9401cc89ec7986da5601e0cf19f548e916fb66709923dbd69938cdd082d29668391760b34702023c4b64d7f66e6575b6ff78192b9290a29e6f0ff4674fa7f02283e3d0143aafc26ab488b8fb00675bec7466475a56f0fa117d08df3f9c52533c55e0878a551727530793d306ae360991696e7a8675e254ca2dbe8c11c9fcbfaf15a9cf32b76fd2c8883b50a45bed1ae12c9b770604833d316bb44"}}]}) 15:04:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1e, 0x0, 0x0, 0x4) 15:04:04 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe18, 0x0, 0x0, 0x4) 15:04:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x80e03) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f00000001c0)=0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xfffb, 0x0, 0xffffffff, 0x7, 0x1, {0x0, r9}}, 0x1818) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "f12de0daa4e01197", "14fd9b998915d91f440f47d6baf66f56", "23f468b4", "dd34f34544509623"}, 0x28) 15:04:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x24, 0x0, 0x0, 0x4) 15:04:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x2a, 0x0, 0x0, 0x4) 15:04:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x30, 0x0, 0x0, 0x4) 15:04:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x36, 0x0, 0x0, 0x4) [ 2442.003486][ T4280] usb 2-1: new high-speed USB device number 28 using dummy_hcd 15:04:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x3c, 0x0, 0x0, 0x4) 15:04:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x44, 0x0, 0x0, 0x4) [ 2442.253348][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 2442.373620][ T4280] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2442.386802][ T4280] usb 2-1: config 0 has no interface number 0 [ 2442.553491][ T4280] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2442.566782][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.583062][ T4280] usb 2-1: Product: syz [ 2442.592159][ T4280] usb 2-1: Manufacturer: syz [ 2442.599021][ T4280] usb 2-1: SerialNumber: syz [ 2442.633087][ T4280] usb 2-1: config 0 descriptor?? [ 2442.888388][ T5591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2442.897756][ T5591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2442.906567][ T5591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2442.916258][ T5591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2442.927843][ T2586] usb 2-1: USB disconnect, device number 28 15:04:05 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x81, 0x9c, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xd3, 0x81, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x20, 0x40, 0xbb, 0x8, 0x80}, 0x1e, &(0x7f0000000500)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x7f, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0x7f, &(0x7f0000000540)=@string={0x7f, 0x3, "35d49ee16c68c1b2a9e7b8a2090e3cf5ff8e2cb3918315585fb2b788079d3cefcf590465cfd30786d8970ad73c2985dd70d8bd329eae42ed3566e226abeba0d52eb7b63777dee7d507d883decf8ec7256e09e919d53f47c10004a4acd2fa5cfc6c1eed365e73be0e442713371bd0bd2692ac9ff9deb3013dc6518fb58a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x20, 0x23, 0x51, {0x51, 0x23, "c4855cc69911284d1ea664729a8e32433ebaff50c36fbd4afd4ab212d9b341fd6e8a249408a8fdbc18be8c9a47688dbb13e8eb8b37dec6673c148bd3338962355a4fdc85b87323dedbf990dac49ad3"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000740)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1e, "2b554df4015aa43d81b43a8538c7d8b9"}, @generic={0x21, 0x10, 0x3, "f44503263293ac549560f662852d49847b5e0a0bdb8e9a4dea4d3d79e6de"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x1, 0x14, "f57ebdaf", "1b30a30e"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x4, 0xff, 0x5, 0x7f, 0x15b4, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x14, 0x6d, "4375fc9d4901fbbc7502bd2d5ca658a3feab1dcf969965ad55b7fd850d1eb4d71b3f240ed672ccdc6fc0a1818687e02eb3be520e3e69e544882ad091ea8b8a3336e7e520b78584ef9bee40f28c02462ab618a149c380adfd207c621396fc7f65d6be011c2edf1ce469922b47ac"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0xc0, 0x80}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xe9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "88b8"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @random="a2ca87beba79"}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "b140"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x81, 0x80, 0x5, 0x40, 0xff}, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x120, 0xf00, 0x5}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0xfffffffffffffdb3, 0x3, 0x100a}}, {0xffffffffffffff44, &(0x7f0000000140)=@string={0x28, 0x3, "f1e835fb2b154358847b9a249d97ea56ef33721d6f6d4ddf24ce154b46be45f6bfffc4b3fc58"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1007}}, {0x63, &(0x7f00000001c0)=@string={0x63, 0x3, "805569894729ec5b5198c76bc8fe8b5e0af9f24a8b56b2ea6a1b87297bbdf1c3379fe35ce217d73434c04401c83b59850924bc3eb1f97a789d9ff550fa986386cbe423d2e0f5f816ec6b1c66c7961e442ba933940b60a8555511901c73f3680550"}}, {0x9a, &(0x7f0000000340)=@string={0x9a, 0x3, "a1b017a95db244f174e4495d6e581a95db263fc346d64e5b8a1536d8c6cd5367dce05209591d7920f27ac00f5252dc0e0a3e38c6cadbce9fb77342352211e8f56fa3f92cf78635141dd1944e38a94aa22d5985da17ecad421cfec234c988612742150805f1b282e5f16005cd45b980c6e528c89878637ce4f1b943cae74715caffb0489b816c84fed106247a863b679deb94938cd88eb817"}}, {0x4, &(0x7f0000000400)=@string={0x0, 0x3, "002498b642151fbc1891f88d08dcec329cb62cbcdb2d2bda29af39d1b8c5c30f619edfcd4ee24eb6065dd76da46bd8f8e9401cc89ec7986da5601e0cf19f548e916fb66709923dbd69938cdd082d29668391760b34702023c4b64d7f66e6575b6ff78192b9290a29e6f0ff4674fa7f02283e3d0143aafc26ab488b8fb00675bec7466475a56f0fa117d08df3f9c52533c55e0878a551727530793d306ae360991696e7a8675e254ca2dbe8c11c9fcbfaf15a9cf32b76fd2c8883b50a45bed1ae12c9b770604833d316bb44"}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x81, 0x9c, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xd3, 0x81, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x20, 0x40, 0xbb, 0x8, 0x80}, 0x1e, &(0x7f0000000500)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x7f, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0x7f, &(0x7f0000000540)=@string={0x7f, 0x3, "35d49ee16c68c1b2a9e7b8a2090e3cf5ff8e2cb3918315585fb2b788079d3cefcf590465cfd30786d8970ad73c2985dd70d8bd329eae42ed3566e226abeba0d52eb7b63777dee7d507d883decf8ec7256e09e919d53f47c10004a4acd2fa5cfc6c1eed365e73be0e442713371bd0bd2692ac9ff9deb3013dc6518fb58a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}]}) (async) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x20, 0x23, 0x51, {0x51, 0x23, "c4855cc69911284d1ea664729a8e32433ebaff50c36fbd4afd4ab212d9b341fd6e8a249408a8fdbc18be8c9a47688dbb13e8eb8b37dec6673c148bd3338962355a4fdc85b87323dedbf990dac49ad3"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000740)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1e, "2b554df4015aa43d81b43a8538c7d8b9"}, @generic={0x21, 0x10, 0x3, "f44503263293ac549560f662852d49847b5e0a0bdb8e9a4dea4d3d79e6de"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x1, 0x14, "f57ebdaf", "1b30a30e"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x4, 0xff, 0x5, 0x7f, 0x15b4, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x14, 0x6d, "4375fc9d4901fbbc7502bd2d5ca658a3feab1dcf969965ad55b7fd850d1eb4d71b3f240ed672ccdc6fc0a1818687e02eb3be520e3e69e544882ad091ea8b8a3336e7e520b78584ef9bee40f28c02462ab618a149c380adfd207c621396fc7f65d6be011c2edf1ce469922b47ac"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0xc0, 0x80}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xe9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "88b8"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @random="a2ca87beba79"}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "b140"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x81, 0x80, 0x5, 0x40, 0xff}, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x120, 0xf00, 0x5}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0xfffffffffffffdb3, 0x3, 0x100a}}, {0xffffffffffffff44, &(0x7f0000000140)=@string={0x28, 0x3, "f1e835fb2b154358847b9a249d97ea56ef33721d6f6d4ddf24ce154b46be45f6bfffc4b3fc58"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1007}}, {0x63, &(0x7f00000001c0)=@string={0x63, 0x3, "805569894729ec5b5198c76bc8fe8b5e0af9f24a8b56b2ea6a1b87297bbdf1c3379fe35ce217d73434c04401c83b59850924bc3eb1f97a789d9ff550fa986386cbe423d2e0f5f816ec6b1c66c7961e442ba933940b60a8555511901c73f3680550"}}, {0x9a, &(0x7f0000000340)=@string={0x9a, 0x3, "a1b017a95db244f174e4495d6e581a95db263fc346d64e5b8a1536d8c6cd5367dce05209591d7920f27ac00f5252dc0e0a3e38c6cadbce9fb77342352211e8f56fa3f92cf78635141dd1944e38a94aa22d5985da17ecad421cfec234c988612742150805f1b282e5f16005cd45b980c6e528c89878637ce4f1b943cae74715caffb0489b816c84fed106247a863b679deb94938cd88eb817"}}, {0x4, &(0x7f0000000400)=@string={0x0, 0x3, "002498b642151fbc1891f88d08dcec329cb62cbcdb2d2bda29af39d1b8c5c30f619edfcd4ee24eb6065dd76da46bd8f8e9401cc89ec7986da5601e0cf19f548e916fb66709923dbd69938cdd082d29668391760b34702023c4b64d7f66e6575b6ff78192b9290a29e6f0ff4674fa7f02283e3d0143aafc26ab488b8fb00675bec7466475a56f0fa117d08df3f9c52533c55e0878a551727530793d306ae360991696e7a8675e254ca2dbe8c11c9fcbfaf15a9cf32b76fd2c8883b50a45bed1ae12c9b770604833d316bb44"}}]}) (async) 15:04:05 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x60, 0x0, 0x0, 0x4) 15:04:05 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe1e, 0x0, 0x0, 0x4) 15:04:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x4280) r2 = dup(r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402002, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:04:05 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (rerun: 64) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x80e03) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 32) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (rerun: 32) 15:04:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x8108551b, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1858) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x3, 0x0, 0x0) 15:04:05 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x80e03) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x80e03) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:04:05 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1f4, 0x0, 0x0, 0x4) 15:04:06 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x3e8, 0x0, 0x0, 0x4) 15:04:06 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x600, 0x0, 0x0, 0x4) 15:04:06 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x700, 0x0, 0x0, 0x4) 15:04:06 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x900, 0x0, 0x0, 0x4) [ 2443.743476][ T2586] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2444.003376][ T2586] usb 2-1: Using ep0 maxpacket: 16 [ 2444.153333][ T2586] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2444.162039][ T2586] usb 2-1: config 0 has no interface number 0 [ 2444.343473][ T2586] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2444.352641][ T2586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.360957][ T2586] usb 2-1: Product: syz [ 2444.365233][ T2586] usb 2-1: Manufacturer: syz [ 2444.369881][ T2586] usb 2-1: SerialNumber: syz [ 2444.379023][ T2586] usb 2-1: config 0 descriptor?? [ 2444.625695][ T5625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2444.634205][ T5625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2444.642483][ T5625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2444.651152][ T5625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2444.659692][ T5625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 15:04:07 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x81, 0x9c, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xd3, 0x81, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x20, 0x40, 0xbb, 0x8, 0x80}, 0x1e, &(0x7f0000000500)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x7f, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0x7f, &(0x7f0000000540)=@string={0x7f, 0x3, "35d49ee16c68c1b2a9e7b8a2090e3cf5ff8e2cb3918315585fb2b788079d3cefcf590465cfd30786d8970ad73c2985dd70d8bd329eae42ed3566e226abeba0d52eb7b63777dee7d507d883decf8ec7256e09e919d53f47c10004a4acd2fa5cfc6c1eed365e73be0e442713371bd0bd2692ac9ff9deb3013dc6518fb58a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x20, 0x23, 0x51, {0x51, 0x23, "c4855cc69911284d1ea664729a8e32433ebaff50c36fbd4afd4ab212d9b341fd6e8a249408a8fdbc18be8c9a47688dbb13e8eb8b37dec6673c148bd3338962355a4fdc85b87323dedbf990dac49ad3"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000740)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1e, "2b554df4015aa43d81b43a8538c7d8b9"}, @generic={0x21, 0x10, 0x3, "f44503263293ac549560f662852d49847b5e0a0bdb8e9a4dea4d3d79e6de"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x1, 0x14, "f57ebdaf", "1b30a30e"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x4, 0xff, 0x5, 0x7f, 0x15b4, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x14, 0x6d, "4375fc9d4901fbbc7502bd2d5ca658a3feab1dcf969965ad55b7fd850d1eb4d71b3f240ed672ccdc6fc0a1818687e02eb3be520e3e69e544882ad091ea8b8a3336e7e520b78584ef9bee40f28c02462ab618a149c380adfd207c621396fc7f65d6be011c2edf1ce469922b47ac"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0xc0, 0x80}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xe9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "88b8"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @random="a2ca87beba79"}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "b140"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x81, 0x80, 0x5, 0x40, 0xff}, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x120, 0xf00, 0x5}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0xfffffffffffffdb3, 0x3, 0x100a}}, {0xffffffffffffff44, &(0x7f0000000140)=@string={0x28, 0x3, "f1e835fb2b154358847b9a249d97ea56ef33721d6f6d4ddf24ce154b46be45f6bfffc4b3fc58"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1007}}, {0x63, &(0x7f00000001c0)=@string={0x63, 0x3, "805569894729ec5b5198c76bc8fe8b5e0af9f24a8b56b2ea6a1b87297bbdf1c3379fe35ce217d73434c04401c83b59850924bc3eb1f97a789d9ff550fa986386cbe423d2e0f5f816ec6b1c66c7961e442ba933940b60a8555511901c73f3680550"}}, {0x9a, &(0x7f0000000340)=@string={0x9a, 0x3, "a1b017a95db244f174e4495d6e581a95db263fc346d64e5b8a1536d8c6cd5367dce05209591d7920f27ac00f5252dc0e0a3e38c6cadbce9fb77342352211e8f56fa3f92cf78635141dd1944e38a94aa22d5985da17ecad421cfec234c988612742150805f1b282e5f16005cd45b980c6e528c89878637ce4f1b943cae74715caffb0489b816c84fed106247a863b679deb94938cd88eb817"}}, {0x4, &(0x7f0000000400)=@string={0x0, 0x3, "002498b642151fbc1891f88d08dcec329cb62cbcdb2d2bda29af39d1b8c5c30f619edfcd4ee24eb6065dd76da46bd8f8e9401cc89ec7986da5601e0cf19f548e916fb66709923dbd69938cdd082d29668391760b34702023c4b64d7f66e6575b6ff78192b9290a29e6f0ff4674fa7f02283e3d0143aafc26ab488b8fb00675bec7466475a56f0fa117d08df3f9c52533c55e0878a551727530793d306ae360991696e7a8675e254ca2dbe8c11c9fcbfaf15a9cf32b76fd2c8883b50a45bed1ae12c9b770604833d316bb44"}}]}) 15:04:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xc00, 0x0, 0x0, 0x4) 15:04:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe24, 0x0, 0x0, 0x4) 15:04:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x4, 0x10001, 0x0, 0xb, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x7b50, 0x0, 0x0, 0x0) 15:04:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x4280) r2 = dup(r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402002, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x4280) (async) dup(r1) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402002, 0x0) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) 15:04:07 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 1) [ 2444.669254][ T5625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2444.680230][ T7] usb 2-1: USB disconnect, device number 29 15:04:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xe00, 0x0, 0x0, 0x4) 15:04:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x4280) r2 = dup(r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402002, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x4280) (async) dup(r1) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402002, 0x0) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) 15:04:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1200, 0x0, 0x0, 0x4) 15:04:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1800, 0x0, 0x0, 0x4) 15:04:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1e00, 0x0, 0x0, 0x4) 15:04:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) [ 2445.113318][ T7] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2445.353391][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2445.473436][ T7] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2445.481599][ T7] usb 2-1: config 0 has no interface number 0 [ 2445.643505][ T7] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2445.652609][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.660823][ T7] usb 2-1: Product: syz [ 2445.665183][ T7] usb 2-1: Manufacturer: syz [ 2445.669788][ T7] usb 2-1: SerialNumber: syz [ 2445.679540][ T7] usb 2-1: config 0 descriptor?? [ 2445.925508][ T5676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2445.934041][ T5676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2445.942555][ T5714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2445.951189][ T5714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2445.961496][ T7] usb 2-1: USB disconnect, device number 30 15:04:08 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0xd6) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x55, 0xff, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x340, 0x30, 0x2, 0x0, 0x20, 0x7}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0xc6, 0xf00f, 0x80, [0xff0030, 0xff30]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}]}) 15:04:08 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1f00, 0x0, 0x0, 0x4) 15:04:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe2a, 0x0, 0x0, 0x4) 15:04:08 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 2) 15:04:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async, rerun: 64) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (rerun: 64) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 32) r7 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 32) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x4, 0x10001, 0x0, 0xb, 0x7, 0x1, {0x0, r9}}, 0x1858) (async, rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (rerun: 64) io_uring_enter(r3, 0x45f5, 0x7b50, 0x0, 0x0, 0x0) 15:04:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) (async) 15:04:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x4, 0x10001, 0x0, 0xb, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x7b50, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x4, 0x10001, 0x0, 0xb, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x7b50, 0x0, 0x0, 0x0) (async) [ 2446.488275][ T5724] net_ratelimit: 1533 callbacks suppressed [ 2446.488295][ T5724] dccp_time_wait: time wait bucket table overflow [ 2446.506724][ T5721] FAULT_INJECTION: forcing a failure. [ 2446.506724][ T5721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2446.543456][ T5721] CPU: 0 PID: 5721 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2446.553587][ T5721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2446.563933][ T5721] Call Trace: [ 2446.567232][ T5721] [ 2446.570176][ T5721] dump_stack_lvl+0xcd/0x134 [ 2446.574803][ T5721] should_fail.cold+0x5/0xa [ 2446.579344][ T5721] _copy_from_user+0x2a/0x170 [ 2446.584052][ T5721] move_addr_to_kernel.part.0+0x31/0x110 [ 2446.589725][ T5721] move_addr_to_kernel+0x4f/0x70 [ 2446.594701][ T5721] io_connect+0x3c9/0x4b0 [ 2446.599067][ T5721] ? io_connect_prep+0x220/0x220 [ 2446.604045][ T5721] ? __fget_files+0x26a/0x440 [ 2446.608752][ T5721] ? io_connect_prep+0x220/0x220 [ 2446.613727][ T5721] io_issue_sqe+0x69d/0xd00 [ 2446.618260][ T5721] io_submit_sqes+0x936/0x1d10 [ 2446.623136][ T5721] __do_sys_io_uring_enter+0xadb/0x2430 [ 2446.628729][ T5721] ? lock_acquire+0x480/0x570 [ 2446.633444][ T5721] ? lock_release+0x560/0x780 [ 2446.638146][ T5721] ? rcu_read_lock_sched_held+0xd/0x70 [ 2446.643655][ T5721] ? __ct_user_exit+0xff/0x150 [ 2446.648551][ T5721] ? io_submit_sqes+0x1d10/0x1d10 [ 2446.653615][ T5721] ? lock_downgrade+0x6e0/0x6e0 [ 2446.658496][ T5721] ? vtime_user_exit+0x218/0x6c0 [ 2446.663468][ T5721] ? trace_hardirqs_on+0x2d/0x120 [ 2446.668528][ T5721] do_syscall_64+0x35/0xb0 [ 2446.672979][ T5721] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2446.678907][ T5721] RIP: 0033:0x7f811b48a5a9 [ 2446.683345][ T5721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2446.702980][ T5721] RSP: 002b:00007f811c591168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2446.711442][ T5721] RAX: ffffffffffffffda RBX: 00007f811b5abf80 RCX: 00007f811b48a5a9 [ 2446.719431][ T5721] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 2446.727502][ T5721] RBP: 00007f811c5911d0 R08: 0000000000000000 R09: 0000000000000004 [ 2446.735481][ T5721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 15:04:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) (async) 15:04:09 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x2000, 0x0, 0x0, 0x4) 15:04:09 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x2400, 0x0, 0x0, 0x4) [ 2446.743460][ T5721] R13: 00007f811badfb1f R14: 00007f811c591300 R15: 0000000000022000 [ 2446.751448][ T5721] 15:04:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe30, 0x0, 0x0, 0x4) 15:04:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0x5, 0x9, 0xc7b8, 0x1}, 0x14) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2446.913360][ T4280] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2447.022628][ T5752] dccp_time_wait: time wait bucket table overflow [ 2447.024105][ T5765] dccp_time_wait: time wait bucket table overflow [ 2447.037288][ T5752] dccp_time_wait: time wait bucket table overflow [ 2447.044489][ T5752] dccp_time_wait: time wait bucket table overflow [ 2447.046006][ T5721] dccp_time_wait: time wait bucket table overflow [ 2447.062822][ T5752] dccp_time_wait: time wait bucket table overflow [ 2447.070299][ T5752] dccp_time_wait: time wait bucket table overflow [ 2447.079388][ T5752] dccp_time_wait: time wait bucket table overflow [ 2447.086587][ T5721] dccp_time_wait: time wait bucket table overflow [ 2447.163486][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 2447.283380][ T4280] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2447.291495][ T4280] usb 2-1: config 0 has no interface number 0 [ 2447.453466][ T4280] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2447.462637][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.470872][ T4280] usb 2-1: Product: syz [ 2447.475182][ T4280] usb 2-1: Manufacturer: syz [ 2447.479782][ T4280] usb 2-1: SerialNumber: syz [ 2447.488960][ T4280] usb 2-1: config 0 descriptor?? [ 2447.738299][ T5727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2447.746905][ T5727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2447.757605][ T4280] usb 2-1: USB disconnect, device number 31 15:04:10 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0xd6) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x55, 0xff, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x340, 0x30, 0x2, 0x0, 0x20, 0x7}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0xc6, 0xf00f, 0x80, [0xff0030, 0xff30]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}]}) 15:04:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x2a00, 0x0, 0x0, 0x4) 15:04:10 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 3) 15:04:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe36, 0x0, 0x0, 0x4) 15:04:10 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xfffffffffffffffb, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0x5, 0x9, 0xc7b8, 0x1}, 0x14) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:04:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x3000, 0x0, 0x0, 0x4) 15:04:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x3600, 0x0, 0x0, 0x4) 15:04:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x36d9, 0x0, 0x0, 0x4) 15:04:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x3c00, 0x0, 0x0, 0x4) 15:04:11 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x3f00, 0x0, 0x0, 0x4) [ 2448.593543][ T2586] usb 2-1: new high-speed USB device number 32 using dummy_hcd 15:04:11 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 4) [ 2448.864497][ T2586] usb 2-1: Using ep0 maxpacket: 16 [ 2448.984854][ T2586] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2448.995074][ T2586] usb 2-1: config 0 has no interface number 0 [ 2449.163491][ T2586] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2449.172625][ T2586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.180931][ T2586] usb 2-1: Product: syz [ 2449.185254][ T2586] usb 2-1: Manufacturer: syz [ 2449.189888][ T2586] usb 2-1: SerialNumber: syz [ 2449.200203][ T2586] usb 2-1: config 0 descriptor?? [ 2449.445073][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2449.453580][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2449.461735][ T2586] usb 2-1: USB disconnect, device number 32 15:04:12 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0xd6) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x55, 0xff, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x340, 0x30, 0x2, 0x0, 0x20, 0x7}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0xc6, 0xf00f, 0x80, [0xff0030, 0xff30]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}]}) 15:04:12 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x4000, 0x0, 0x0, 0x4) 15:04:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe3c, 0x0, 0x0, 0x4) 15:04:12 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 5) 15:04:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xfffffffffffffffb, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0x5, 0x9, 0xc7b8, 0x1}, 0x14) (async, rerun: 64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (rerun: 64) 15:04:12 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x4400, 0x0, 0x0, 0x4) 15:04:12 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x5dc0, 0x0, 0x0, 0x4) 15:04:12 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 6) 15:04:12 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x6000, 0x0, 0x0, 0x4) 15:04:12 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xc05d, 0x0, 0x0, 0x4) 15:04:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xfffffffffffffffb, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0xfffffffffffffffb, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) [ 2450.263343][ T7] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2450.504708][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 2450.633395][ T7] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2450.641517][ T7] usb 2-1: config 0 has no interface number 0 [ 2450.803474][ T7] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2450.813154][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.821252][ T7] usb 2-1: Product: syz [ 2450.825465][ T7] usb 2-1: Manufacturer: syz [ 2450.830076][ T7] usb 2-1: SerialNumber: syz [ 2450.839708][ T7] usb 2-1: config 0 descriptor?? [ 2451.084645][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2451.093458][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2451.101602][ T7] usb 2-1: USB disconnect, device number 33 15:04:14 executing program 1: ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000000)={@hyper, 0x7b1c}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) 15:04:14 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xd936, 0x0, 0x0, 0x4) 15:04:14 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 7) 15:04:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xec9, 0x0, 0x0, 0x4) 15:04:14 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x2e}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) [ 2451.622101][ T5859] net_ratelimit: 3348 callbacks suppressed [ 2451.622120][ T5859] dccp_time_wait: time wait bucket table overflow 15:04:14 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 8) 15:04:14 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xe803, 0x0, 0x0, 0x4) [ 2451.714237][ T5865] dccp_time_wait: time wait bucket table overflow [ 2451.748115][ T5870] dccp_time_wait: time wait bucket table overflow 15:04:14 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 9) 15:04:14 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xf401, 0x0, 0x0, 0x4) [ 2451.762192][ T5865] dccp_time_wait: time wait bucket table overflow [ 2451.775511][ T5865] dccp_time_wait: time wait bucket table overflow [ 2451.786253][ T5865] dccp_time_wait: time wait bucket table overflow [ 2451.795522][ T5865] dccp_time_wait: time wait bucket table overflow [ 2451.807522][ T5865] dccp_time_wait: time wait bucket table overflow [ 2451.830544][ T5873] dccp_time_wait: time wait bucket table overflow [ 2451.846873][ T5865] dccp_time_wait: time wait bucket table overflow 15:04:14 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 10) 15:04:14 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xff01, 0x0, 0x0, 0x4) [ 2451.943399][ T4280] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2452.183385][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 2452.303443][ T4280] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2452.314965][ T4280] usb 2-1: config 0 has no interface number 0 [ 2452.483423][ T4280] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2452.492526][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.501974][ T4280] usb 2-1: Product: syz [ 2452.506266][ T4280] usb 2-1: Manufacturer: syz [ 2452.510883][ T4280] usb 2-1: SerialNumber: syz [ 2452.519616][ T4280] usb 2-1: config 0 descriptor?? [ 2452.769357][ T4280] usb 2-1: USB disconnect, device number 34 15:04:15 executing program 1: ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000000)={@hyper, 0x7b1c}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000000)={@hyper, 0x7b1c}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) (async) 15:04:15 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x20000, 0x0, 0x0, 0x4) 15:04:15 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 11) 15:04:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async, rerun: 32) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (rerun: 32) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:15 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x1400, 0x0, 0x0, 0x4) 15:04:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x2e}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x2e}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) (async) 15:04:15 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x400000, 0x0, 0x0, 0x4) 15:04:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) (async, rerun: 64) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (rerun: 64) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async, rerun: 64) r7 = socket$inet(0x2, 0x6, 0x0) (rerun: 64) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async, rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 32) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:15 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1000000, 0x0, 0x0, 0x4) 15:04:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x2e}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) 15:04:15 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x2000000, 0x0, 0x0, 0x4) [ 2453.585471][ T4280] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2453.833393][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 2453.953770][ T4280] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2453.964921][ T4280] usb 2-1: config 0 has no interface number 0 [ 2454.123472][ T4280] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2454.132647][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.140934][ T4280] usb 2-1: Product: syz [ 2454.145247][ T4280] usb 2-1: Manufacturer: syz [ 2454.149873][ T4280] usb 2-1: SerialNumber: syz [ 2454.159873][ T4280] usb 2-1: config 0 descriptor?? [ 2454.406746][ T5947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2454.415553][ T5947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2454.423871][ T3690] usb 2-1: USB disconnect, device number 35 15:04:17 executing program 1: ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000000)={@hyper, 0x7b1c}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0xe7, 0x54, 0x10, 0xabf, 0x3370, 0x673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x63, 0x99, 0x4d}}]}}]}}, 0x0) 15:04:17 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x4000000, 0x0, 0x0, 0x4) 15:04:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:04:17 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 12) 15:04:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x2, 0x0, 0x4) 15:04:17 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:04:17 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x6000000, 0x0, 0x0, 0x4) [ 2454.962874][ T5955] FAULT_INJECTION: forcing a failure. [ 2454.962874][ T5955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2454.983604][ T5955] CPU: 1 PID: 5955 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2454.993643][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2455.003731][ T5955] Call Trace: [ 2455.007029][ T5955] [ 2455.009997][ T5955] dump_stack_lvl+0xcd/0x134 [ 2455.014629][ T5955] should_fail.cold+0x5/0xa [ 2455.019169][ T5955] _copy_from_user+0x2a/0x170 [ 2455.023887][ T5955] move_addr_to_kernel.part.0+0x31/0x110 [ 2455.029561][ T5955] move_addr_to_kernel+0x4f/0x70 [ 2455.034518][ T5955] io_connect+0x3c9/0x4b0 [ 2455.038886][ T5955] ? io_connect_prep+0x220/0x220 [ 2455.043869][ T5955] ? __fget_files+0x26a/0x440 [ 2455.048571][ T5955] ? io_connect_prep+0x220/0x220 [ 2455.053513][ T5955] io_issue_sqe+0x69d/0xd00 [ 2455.058041][ T5955] io_submit_sqes+0x936/0x1d10 [ 2455.062809][ T5955] __do_sys_io_uring_enter+0xadb/0x2430 [ 2455.068446][ T5955] ? lock_acquire+0x480/0x570 [ 2455.073136][ T5955] ? lock_release+0x560/0x780 [ 2455.077831][ T5955] ? rcu_read_lock_sched_held+0xd/0x70 [ 2455.083330][ T5955] ? __ct_user_exit+0xff/0x150 [ 2455.088150][ T5955] ? io_submit_sqes+0x1d10/0x1d10 [ 2455.093173][ T5955] ? lock_downgrade+0x6e0/0x6e0 [ 2455.098038][ T5955] ? vtime_user_exit+0x218/0x6c0 [ 2455.102977][ T5955] ? trace_hardirqs_on+0x2d/0x120 [ 2455.108004][ T5955] do_syscall_64+0x35/0xb0 [ 2455.112417][ T5955] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2455.118308][ T5955] RIP: 0033:0x7f811b48a5a9 [ 2455.122714][ T5955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2455.142406][ T5955] RSP: 002b:00007f811c591168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2455.150820][ T5955] RAX: ffffffffffffffda RBX: 00007f811b5abf80 RCX: 00007f811b48a5a9 15:04:17 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x7000000, 0x0, 0x0, 0x4) [ 2455.158804][ T5955] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 2455.166770][ T5955] RBP: 00007f811c5911d0 R08: 0000000000000000 R09: 0000000000000004 [ 2455.174737][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2455.182697][ T5955] R13: 00007f811badfb1f R14: 00007f811c591300 R15: 0000000000022000 [ 2455.190664][ T5955] 15:04:17 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x8000000, 0x0, 0x0, 0x4) 15:04:17 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 13) 15:04:17 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x9000000, 0x0, 0x0, 0x4) [ 2455.473371][ T3690] usb 2-1: new high-speed USB device number 36 using dummy_hcd 15:04:18 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xc000000, 0x0, 0x0, 0x4) [ 2455.753381][ T3690] usb 2-1: Using ep0 maxpacket: 16 [ 2455.883989][ T3690] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 2455.892117][ T3690] usb 2-1: config 0 has no interface number 0 [ 2456.073497][ T3690] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 6.73 [ 2456.082576][ T3690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.091086][ T3690] usb 2-1: Product: syz [ 2456.095572][ T3690] usb 2-1: Manufacturer: syz [ 2456.100184][ T3690] usb 2-1: SerialNumber: syz [ 2456.109979][ T3690] usb 2-1: config 0 descriptor?? [ 2456.364393][ T3690] usb 2-1: USB disconnect, device number 36 15:04:19 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={r0, 0x5}) syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x61, 0x77, 0x11, 0x10, 0x50d, 0x257, 0xa35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2df, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000100)={r1, 0x2}) 15:04:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0xe000000, 0x0, 0x0, 0x4) 15:04:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x3, 0x0, 0x4) 15:04:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r1, 0x10000000) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) (async) 15:04:19 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 14) 15:04:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:04:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x12000000, 0x0, 0x0, 0x4) 15:04:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x18000000, 0x0, 0x0, 0x4) 15:04:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1e000000, 0x0, 0x0, 0x4) 15:04:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1f000000, 0x0, 0x0, 0x4) 15:04:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x20000000, 0x0, 0x0, 0x4) 15:04:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x24000000, 0x0, 0x0, 0x4) [ 2457.183564][ T3690] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2457.423336][ T3690] usb 2-1: Using ep0 maxpacket: 16 [ 2457.543415][ T3690] usb 2-1: config 0 has no interfaces? [ 2457.733797][ T3690] usb 2-1: New USB device found, idVendor=050d, idProduct=0257, bcdDevice= a.35 [ 2457.742872][ T3690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2457.751337][ T3690] usb 2-1: Product: syz [ 2457.755638][ T3690] usb 2-1: Manufacturer: syz [ 2457.760245][ T3690] usb 2-1: SerialNumber: syz [ 2457.769908][ T3690] usb 2-1: config 0 descriptor?? [ 2458.028234][ T3690] usb 2-1: USB disconnect, device number 37 15:04:20 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={r0, 0x5}) syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x61, 0x77, 0x11, 0x10, 0x50d, 0x257, 0xa35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2df, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000100)={r1, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={r0, 0x5}) (async) syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x61, 0x77, 0x11, 0x10, 0x50d, 0x257, 0xa35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2df, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000100)={r1, 0x2}) (async) 15:04:20 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0) io_uring_enter(r0, 0x45f5, 0x2a000000, 0x0, 0x0, 0x4) 15:04:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0xe00, 0x4, 0x0, 0x4) 15:04:20 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) (fail_nth: 15) 15:04:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80c9, 0x0, 0x4) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x9, 0xfffffffffffffbff, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x8108551b, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0xffff, 0x0, 0x7, 0x7, 0x1, {0x0, r9}}, 0x1858) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x4) 15:04:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2458.548179][ T6045] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 2458.559954][ T6045] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 2458.568392][ T6045] CPU: 1 PID: 6045 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 2458.578493][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2458.588575][ T6045] RIP: 0010:__inet_hash_connect+0x217/0x1660 [ 2458.594655][ T6045] Code: 85 a9 13 00 00 49 8b 9c 24 a0 06 00 00 48 89 ef e8 5e 74 a9 01 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 40 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 85 12 00 00 4c 8b 73 40 4d 85 f6 74 0d e8 61 f7 [ 2458.614298][ T6045] RSP: 0018:ffffc90005d1f790 EFLAGS: 00010202 [ 2458.620391][ T6045] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815ef790 [ 2458.628403][ T6045] RDX: 0000000000000008 RSI: 0000000000000004 RDI: 0000000000000040 [ 2458.636393][ T6045] RBP: ffff888027649240 R08: 0000000000000001 R09: 0000000000000003 [ 2458.644385][ T6045] R10: fffff52000ba3ee4 R11: 000000000008c07c R12: ffff88807ba78000 [ 2458.652382][ T6045] R13: 000000000000b426 R14: ffffffff8daa34c0 R15: ffff8880457c9c40 [ 2458.660462][ T6045] FS: 00007f811c591700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 2458.669416][ T6045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2458.676024][ T6045] CR2: 00007f811c590ff8 CR3: 000000001ef79000 CR4: 00000000003526e0 [ 2458.684017][ T6045] Call Trace: [ 2458.687314][ T6045] [ 2458.690259][ T6045] ? ip_route_output_key_hash+0x1c5/0x300 [ 2458.696001][ T6045] ? inet_lhash2_lookup+0x4e0/0x4e0 [ 2458.701226][ T6045] ? ip_route_output_key_hash_rcu+0x2bc0/0x2bc0 [ 2458.707658][ T6045] ? rwlock_bug.part.0+0x90/0x90 [ 2458.712609][ T6045] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 2458.718963][ T6045] ? rcu_read_lock_sched_held+0xd/0x70 [ 2458.724443][ T6045] ? trace_inet_sock_set_state+0x1d1/0x290 [ 2458.730292][ T6045] dccp_v4_connect+0xc40/0x2010 [ 2458.735204][ T6045] ? sk_error_report+0x142/0x310 [ 2458.740168][ T6045] ? dccp_disconnect+0x5e4/0xad0 [ 2458.745115][ T6045] ? rcu_read_lock_sched_held+0xd/0x70 [ 2458.750595][ T6045] __inet_stream_connect+0x69a/0xec0 [ 2458.755901][ T6045] ? rcu_read_lock_sched_held+0xd/0x70 [ 2458.761381][ T6045] ? lock_release+0x560/0x780 [ 2458.766064][ T6045] ? inet_listen+0x640/0x640 [ 2458.770672][ T6045] ? lock_downgrade+0x6e0/0x6e0 [ 2458.775543][ T6045] ? rwlock_bug.part.0+0x90/0x90 [ 2458.780491][ T6045] ? inet_stream_connect+0x3f/0xa0 [ 2458.785617][ T6045] inet_stream_connect+0x53/0xa0 [ 2458.790566][ T6045] ? __inet_stream_connect+0xec0/0xec0 [ 2458.796038][ T6045] __sys_connect_file+0x14f/0x190 [ 2458.801072][ T6045] io_connect+0x15e/0x4b0 [ 2458.805420][ T6045] ? io_connect_prep+0x220/0x220 [ 2458.810392][ T6045] ? io_connect_prep+0x220/0x220 [ 2458.815349][ T6045] io_issue_sqe+0x69d/0xd00 [ 2458.819878][ T6045] io_submit_sqes+0x936/0x1d10 [ 2458.824673][ T6045] __do_sys_io_uring_enter+0xadb/0x2430 [ 2458.830233][ T6045] ? lock_acquire+0x480/0x570 [ 2458.834920][ T6045] ? lock_release+0x560/0x780 [ 2458.839604][ T6045] ? rcu_read_lock_sched_held+0xd/0x70 [ 2458.845084][ T6045] ? __ct_user_exit+0xff/0x150 [ 2458.849867][ T6045] ? io_submit_sqes+0x1d10/0x1d10 [ 2458.854914][ T6045] ? lock_downgrade+0x6e0/0x6e0 [ 2458.859772][ T6045] ? vtime_user_exit+0x218/0x6c0 [ 2458.864728][ T6045] ? trace_hardirqs_on+0x2d/0x120 [ 2458.869780][ T6045] do_syscall_64+0x35/0xb0 [ 2458.874220][ T6045] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2458.880126][ T6045] RIP: 0033:0x7f811b48a5a9 [ 2458.884548][ T6045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2458.904161][ T6045] RSP: 002b:00007f811c591168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2458.912579][ T6045] RAX: ffffffffffffffda RBX: 00007f811b5abf80 RCX: 00007f811b48a5a9 [ 2458.920554][ T6045] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 2458.928529][ T6045] RBP: 00007f811c5911d0 R08: 0000000000000000 R09: 0000000000000004 [ 2458.936589][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.944580][ T6045] R13: 00007f811badfb1f R14: 00007f811c591300 R15: 0000000000022000 [ 2458.952564][ T6045] [ 2458.955588][ T6045] Modules linked in: [ 2458.959557][ T6045] ---[ end trace 0000000000000000 ]--- [ 2458.965049][ T6045] RIP: 0010:__inet_hash_connect+0x217/0x1660 [ 2458.971076][ T6045] Code: 85 a9 13 00 00 49 8b 9c 24 a0 06 00 00 48 89 ef e8 5e 74 a9 01 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 40 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 85 12 00 00 4c 8b 73 40 4d 85 f6 74 0d e8 61 f7 [ 2458.990751][ T6045] RSP: 0018:ffffc90005d1f790 EFLAGS: 00010202 [ 2458.996855][ T6045] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815ef790 [ 2459.004897][ T6045] RDX: 0000000000000008 RSI: 0000000000000004 RDI: 0000000000000040 [ 2459.012899][ T6045] RBP: ffff888027649240 R08: 0000000000000001 R09: 0000000000000003 [ 2459.020940][ T6045] R10: fffff52000ba3ee4 R11: 000000000008c07c R12: ffff88807ba78000 [ 2459.029233][ T6045] R13: 000000000000b426 R14: ffffffff8daa34c0 R15: ffff8880457c9c40 [ 2459.037261][ T6045] FS: 00007f811c591700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 2459.046239][ T6045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2459.052856][ T6045] CR2: 00007f811c590ff8 CR3: 000000001ef79000 CR4: 00000000003526e0 [ 2459.060896][ T6045] Kernel panic - not syncing: Fatal exception in interrupt [ 2459.068276][ T6045] Kernel Offset: disabled [ 2459.072600][ T6045] Rebooting in 86400 seconds..