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"}) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r9, 0x20, 0x0, 0xfffffeff000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r2, 0x59465000) fallocate(r9, 0x0, 0x0, 0x10000101) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x40, 0x6, 0x9, 0x0, 0x0, 0x8, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ce0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x4, 0xdc0, 0x2, 0x5, 0x80, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x7fffffff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) 18:35:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000040), 0x8) 18:35:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x4, 0x0, 0x0) 18:35:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000180)={0x10, 0x2}, 0x10) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) r5 = dup2(r3, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f00000002c0)=ANY=[@ANYBLOB="01", @ANYRES32=0x0], &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r6}, 0x10) 18:35:56 executing program 2: utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000) 18:35:56 executing program 4: r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r0, r1) 18:35:56 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, 0x0) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:56 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x5, 0x0, 0x0) 18:35:56 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:56 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x6, 0x0, 0x0) 18:35:57 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, 0x0, 0x0) 18:35:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x0) 18:35:57 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 18:35:57 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:57 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x7, 0x0, 0x0) 18:35:57 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast2}], 0x10}, 0x0) 18:35:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x8, 0x0, 0x0) 18:35:57 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="1c1c4e220000000000000000000000000000000000000000000000000000000000006e0c7aa20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe800"/128, @ANYRES32=0x0, @ANYBLOB="000000000010000008"], 0x98) 18:35:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0) 18:35:57 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:35:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000004b40)={&(0x7f0000000040), 0x6e, 0x0}, 0x0) 18:35:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "064100", 0x8, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], "0df3c96306b0031f"}}}}}, 0x0) 18:36:00 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x9, 0x0, 0x0) 18:36:00 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:36:00 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') write$tun(r0, 0x0, 0x2) 18:36:00 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1e6d1f", 0x20, 0x6, 0x0, @dev, @empty, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) 18:36:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) [ 412.063534][T15909] __report_access: 10 callbacks suppressed [ 412.063630][T15909] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[15909] 18:36:00 executing program 4: syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dd124b2bc689a0707e5c8f0bbe322f101efd6917d41bec5d390a8947fa7cc4de", "82ffb01f66cb3143a3317d72e9b67ce4e70aea03d29676e625922d458d055a39cae07222ecfe016980de5e5bbb9db5ab", "a8aeef5d913a25548221e20954f729c55ff8bd1584128196f6c71a22", {"6d2fcfab7f46c7bb92e23da61d6160b7", "840fef8f65cb5ee3ea6f7e121b6c6651"}}}}}}}, 0x0) 18:36:00 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1e6d1f", 0x20, 0x6, 0x0, @dev, @empty, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) 18:36:00 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$tun(r0, 0x0, 0x0) [ 412.167012][T15917] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[15917] 18:36:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xa, 0x0, 0x0) 18:36:00 executing program 4: io_setup(0x4b, &(0x7f0000000080)) io_setup(0x3, &(0x7f0000000bc0)) io_setup(0x7fff, &(0x7f0000000040)) io_setup(0x8001, &(0x7f0000000140)) 18:36:00 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1e6d1f", 0x20, 0x6, 0x0, @dev, @empty, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) 18:36:03 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:03 executing program 1: pipe2$9p(&(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000002380)=0x80) 18:36:03 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1e6d1f", 0x20, 0x6, 0x0, @dev, @empty, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) 18:36:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xb, 0x0, 0x0) 18:36:03 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "9a56f9f3e41daf5e2651e860b574dcb3d95a35e068c74db539ce2e0ee7bbf29bde7233a5d97c58aac959e43e36c6d9e64185c29ed04a72aec246902440696b20"}, 0x48, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) 18:36:03 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:36:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040), 0x8) [ 415.200833][T15962] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[15962] [ 415.209894][T15963] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[15963] 18:36:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 18:36:03 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/189) 18:36:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xc, 0x0, 0x0) 18:36:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @random="a5a3155bc8e5"}, 0x14) 18:36:03 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 18:36:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @cond}}) 18:36:06 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9389c8", 0x0, 0x87, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2}}}}, 0x0) 18:36:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xd, 0x0, 0x0) 18:36:06 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000026c0)=0x3f) 18:36:06 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:06 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:36:06 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/udplite\x00') dup2(r1, r0) 18:36:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4, 0x6}]}]}}, &(0x7f00000001c0)=""/173, 0x32, 0xad, 0x1}, 0x20) [ 418.237714][T16001] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16001] [ 418.267804][T16002] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16002] 18:36:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 18:36:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xe, 0x0, 0x0) 18:36:06 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 18:36:06 executing program 1: r0 = socket(0x21, 0x2, 0x2) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 18:36:06 executing program 4: r0 = socket(0x21, 0x2, 0x2) socketpair(0x1e, 0x4, 0x401, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0xf8, 0x5, 0x9, 0x4, @mcast2, @loopback, 0x7, 0x20, 0x2, 0xf810}}) r1 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xf7, 0x7, 0x2, @mcast2, @empty, 0x10, 0x10, 0x4, 0x80000001}}) 18:36:06 executing program 1: r0 = socket(0x21, 0x2, 0x2) socketpair(0x1e, 0x4, 0x401, &(0x7f0000000100)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0xf8, 0x5, 0x9, 0x4, @mcast2, @loopback, 0x7, 0x20, 0x2, 0xf810}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', @ifru_names}) socketpair(0x8, 0x5, 0x8, &(0x7f0000000140)) 18:36:06 executing program 2: r0 = socket(0x21, 0x2, 0x2) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 18:36:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xf, 0x0, 0x0) 18:36:09 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:09 executing program 4: r0 = socket(0x21, 0x2, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 18:36:09 executing program 1: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 18:36:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000001c0)=""/173, 0x26, 0xad, 0x1}, 0x20) 18:36:09 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x10, 0x0, 0x0) 18:36:09 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:36:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xf7, 0x7, 0x0, @mcast2, @empty, 0x0, 0x10}}) r1 = socket(0x21, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @loopback, 0x0, 0x20, 0x0, 0xf810}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, 0x32, @private2, @mcast2, 0x0, 0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000680)) sendmsg$can_bcm(r1, 0x0, 0x8041) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) 18:36:09 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names}) 18:36:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000001c0)=""/173, 0x26, 0xad, 0x1}, 0x20) 18:36:09 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x11, 0x0, 0x0) [ 421.302365][T16069] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16069] [ 421.331044][T16072] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16072] 18:36:09 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, 0x0, 0x0) clone(0x20000980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)) 18:36:09 executing program 4: openat$vsock(0xffffffffffffff9c, 0x0, 0x400401, 0x0) [ 421.489523][T16091] misc userio: Invalid payload size [ 421.495714][T16091] misc userio: Invalid payload size 18:36:12 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:12 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000013c0)) 18:36:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x12, 0x0, 0x0) 18:36:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000240)) 18:36:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x20008081) 18:36:12 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:36:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}}, 0x1c}}, 0x0) [ 424.378069][T16121] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16121] 18:36:12 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x13, 0x0, 0x0) 18:36:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}}, 0x1c}}, 0x0) 18:36:12 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xea60}) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) [ 424.423787][T16127] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16127] 18:36:12 executing program 4: r0 = socket(0x2, 0x3, 0x7) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x24}}, 0x0) [ 424.523399][T16133] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16133] 18:36:12 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x14, 0x0, 0x0) 18:36:12 executing program 2: socket(0x21, 0x2, 0x2) socketpair(0x0, 0x4, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xf7, 0x7, 0x2, @mcast2, @empty, 0x10, 0x10, 0x4, 0x80000001}}) 18:36:12 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) 18:36:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$char_usb(r0, 0x0, 0x0) [ 424.719785][T16152] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16152] 18:36:15 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:36:15 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x15, 0x0, 0x0) 18:36:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') read$char_usb(r0, 0x0, 0x0) 18:36:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00') read$char_usb(r0, &(0x7f0000000040)=""/96, 0x60) read$char_usb(r0, 0x0, 0x0) 18:36:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') read$char_usb(r0, 0x0, 0x0) 18:36:15 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x16, 0x0, 0x0) [ 427.414671][T16183] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16183] 18:36:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00') read$char_usb(r0, &(0x7f0000000100)=""/69, 0x45) 18:36:15 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') read$char_usb(r0, 0x0, 0x0) 18:36:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$char_usb(r0, 0x0, 0x0) 18:36:15 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x17, 0x0, 0x0) 18:36:15 executing program 2: r0 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$char_usb(r0, 0x0, 0xfffffffffffffe6f) [ 427.751056][T16206] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16206] 18:36:18 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000000)) 18:36:18 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') read$char_usb(r0, 0x0, 0x0) 18:36:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$char_usb(r0, 0x0, 0xfffffffffffffe4e) 18:36:18 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x18, 0x0, 0x0) 18:36:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$char_usb(r0, 0x0, 0x75b6c08715255ac6) 18:36:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') read$char_usb(r0, 0x0, 0x0) 18:36:18 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 430.464810][T16223] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16223] [ 430.477647][T16228] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16228] 18:36:18 executing program 2: io_setup(0x1, &(0x7f0000000140)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x2, 0x0, r1, 0x0}]) 18:36:18 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x19, 0x0, 0x0) 18:36:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x14c, 0x14c, 0x14c, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'veth1_to_team\x00', 'bridge0\x00'}, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0x98, 0xbc, 0x0, {}, [@common=@unspec=@cpu={{0x28}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2d4) 18:36:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005840)=[{{&(0x7f0000000a40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x10, 0x29, 0xb, 0x3}}], 0x10}}], 0x1, 0x0) [ 430.634336][T16238] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16238] 18:36:21 executing program 1: syz_emit_ethernet(0x10da, &(0x7f00000000c0)=ANY=[@ANYBLOB="a13c253523a5aaaaaaaaaabb86dd632e1f2290a4160745a721ca2669c554ea5391645d91f888fe"], 0x0) 18:36:21 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:21 executing program 2: syz_io_uring_setup(0x742b, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x38a6, &(0x7f00000003c0)={0x0, 0x49bb}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 18:36:21 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1a, 0x0, 0x0) 18:36:21 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000000)) 18:36:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) [ 433.491503][T16264] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 433.513847][T16270] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16270] 18:36:21 executing program 1: request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0) 18:36:21 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1b, 0x0, 0x0) 18:36:21 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:21 executing program 2: syz_io_uring_setup(0x745a, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 433.545232][T16274] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16274] 18:36:21 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1c, 0x0, 0x0) 18:36:21 executing program 1: syz_io_uring_setup(0x4009, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0) 18:36:21 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:36:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) [ 433.700186][T16282] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16282] 18:36:22 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1d, 0x0, 0x0) 18:36:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0xee01], 0x38}, 0x0) [ 433.846942][T16296] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16296] 18:36:24 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:36:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x16, 0x4) 18:36:24 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2a, 0x0, 0x100000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040051}, 0x20044016) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:24 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000000)) 18:36:24 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1e, 0x0, 0x0) 18:36:24 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e27000/0x1000)=nil, &(0x7f0000c77000/0x11000)=nil, &(0x7f0000cda000/0x2000)=nil, &(0x7f0000db2000/0x4000)=nil, 0x0}, 0x68) [ 436.577827][T16321] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16321] [ 436.583921][T16326] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 436.614490][T16326] device ipvlan2 entered promiscuous mode 18:36:24 executing program 2: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000002c0), 0x0, 0x0, 0x0) 18:36:24 executing program 4: socket(0x18, 0x0, 0xce3d) 18:36:24 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x21, 0x0, 0x0) [ 436.628735][T16331] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16331] 18:36:25 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "6c5f4fef347d37b1b95439a35385639d5d7e0812da2d4200fb7c1b75d17a0b9877f34f1846bcec85b0c6bb67d5298d933cebe3febbfa8509fdd3e9e13e64ddb3"}, 0x48, 0xfffffffffffffffb) keyctl$describe(0x6, r0, 0x0, 0x0) 18:36:25 executing program 4: pipe(&(0x7f0000000580)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/56) 18:36:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x22, 0x0, 0x0) 18:36:27 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:36:27 executing program 4: r0 = socket(0x11, 0x3, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 18:36:27 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x23, 0x0, 0x0) 18:36:27 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, 0x0) 18:36:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000022c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)="bab9152e4dd5de4ae544dade0214cc9f38c1c6d313dd2e1836ee5dc604ca864281171a68736727e6a683365d0a85631615ee1e42af4b831eb8b2dcfc3f57edb51930344a866e2c609c0571bc7f414f79826f2bc7f9648349d8f317230c9464acdc37fd0d04085d9b97cf42eceba328e5150123aa8421899bffeac03d698b65742005747af7eea8114bd0ba3f606cad8237a86474bf337ce95993459c49e2aa2a979ce8e272203678be2717b3c81bc8d8943dac11ca017a62d8620fb7c73f9ae6414f9ac1f1b5acaf5c1195d2d3505156903d67c3abe23ce3d23cdd5ab442de227131b753f233c959cdd8790fa9d2e8123860e4061b2f7cc3f3752093f937e54cd0e33c101987210940f24122aae1d9b1a3f8ca37476d91e0f44df4add87babf2e90045c20246b2702528621f270b2a982f2a110698bbca2125169cfdbb237345955e1f15cdf390be1b2de1cb7cd8f144e2493f85c81c5e61e1808ce3a6eee55cb1ede6022462eb6ce97f340829df1864f5ad2ad2951a26ab3c572cf1f661a06044f52e122b93401fb90953980116d09ee6b788a2e9feed8014f007fca02e9159463b955597b150c357574d4f110361785946947efcdbbc99edc8e80550efaa503ab4848a38f1c04d8ccc3bcda51abad054e3e8c25bb2a2525b4aafa1d4c6b1b2dcb405441cc9b017132a55cb9c31c71a0a517c670f3dd490ca30d6daa7c4f38b6d93d1cb2a21c168a396f8112478d96607cbd20a6c623a5091976824dc8edb83a0aa4588ddc57ce4cd8afe76f23a290a77e91089b1b8b755efb8d301365b1cd64495726b99ddb0af085ac0ab261f6fd3375f6f23da0c2ec6cb90b90a1e1767abfdf8788d5aa76644a6bc5f8ff7738d1d1e78c1f9df527b215a474638d3af22997b0f169e3abd00cc2e73b537765a78b54f6238de5dafb1f9d2960593f0eecceacf1a010f10155e898686ac863ef0a714c971038eba1afb29b76f7b5ae375af3daf575399865a77546930b5d3a878d4bf515d5f09acc18dbf384c09a5590b8fdad5c95edfb103c3ee23168a0f0d8248e95b4028c57898b209ab59c69fae465b5eb7f233ef8745b592b8e2e49ef66f9c87c819a59ccca4849acbb24ec051bf5f1bb5a28cc3c01912976127693c742de56bc0076df06b1aa94f20aae5b3b8d05d9b3c2f3d03bc7a12842e68c87cd41e6e5436289b8e9b16a1a42529eeb9e20b6c3fb6736f88aafc166fb90cb363ebf8c90aa4c82fc0fbeb885b919b69370ba365761d633ac34092c3a04abc676d44fe4752c38d16af5a04de26e3cb70705beaa00d146f7705d1ee6dcd26b462826be132ae330e9fca2b6f773f0a13695374234d5902af7428f1a586e5a8eb78a43afcd9a5ebda29e9b3ad05b3ab9621ac3448d918b480708b9cece047c98be50bbb29aa75915e6b47dd9e84d8de2a122b3d9fdb8e25f196c076c85c0a61f9a9d7a20fbfb5a54c7130cb44dfa35ba1e8348ea0c0d63c4da4dd8e8df110660680f4db0b8fb4fe9d64e875636c6de110c93e0226e0c11fc64c89ba1b32bd79767681e580eb67ecb9964c40910bddb504436f40c7aadbe808f4c5af5c7e443b1d3a1232bc71740a897ddcebe44ca80622318ff2c67b69b4ea510d8577d055e690115b7134aedd602eedeb7cf7e7b2591dbe9dc960d48ce736f8af8c0ab3e680a376968fcabdd76c8392521100b5385ddfbf819ad28d30a7ab9cfa7192b31dfb69a261c602406bd1c3a9537a6cc7e12cee234b535d9555b4027863a6b47a342760ce9806acfe287bec5fce3b4ee6b3ddcf1ed5f98813798f936d7c5d3c280b5e8bb1501be5b3a400297f50da71f11379dc548c4d524d6e0cf9e5f88a429849d4107490ad636011349c56509f1b4d295c6fabd9006ae6657d5d7c15ec39518f846b20d6c14b0f3b02488bc4226c25de163f1524c841dea25920a81e91f624c4c09aa33adfdd4f73f58da5c16a34f649f68add8cd191d72716974c3ef5fd7baed0705ea5bcd7323c7121dbbc282fc6f100cb44ca2ccecfea0c9d31aa668e7c161b229a92bb37b40bb582c494c52dafd80f6f5d58a2fc09744adc0b3c4f286f6e451043ab7963dd31f9d66b97e6f9ed45b864a1ae042b795ecf0b87e9e53e0d129e935c674a9baf59e2cbb1d26884da5d0097d12982a6ba1297f3f131bda81c0c6740518ab72c3747882f5d98ecd47b331ec8de2673683fb554745171f661569afef2808e8826f7384936e298a590f644dff5bca9d9877c1592a427f33c7f6216b5427b6702aae078c3e9a55ab4711230b996965e769cda352c9808028d7e7686d8bf16b73387f684eecb507462719a7f65a8cf32db9fb38cc1996b334f5c445c50767eb9976146d6c47a7fc2a1616a5dbe99af61cc9c985103bdab95d75aec3f67764c294a1736bca4a3e9723b716b321b5f91db5a65139c13a94874f04472eaf64a829015137014fdc8b9f6219bd0769076a03571f5cd911c4ae4f10fb64fd4d6c9c013e2b209d98cbcf703e1cdf0672f5c3125c71e27968fdb7b3edd1b6b5b01762e61f33f7e27952946033272e179ec26c1ec5c445ddef3242ace2ba0f1779dc129a428b4d41079fdc8ccdebe428389223ed3eb1e7cac3ac19a884c1fc51da4ad8dc356d7aff701f2736242233240e5d41774ef1624700b30650296dd7c70bb6be7b1442941db5eace9e3747e92f0632c4c630a81f6037dd3c4dbb6fbba6e90d9387d953bb1e82818e90a4f9c86a1ccfb507e237ec6c33441906bfcf3f1efc8df7070addcd89a9a8e82ce02fd39037f7c9b156a29ba90dc4dc17b685f352bccbe9a71b8a9d9082ab96bb2a8e78e6874d4d65422ec3a86ab4906aef39d49a0e7ef1c5c0ca4313eb3f7070c21d6a84f9f1a94ece2b29d1577bd665d915ee40c89caefec5d7c2adc18546f406c8cf47bca5ecfd05dfdb3c803a166952ca1e1278a30d13a4f3a7657b45fbc10c819e6a9dc3e6f2dd0a113a41c00e7ae0aecd0e117e58a886e9a775f77ec94020d277dc5b576d6106a10e947ebf323300b5e2f9a80375ecea1265eac9f68c951d612119b389a915b1a83df9650af1edf44ca1991e3e3bad48a01b93f3a5f6c6a6cac3f9a644d8311041150438d500b258ab2b33be34763532904f68aacd99b45dd0e24ab855e3de60d88110532a3900f4d798311c39534ce9c61ada95b2dc124ed03df9bd39bf075116c369aa196edba0eed44dedff38d6eb568c3ff002b0ca8105efa083a9651e8f9a5f634fc5f8ddf660d1610c6ec43df04186f42b96130a2cffd90ff6c1ba5495270193d8661c96085de77ebc54deee4e4cd11b090bc978730fd18729e2a66432f1dcc92a29851ccc718edbc739c5252e0d97b9f611403c87cfb53ff3e480b52a79631073af22b721e78827e3be3d7ca4fe8377f7131f755a3edd81cc14223bb12ff0451d1ca37f4f2c789ae5c623fba0fef945894187bfd9d874ea2b321b7a6f307adf401d5e8b88a31cae447f210dae9b308523600b24d48bdf3990ffabc53694d7402ba11db3223597fdf166d1081104f636fb21c86048edf6ae73d0ff93e5092652b7c20097720a7716f750c1886b0c2555eb28aa13c57948e11da2f72b1ec7c2bf7409197089c024dc2e8aa07ffc5d13f90c37e2d8fdc9f10958d6101ae09bfa84c8f7adc980205295cbe068d5ef32b7844f7f21371471347ecc09ca110d11f53bdfa976b8b247a9eff62bb8773e7615b7f8aa9a472a36f678dd6078934057eeff25dc77295266007ddca2d3569ced1734a5caa3397fe13f34ddd0bb435c703b13b20d7c623f78414624d927c73f58956b9b18eda000ed87066eccc8f105b2393b1587bc785e96d6965873ea926416b6625e196d8f5df07f67f5b1e027bebd2fbf4455930beac785873d06ec95e7ac8fa146b8463b14434f4b87aa8c82b05f0e5b31fd0fbcbcfa7704dcbf7e4834009d29f8ae98a75246041d6bcf81e1c970106e2aebdb02cef0bd071593d829cb5e306d7d0dcd67417c0add32125901487d6d67233548e7a0860b0d32ac1309d0fb668047a509fc99ce1a0fdf8ae7b9ecb29c61adbe4ad225e8bf226df4e0a5779941e54e907407cea1e83d895b3a48118de9658df17890b7fb97f2e791ae78e4d74c0a8538d6a4292b66074f9707788d9e80ff9ab250ab97576ffb99acbef9802d9b442f8b85ef7210ff7b38db3d6ac90c11cf952025aa118fb94e4023e1e70ead7c2f4c55c4343803d6da7ae939051bc7272a1180c08f76d6285326332e9526323516c253dafd3ac849519b6f429dc5e7e19cbdea3785679cee2511ab962d81a994879cc9bcd99521e49246e829ed78aeefed37473a114a7ef4589c8cdd307d0a0533ce2610bf9eae2a5df6c1591ece92ae6c0e9ab0ff9ce96a0c34131a7a163ea46898eb9591d5a7247ede32400803074e2e52483c8c0710d51150911352c60208878a47c2105b7ed9dcc5652fff7d3a48b5fe58010dc7e38e16b829cb26952586e59d70ca766ab904e0c8f7ac8f04df5c1502330266c47bb131e7a86cf6ab4522c06ecbf9651cdbc62bf553bdcc1b85697afd964448372bf0e596e1527be0dec41a6a2f775fd1080886bec8c7323efd9ca20bc38f26aa4881b37d4e4fc5f222fbccf4b4ba3070a60af623d1767b055145e7243ec61a758c1e6e2ac33681e65b538cb5ab8a4872eea35cf1daac9bdfbad4aa1f59320b706bb83d16318a9df42f113df6a4d68811c9d6ea0a8cb48bedacb9499961320b7714256764e36740bb4e43e51444d5d532dc24f1a6b095cad91499e65598a8529c4cbbf12e5c7a7408a02146dceaff9ed20b3e40d0e272ecc2e6703363654a91010875ff60ad9eeb5dbd97c5b3cbbf5279d2c0c029113b13a4029cba2ad6587afc65b6479cebf18d7a7b5fa3ba0c3fac24ee8b90ccdf6249a947a6c07ea99e1f5ddbfe3420d60925555d7aa80b61ae12ea1f598a40c12963f9ca34520be2c02f4b790af0285d31ac098b0821eae267a842104fc14a84b6cd647312967f45504197d0a194a2e2daf6a8a0a56572aa2e382b64f74749683dff9e081ae8aceb55abc82c3ce380e3b1bb495bea110fe38d6a1f574623265f4696651b5922bec7244d5e3a2d0d1d3911eace12c38bad746e6cc3b075c0c6a7712d28aceaf1df5bda3d622101469d4cde17746dac36a002723d7470ef02e95839f322e88d689e070c4a0dc653caddbe12ffe6c81a3e598414d93f2b667cb0b9bc6d8dfc29a65074bb5c3be3def4d3439b5152486b2595c0783e1220e49479dce40494c899b1fbe69836bd09ffec21d022385bb1cf211840c9e99e27a8c3a940d5866fae0368f01c6f75f6783611b41bf7be9980bfd1c2d6592ad85059c3e7d4dc368b65900a64ed593c2403422779b77b62028743715268ba7d1d6e0ca6f860bee68c021b930bc6e265542c5a8e28abd41ede52128518143b26b3d0b2ebac4815f0a8e5fde5e48f0a37a2a10ac371661538b960d85dd778f7a4f3693040ee93b4273c1409e7ca638ed3e8d22e9083fd2967888c29a09d69945d2c057df31149e8bdd24917cb8fd21df2993cbe053473f63e223426841d648f1e03e4a06e479249f09ca001b3af9b8f9bfd6492cb50280a67abc1e13dfb3659fe3860d575b5691e6475ec2ec0ce4e13047ace2212f0f450fca4c60f669cfb856a41fb5ad0cea4bce51ecbe5328652d1caf204170971482c2333f763c734bf6ed948b7385f32ff2f9bc1363adab82b4155909ea7f6bfe95256b1eb194a1694998e1aaf941ef6ec0114b9b957c22", 0x1000}, {&(0x7f0000001180)="8591ba23d7cf1961443f6aa16f4b9d9dc84bda6ab5f520fdde912b42e67d84376afbec0eb38edf42f7ba107d8d85c275c47f2725548383379bbdbf7579337ba9f7594fdd333c98a5cc7d1798c91f8abaa48e0197808c1fcb76fa364d68be3056c8958f8fed6d2f52219bc6a17af1d3c3d49ef6fd4547b0a5b498b66d54b31a1dd5", 0x81}, {&(0x7f0000000100)="d97697d0813503bbf280df8435c63256962d155331496c3b099d573b", 0x1c}, {&(0x7f0000002300)="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", 0x13f}, {&(0x7f0000001300)="b6f9a19fc1cb39a4600ff5d59b05da4d7fd823bf633f2b0065ed3748543845e0fd6a36e4213dcd0db1982287cfab719b94d4c449546fcc3ae0807a24e96b944eeee54a2d14a79b3c3bc21d93e4e32d695369871d0514b80a91c1d37f612a6d1e1257b03b9569c38ddbf3e37511a2e229fc1ad2cb8bcab5162dbf9eda290f14314c4237f0", 0xfffffef3}, {&(0x7f0000000000)="919581ba64c000cb74977d0f40dbac8d22153befca9d9772605104d8dcce2fd353440c9eac5aeee7f077e6a2a6a8e3d6e5046a0dc72f1655bea8455f1b1c1383", 0x40}, {&(0x7f0000001400)="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", 0xdc0}], 0x1000000000000291, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x70}, 0x0) 18:36:27 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2a, 0x0, 0x100000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040051}, 0x20044016) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:27 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x24, 0x0, 0x0) 18:36:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000040), &(0x7f0000001080)=0x1002) [ 439.640136][T16366] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16366] [ 439.677741][T16371] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:27 executing program 2: r0 = socket(0x11, 0x3, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/253, 0xfd, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000100)=@in={0x2, 0x1}, 0xc) [ 439.713804][T16371] device ipvlan2 entered promiscuous mode [ 439.724491][T16373] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16373] 18:36:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/249, 0xf9, 0x0, 0x0, 0x0) [ 439.817340][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.823968][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 18:36:28 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x25, 0x0, 0x0) 18:36:28 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 18:36:30 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:36:30 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x26, 0x0, 0x0) 18:36:30 executing program 4: futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 18:36:30 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, 0x0) 18:36:30 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2a, 0x0, 0x100000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040051}, 0x20044016) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:30 executing program 2: r0 = fork() process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/134, 0x86}], 0x1, &(0x7f0000001b00)=[{&(0x7f0000001b80)=""/133, 0x85}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x0) [ 442.651554][T16411] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16411] 18:36:30 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x27, 0x0, 0x0) [ 442.725889][T16420] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 442.751253][T16424] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16424] [ 442.767914][T16420] device ipvlan2 entered promiscuous mode 18:36:31 executing program 4: futex(0x0, 0x8c, 0x1, &(0x7f0000000340), &(0x7f0000000380), 0x0) 18:36:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x5452, 0xffffffffffffffff) 18:36:31 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x70, 0x0, 0x0) 18:36:31 executing program 2: r0 = fork() waitid(0x0, r0, 0x0, 0x5, &(0x7f0000000000)) 18:36:31 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:36:33 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:36:33 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x148, 0x0, 0x0) 18:36:33 executing program 2: io_uring_setup(0x6206, &(0x7f0000000300)={0x0, 0x0, 0x2}) [ 445.697721][T16472] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16472] 18:36:33 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, 0x0) 18:36:33 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2a, 0x0, 0x100000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040051}, 0x20044016) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:33 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000000c0)) 18:36:33 executing program 2: syz_io_uring_setup(0x6805, &(0x7f0000000440)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 18:36:33 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x300, 0x0, 0x0) [ 445.782725][T16476] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 445.814629][T16476] device ipvlan2 entered promiscuous mode 18:36:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x0, 0xfff}) [ 445.822856][T16485] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[16485] 18:36:34 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x5452, &(0x7f0000000040)={0x0, @time}) 18:36:34 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x500, 0x0, 0x0) 18:36:34 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) fork() 18:36:36 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)) 18:36:36 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x600, 0x0, 0x0) 18:36:36 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) 18:36:37 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x6e, 0x48, 0xd3, 0x20, 0x13b1, 0x42, 0x5a25, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x35, 0x87}}]}}]}}, 0x0) [ 448.761975][T16524] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16524] 18:36:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x0, r2}) 18:36:37 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2a, 0x0, 0x100000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040051}, 0x20044016) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:37 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x700, 0x0, 0x0) 18:36:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000001040102000000000000000007002303080005400000005408000440000001ff0500010003"], 0x4c}}, 0x0) [ 448.851688][T16532] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 448.885586][T16532] device ipvlan2 entered promiscuous mode 18:36:37 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x900, 0x0, 0x0) [ 448.895130][T16539] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 18:36:37 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x59, 0xb4, 0x23, 0x8, 0xdf6, 0x4c, 0xdf08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x8c, 0xfa}}]}}]}}, 0x0) 18:36:37 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xa00, 0x0, 0x0) 18:36:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x60, 0x384, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76e0}) [ 449.126058][T10420] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 449.286147][T10419] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 449.376038][T10420] usb 3-1: Using ep0 maxpacket: 32 [ 449.536077][T10419] usb 6-1: Using ep0 maxpacket: 8 [ 449.656461][T10420] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.25 [ 449.665543][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.675421][T10420] usb 3-1: Product: syz [ 449.679696][T10420] usb 3-1: Manufacturer: syz [ 449.684675][T10420] usb 3-1: SerialNumber: syz [ 449.692186][T10420] usb 3-1: config 0 descriptor?? [ 449.739776][T10420] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 449.826112][T10419] usb 6-1: New USB device found, idVendor=0df6, idProduct=004c, bcdDevice=df.08 [ 449.835349][T10419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.843735][T10419] usb 6-1: Product: syz [ 449.848791][T10419] usb 6-1: Manufacturer: syz [ 449.853381][T10419] usb 6-1: SerialNumber: syz [ 449.862793][T10419] usb 6-1: config 0 descriptor?? [ 449.907925][T10419] r8712u: register rtl8712_netdev_ops to netdev_ops [ 449.914555][T10419] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 449.939134][T10420] usb 3-1: USB disconnect, device number 7 [ 449.951510][ T10] usb 3-1: Failed to submit usb control message: -71 [ 449.961008][ T10] usb 3-1: unable to send the bmi data to the device: -71 [ 449.969417][ T10] usb 3-1: unable to get target info from device [ 449.980653][ T10] usb 3-1: could not get target info (-71) [ 449.986797][ T10] usb 3-1: could not probe fw (-71) [ 450.026224][T10419] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 450.033118][T10419] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 450.047750][T10419] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 450.059743][T10419] usb 6-1: Direct firmware load for rtlwifi/rtl8712u.bin failed with error -2 [ 450.068800][T10419] usb 6-1: Falling back to sysfs fallback for: rtlwifi/rtl8712u.bin [ 450.091164][T10419] usb 6-1: r8712u: Firmware request failed [ 450.715927][T10398] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 450.955997][T10398] usb 3-1: Using ep0 maxpacket: 32 [ 450.985890][T10419] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 451.225897][T10419] usb 6-1: Using ep0 maxpacket: 8 [ 451.276046][T10398] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.25 [ 451.285112][T10398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.295845][T10398] usb 3-1: Product: syz [ 451.300046][T10398] usb 3-1: Manufacturer: syz [ 451.304747][T10398] usb 3-1: SerialNumber: syz [ 451.313685][T10398] usb 3-1: config 0 descriptor?? [ 451.369934][T10398] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 451.576034][T10248] usb 3-1: USB disconnect, device number 8 [ 451.586076][ T3109] usb 3-1: Failed to submit usb control message: -71 [ 451.604639][ T3109] usb 3-1: unable to send the bmi data to the device: -71 [ 451.618986][ T7] usb 6-1: USB disconnect, device number 3 [ 451.637617][ T3109] usb 3-1: unable to get target info from device [ 451.644333][ T3109] usb 3-1: could not get target info (-71) [ 451.652957][ T3109] usb 3-1: could not probe fw (-71) 18:36:39 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)) 18:36:39 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xb00, 0x0, 0x0) 18:36:39 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2a, 0x0, 0x100000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040051}, 0x20044016) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:39 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x3c}, {0x6}]}) 18:36:39 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0xf04a00) 18:36:39 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x59, 0xb4, 0x23, 0x8, 0xdf6, 0x4c, 0xdf08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x8c, 0xfa}}]}}]}}, 0x0) [ 451.778137][T16623] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x5f, 0x26]}}, &(0x7f00000000c0)=""/185, 0x30, 0xb9, 0x1}, 0x20) 18:36:40 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)) [ 451.819509][T16636] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16636] 18:36:40 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xc00, 0x0, 0x0) 18:36:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) [ 451.847321][T16623] device ipvlan2 entered promiscuous mode [ 451.860806][ T36] audit: type=1326 audit(1630607800.090:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16630 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 18:36:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x4, 0x0, 0x0, 0x84}, {0x6}]}) 18:36:40 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x8, 0x0) [ 451.950686][T16644] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16644] 18:36:40 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xd00, 0x0, 0x0) [ 452.038561][ T36] audit: type=1326 audit(1630607800.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16651 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 452.107630][T16655] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16655] 18:36:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:36:40 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2a, 0x0, 0x100000000) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, 0xc, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 18:36:40 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xe00, 0x0, 0x0) [ 452.205807][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 452.268239][T16673] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 452.283410][T16673] device ipvlan2 entered promiscuous mode [ 452.445795][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 452.725830][ T7] usb 6-1: New USB device found, idVendor=0df6, idProduct=004c, bcdDevice=df.08 [ 452.734902][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.743775][ T7] usb 6-1: Product: syz [ 452.748240][ T7] usb 6-1: Manufacturer: syz [ 452.752858][ T7] usb 6-1: SerialNumber: syz [ 452.792319][ T7] usb 6-1: config 0 descriptor?? [ 452.857639][ T7] r8712u: register rtl8712_netdev_ops to netdev_ops [ 452.864278][ T7] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 452.985843][ T7] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 452.992618][ T7] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 453.008892][ T7] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 453.023423][ T7] usb 6-1: Direct firmware load for rtlwifi/rtl8712u.bin failed with error -2 [ 453.032485][ T7] usb 6-1: Falling back to sysfs fallback for: rtlwifi/rtl8712u.bin [ 453.050296][ T7] usb 6-1: r8712u: Firmware request failed 18:36:41 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x59, 0xb4, 0x23, 0x8, 0xdf6, 0x4c, 0xdf08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x8c, 0xfa}}]}}]}}, 0x0) 18:36:41 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001480)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) 18:36:41 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x14) 18:36:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xf00, 0x0, 0x0) 18:36:41 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:41 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = dup(r0) write$snddsp(r2, &(0x7f0000000040)="ae", 0x1) [ 453.653032][T16708] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 453.681100][T16708] device ipvlan2 entered promiscuous mode [ 454.175685][ T7] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 454.415693][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 454.806015][T10248] usb 6-1: USB disconnect, device number 4 18:36:43 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x8, 0x0) 18:36:43 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1100, 0x0, 0x0) 18:36:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x4}]}}, 0x0, 0x26}, 0x20) 18:36:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/185, 0x2e, 0xb9, 0x1}, 0x20) 18:36:43 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x2}, {0x6}]}) [ 455.076995][T16748] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 455.117166][T16749] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16749] [ 455.124229][T16748] device ipvlan2 entered promiscuous mode [ 455.151087][ T36] audit: type=1326 audit(1630607803.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16754 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 18:36:43 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0xc00}, 0x20) 18:36:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010003080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:36:43 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1200, 0x0, 0x0) 18:36:43 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x44}}, 0x0) 18:36:43 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:43 executing program 2: syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xded, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x1f}}}}}}}]}}, 0x0) [ 455.458933][T16774] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 455.470063][T16774] device ipvlan2 entered promiscuous mode [ 455.765714][ T4131] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 456.025592][ T4131] usb 3-1: Using ep0 maxpacket: 32 [ 456.155824][ T4131] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.166848][ T4131] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 456.177117][ T4131] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 456.187117][ T4131] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 456.198258][ T4131] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 456.365804][ T4131] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.374980][ T4131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.383079][ T4131] usb 3-1: Product: syz [ 456.387296][ T4131] usb 3-1: Manufacturer: syz [ 456.391882][ T4131] usb 3-1: SerialNumber: syz [ 456.675667][ T4131] cdc_ncm 3-1:1.0: bind() failure [ 456.682445][ T4131] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 456.705663][ T4131] cdc_ncm 3-1:1.1: bind() failure [ 456.717664][ T4131] usb 3-1: USB disconnect, device number 9 [ 457.435560][ T4131] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 457.695628][ T4131] usb 3-1: Using ep0 maxpacket: 32 [ 457.825723][ T4131] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.836869][ T4131] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 457.848523][ T4131] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 457.858852][ T4131] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 457.869088][ T4131] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 18:36:46 executing program 0: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x8, 0x0) 18:36:46 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1300, 0x0, 0x0) 18:36:46 executing program 4: syz_open_dev$evdev(&(0x7f0000000180), 0x88, 0x123a42) 18:36:46 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e392d, [{{0x9, 0x2, 0x48}}]}}, 0x0) 18:36:46 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) [ 458.065695][ T4131] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.074959][ T4131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.084112][ T4131] usb 3-1: Product: syz [ 458.088948][ T4131] usb 3-1: Manufacturer: syz [ 458.117551][ T4131] usb 3-1: SerialNumber: syz [ 458.141598][T16811] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 458.162750][T16811] device ipvlan2 entered promiscuous mode 18:36:46 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1400, 0x0, 0x0) 18:36:46 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x14d942, 0x0) [ 458.197637][T16819] ptrace attach of "/root/syz-executor.0"[8448] was attempted by "/root/syz-executor.0"[16819] 18:36:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000280)={0x0, 0x0}) 18:36:46 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1500, 0x0, 0x0) 18:36:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) 18:36:46 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1600, 0x0, 0x0) 18:36:46 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:46 executing program 2: pipe(&(0x7f0000001980)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 458.395520][ T4131] cdc_ncm 3-1:1.0: bind() failure [ 458.413367][ T4131] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 458.435395][T10398] usb 6-1: new high-speed USB device number 5 using dummy_hcd 18:36:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}]}, 0x44}}, 0x0) [ 458.472482][ T4131] cdc_ncm 3-1:1.1: bind() failure 18:36:46 executing program 4: bpf$BPF_LINK_UPDATE(0x1a, 0x0, 0x0) [ 458.517866][ T4131] usb 3-1: USB disconnect, device number 10 [ 458.543357][T16848] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 458.597565][T16848] device ipvlan2 entered promiscuous mode [ 458.755643][T10398] usb 6-1: too many configurations: 45, using maximum allowed: 8 [ 459.658897][T10398] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 459.669322][T10398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.678192][T10398] usb 6-1: Product: syz [ 459.682441][T10398] usb 6-1: Manufacturer: syz [ 459.687978][T10398] usb 6-1: SerialNumber: syz [ 459.739525][T10398] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 460.355358][T10398] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 460.560637][T10399] usb 6-1: USB disconnect, device number 5 [ 461.415373][T10398] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 461.422375][T10398] ath9k_htc: Failed to initialize the device [ 461.431069][T10399] usb 6-1: ath9k_htc: USB layer deinitialized 18:36:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 18:36:49 executing program 2: prctl$PR_SET_MM(0x21, 0x5, &(0x7f0000ffc000/0x2000)=nil) 18:36:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xc}]}]}}, &(0x7f0000000140)=""/212, 0x32, 0xd4, 0x1}, 0x20) 18:36:49 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1700, 0x0, 0x0) 18:36:49 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0x1e, 0x0, 0x0) 18:36:49 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) [ 461.724423][T16907] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:50 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) 18:36:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10}, {}]}]}}, &(0x7f0000000140)=""/212, 0x36, 0xd4, 0x1}, 0x20) 18:36:50 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1800, 0x0, 0x0) 18:36:50 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffffc}, 0x8) [ 461.768339][T16907] device ipvlan2 entered promiscuous mode 18:36:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @loopback, @local}}}], 0x20}, 0x0) 18:36:50 executing program 2: bpf$BPF_LINK_UPDATE(0x2, 0x0, 0x0) 18:36:50 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0xdb01) 18:36:50 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1900, 0x0, 0x0) 18:36:50 executing program 4: prctl$PR_SET_MM(0x2f, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:50 executing program 5: syz_io_uring_setup(0x10c, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x6057, &(0x7f0000000100), &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 18:36:50 executing program 2: r0 = socket(0x2, 0x3, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 18:36:50 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000140)=""/212, 0x26, 0xd4, 0x1}, 0x20) 18:36:50 executing program 4: bpf$BPF_LINK_UPDATE(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe94e9f84058b2480}, 0x10) 18:36:50 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1a00, 0x0, 0x0) 18:36:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:36:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getnexthop={0x24, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4400ae8f, &(0x7f0000000040)) 18:36:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f0000001e00)}}, {{&(0x7f0000001e80)=@un=@abs, 0x80, &(0x7f0000002540)=[{0x0, 0x7ffff000}, {&(0x7f0000001f00)=""/42, 0x2a}], 0x2}}], 0x2, 0x0, &(0x7f0000009900)={0x77359400}) 18:36:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x10}, {0x8}, {0x3}, {}, {0x3, 0x5}]}, @struct={0xf}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/212, 0x5c, 0xd4, 0x1}, 0x20) 18:36:50 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:50 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1b00, 0x0, 0x0) 18:36:50 executing program 5: r0 = epoll_create(0x4) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x8, 0x0, 0x0) [ 462.345655][T16956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 18:36:50 executing program 1: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x35f8}, 0x40) 18:36:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x8915, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}}) 18:36:50 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1c00, 0x0, 0x0) 18:36:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 18:36:50 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0x10, 0x0, 0x0) 18:36:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom$inet(r0, 0x0, 0x0, 0x140, 0x0, 0x0) 18:36:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:50 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x17, 0x0, &(0x7f0000000180)) 18:36:50 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1d00, 0x0, 0x0) 18:36:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) getitimer(0x0, &(0x7f0000000000)) 18:36:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x18, 0x0, &(0x7f0000000180)) 18:36:50 executing program 2: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000000c0)=0x401, 0x4, 0x2) [ 462.680920][T16998] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 18:36:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1e00, 0x0, 0x0) 18:36:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x0) r1 = fork() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r0, 0x0, 0x0, 0x0}, 0x30) [ 462.759133][T16998] device ipvlan2 entered promiscuous mode 18:36:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2, @dev, @remote, @broadcast, @multicast1]}]}}}], 0x50}, 0x0) 18:36:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}, 0x0) 18:36:51 executing program 0: prctl$PR_SET_MM(0x24, 0x5, &(0x7f0000ffc000/0x2000)=nil) 18:36:51 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1f00, 0x0, 0x0) 18:36:51 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe000, 0x0) 18:36:51 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0x18, 0x0, 0x0) 18:36:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x0) 18:36:51 executing program 0: fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) 18:36:51 executing program 2: fsopen(&(0x7f0000000000)='fuse\x00', 0x0) 18:36:51 executing program 0: prctl$PR_SET_MM(0x10, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:51 executing program 4: mq_open(&(0x7f0000000100)=',\x00', 0x40, 0x0, 0x0) 18:36:51 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) syz_io_uring_setup(0x27e8, &(0x7f0000000080)={0x0, 0xe673}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 18:36:51 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2000, 0x0, 0x0) 18:36:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x384}) 18:36:51 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) 18:36:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2100, 0x0, 0x0) 18:36:51 executing program 0: syz_io_uring_setup(0x6057, &(0x7f0000000100), &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 18:36:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f0000001e00)}}, {{&(0x7f0000001e80)=@un=@abs, 0x80, &(0x7f0000002540)=[{0x0, 0x3665c4ffffffff}, {&(0x7f0000001f00)=""/42, 0x2a}], 0x2}}], 0x2, 0x0, &(0x7f0000009900)={0x77359400}) 18:36:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}, 0x0) 18:36:51 executing program 2: get_mempolicy(0x0, &(0x7f0000000040), 0x6, &(0x7f0000ffe000/0x2000)=nil, 0x2) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) fork() syz_io_uring_setup(0x7037, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:36:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 18:36:51 executing program 0: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x3f, 0x2, 0x0) 18:36:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2200, 0x0, 0x0) 18:36:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000200)="e10a4fe669", 0x1e}, {&(0x7f0000000240)="dae410dd3e73695087c776e7e8705f37081a2418b4d8e872", 0x18}, {&(0x7f0000000280)="9c458e3a386b83e1e4fe4c3131a5985e0aaf9ef7aec8311107c03f6367365fbf1a598981202e57419d29473a40b56cd8866dc887eade430e22137159b5347be18bf561070250829846da36f2ad0fcd187323b3446199a0ba0520756931cf4a3714554038632c049ff7d212b23c58061eda074b7b219792cdb9c071e4f38917b08a48930caf", 0x85}, {&(0x7f0000000340)="78980973c4d556c1b2476a0e75f4d409e70d8129bc211ffb5b0d58ea42cb54abb90a812cac4fde157702b7f24238f1dc339b6ebb5002bb3486cf2e498efeba9f61bd079fc962769076bb503370821007b8e8a51b0605be8ad25246db6cfe1ea9af1d3f1c0aba0ed2da68236550b8d0f3eaeffdfc4fe3fa9b4c98185881836e5c3e9cf4e8376299ba5c5dc16370a787514a3d0e917419ea", 0x97}, {&(0x7f0000000400)="98150df85c8f630fe59f0fc86d4d748b9c116c63b68bbc920ac1fa95ef6b27a8c17a8d4e17189e716c3f71051a66ee105afd73899e30b2641ccc6c358e26e38603c9808e06eea2c0dfb41a5b53f618c62680246de2dd03685d5267345ca277e09b44cf1a1aa0793df245b2ba3e2ccfc4742a4dcfdc66a0323174cdbc17c64035eccede76174248617eb49a4772232af8b2238a91578d9c824b0e2e984fc5d00f2abc9a9c6f124d0b70dafd108996ebe2c07517f0f96d6596287dbbbe35bc5eb8c06424870896dbd33668840f1628c788b58d2c3dd43c0e753ecc72140e34c46603bfb4523f73ed8624f7403d2157e30acb7b0b057da5a58154fb29", 0xfb}, {&(0x7f0000000500)="719db8fe3d97fc4f19a334eacb88b4c4578ecf9aff0c8df28b974fea811a1753b77932b4eb507493c92ffc5b49c20bd6549707f983a87330cc7759de560d8ab6ac7c4b9369f66b822eff954d71059499d5827eb292b29f0daee12447ea7a1b6d4fa14747af7cae80074aa29d07d30de20f4068852313293cb4eb96a7792e9bc92130cc777bcf682240d725de839bd48aeaf47a4d677f311d62bdcab084e57f87796a3016508e304e60af34876634b72acc1c8b4c532d6929d2beef636315c013df7fee70bc908772056f0aec521180e804c9c73659f990efa35cfdf389a3", 0xde}, {&(0x7f0000000600)="1f72f85880e88d4690a1eb1c512985367c5946f8a52f730e5b4174f9fb71a72611535a7ac5a5df62ac211e5e9fab2399c2d029804e9f", 0x36}, {&(0x7f0000000640)="bf3aef8a1286169d693b981db53d0fcab359a58fedf2bcdbde836dbb445f82c72c4b3e435d586e6df0887df105b2ccc05f9041efc8e7136edfbb3af147b5c03c900a675bc1b6946d988caaee41021d9380340f58c890f9ebb3b4ab65076a13120c9c33f73f348bd1baf6d43b2bc8ad202a08ac94958ada7c2e3f011a001b875ca3911412c1b811edbefbdc6e6ed3dd4272e50cd7db974da0eb5584326c34b6bd019cbcc3d62f0b67615b676dcee366c404a21da1428fd854aa3c4099f628", 0xbe}, {&(0x7f0000000700)="d8a96ad8c11ef097a6ac703bd8502111983bfcc7356ae943fc89b00d8510929fd0846c16fa956138f3e267b77d7e7e353f8582925d8ae7876b4b74320a768b2adddd935c0adc5a27f5b088e47a886e26434a06b3d90fcc2a95786c5ac4b24e97266db3c4b258c09a92d5ac2e31e5a7be6c88609b40623ae9fc8efa96aa3421bc89acefce3a84cc6c1d5336406159f4265c921b2018446308979837e0cd9a6c7e024f27ac80092ba09e041ff8d19a0f6d555f3fcd93cc92ca3d9f476bf83f07ff8115374a4206250f97366c9d2e1a1daa1497a9ab973b8f9f51ae7c7b1cb402895d5f27", 0xe3}], 0x9, &(0x7f0000000a80)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @rand_addr, @private}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @broadcast}}}], 0xf8}, 0x0) 18:36:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000b"], &(0x7f00000000c0)=""/174, 0x63, 0xae, 0x1}, 0x20) 18:36:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 18:36:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xfffffffa, 0x4) 18:36:51 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x800000000047) 18:36:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2300, 0x0, 0x0) 18:36:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000096c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002540)=[{0x0}, {&(0x7f0000001f00)=""/42, 0x2a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x0, &(0x7f0000009900)={0x77359400}) 18:36:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000002004e20e0"], 0x110) 18:36:52 executing program 4: bpf$BPF_LINK_UPDATE(0x6, 0x0, 0x0) 18:36:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2400, 0x0, 0x0) 18:36:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 18:36:52 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) sigaltstack(&(0x7f0000ff8000/0x8000)=nil, 0x0) 18:36:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 18:36:52 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xa, 0x0, 0x0) 18:36:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2500, 0x0, 0x0) 18:36:52 executing program 0: socketpair(0x2, 0x80003, 0x100, &(0x7f0000000000)) 18:36:52 executing program 5: bpf$BPF_LINK_UPDATE(0x4, 0x0, 0x0) 18:36:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 18:36:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000600)=@nl=@unspec, 0x80) 18:36:52 executing program 4: bpf$BPF_LINK_UPDATE(0x3, &(0x7f0000000100), 0x10) 18:36:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={0x0, @l2tp={0x2, 0x0, @broadcast}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @ipx={0x4, 0x0, 0x0, "610fd2152c22"}}) 18:36:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2600, 0x0, 0x0) 18:36:52 executing program 5: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 18:36:52 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 18:36:52 executing program 0: prctl$PR_SET_MM(0x1d, 0x5, &(0x7f0000ffc000/0x2000)=nil) 18:36:52 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 18:36:52 executing program 2: prctl$PR_SET_MM(0x1b, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2700, 0x0, 0x0) 18:36:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x48}}, 0x0) 18:36:52 executing program 4: bpf$BPF_LINK_UPDATE(0x8, &(0x7f0000000100), 0x10) 18:36:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x15, 0x0, &(0x7f0000000180)) 18:36:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x48}}, 0x0) 18:36:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @empty}, @rc={0x1f, @fixed}, @nl=@unspec, 0x4, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000040)='batadv_slave_1\x00'}) 18:36:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x3368, 0x0, 0x0) 18:36:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_tos_int={{0x14, 0x1000000}}], 0x38}, 0x0) 18:36:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x2}]}}}], 0x18}, 0x0) 18:36:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x48}}, 0x0) 18:36:52 executing program 0: prctl$PR_SET_MM(0x16, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:52 executing program 4: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, &(0x7f0000000040)='!--@@-$$-+\x00', 0x0, 0x0) 18:36:52 executing program 2: syz_io_uring_setup(0x10c, &(0x7f0000000000)={0x0, 0x7357}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x6057, &(0x7f0000000100), &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 18:36:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x343d, 0x0, 0x0) 18:36:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x5}]}]}}, &(0x7f0000000140)=""/212, 0x36, 0xd4, 0x1}, 0x20) 18:36:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00"], 0x48}}, 0x0) 18:36:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) 18:36:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000600)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80) 18:36:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) [ 464.757848][T17185] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 464.790839][T17185] device ipvlan2 entered promiscuous mode 18:36:53 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 18:36:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0], 0x48}}, 0x0) 18:36:53 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x3d34, 0x0, 0x0) 18:36:53 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0x6, 0x0, 0x0) 18:36:53 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1f) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:36:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x11, 0x8, {0x0, @loopback, @local}}}], 0x20}, 0x0) 18:36:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x8, 0x0, &(0x7f00000000c0)) [ 464.968607][T17206] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:53 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x3f00, 0x0, 0x0) 18:36:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0], 0x48}}, 0x0) 18:36:53 executing program 5: migrate_pages(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:36:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x20}, 0x0) 18:36:53 executing program 5: unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}]}]}, 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 18:36:53 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x4801, 0x0, 0x0) 18:36:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)=ANY=[], 0x290) [ 465.138277][T17222] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:53 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x10}, {0x8}, {0x3}, {}, {0x3, 0x5}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xc}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/212, 0x68, 0xd4, 0x1}, 0x20) 18:36:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0], 0x48}}, 0x0) [ 465.308806][T17251] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:54 executing program 2: prctl$PR_SET_MM(0x3a, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 18:36:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x6833, 0x0, 0x0) 18:36:54 executing program 4: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000280)=0x7, 0x5, 0x0) r0 = io_uring_setup(0x1626, &(0x7f0000000340)) syz_io_uring_setup(0x647e, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000440)) 18:36:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) 18:36:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000040)="bbcea723cf8497e68b511aedb41402b8356beea4d6c177f08f5099c0db010b886814ef211667a449850130932c112b7829cd2ede5cf8845809aae36224b8204101743bf213fe4d3abb21ea1b93ab93a32ba41f1892a05b8edd75c0e5d4b9afe6795307041baf756843cdf82b92b18d02a2e67a00a65b82b833df13dde3048c907bc65537159565e7", 0x88) 18:36:54 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x19, 0x0, &(0x7f0000000180)) 18:36:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x7000, 0x0, 0x0) [ 465.934310][T17331] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:54 executing program 2: prctl$PR_SET_MM(0x8, 0x1, &(0x7f0000ffc000/0x4000)=nil) 18:36:54 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 18:36:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) 18:36:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) [ 466.076336][ T242] bond0 (unregistering): Released all slaves 18:36:54 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0x21, 0x0, 0x0) 18:36:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000300)=0x700, 0x4) 18:36:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x18c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) [ 466.142633][T17348] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) 18:36:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x10fff, 0x0, 0x0) 18:36:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) 18:36:54 executing program 0: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 18:36:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @local}}}], 0x20}, 0x0) [ 466.276792][T17360] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000002004e20ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"], 0x290) 18:36:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e"], 0x48}}, 0x0) 18:36:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x40000, 0x0, 0x0) 18:36:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback=0x7f000004, @local}}}], 0x20}, 0x0) 18:36:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket(0x0, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000096c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000001e80)=@un=@abs, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1}}], 0x2, 0x0, &(0x7f0000009900)={0x0, r1+10000000}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x0, 0x300) 18:36:54 executing program 4: bpf$BPF_LINK_UPDATE(0x6, &(0x7f0000000100), 0x10) [ 466.450941][T17375] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:54 executing program 2: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x0, 0x0) [ 466.493023][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) 18:36:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x100000, 0x0, 0x0) 18:36:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e"], 0x48}}, 0x0) 18:36:54 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={0x0}}, 0x0) 18:36:54 executing program 4: migrate_pages(0xffffffffffffffff, 0x8001, 0x0, &(0x7f0000000040)) [ 466.683502][T17396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:54 executing program 5: prctl$PR_SET_MM(0x8, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:54 executing program 0: r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='!--@@-$$-+\x00', &(0x7f0000000140)="d2", 0x1) 18:36:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x200000, 0x0, 0x0) [ 466.772661][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:55 executing program 2: bpf$BPF_LINK_UPDATE(0x1b, 0x0, 0x0) 18:36:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x82, 0x6, "f37a359d"}, @timestamp={0x44, 0x14, 0x76, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @lsrr={0x83, 0xf, 0x0, [@local, @multicast1, @private]}]}}}], 0x40}, 0x0) 18:36:55 executing program 4: bpf$BPF_LINK_UPDATE(0x2, &(0x7f0000000100), 0x10) 18:36:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e"], 0x48}}, 0x0) 18:36:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x700000, 0x0, 0x0) 18:36:55 executing program 2: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe94e9f84058b2480}, 0x10) 18:36:55 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 18:36:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000100)='\x00'/12, 0xc) 18:36:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1000000, 0x0, 0x0) 18:36:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000002b40)=ANY=[]}) 18:36:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x5, {0x0, @loopback, @local}}}], 0x20}, 0x0) 18:36:55 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) [ 467.158533][T17428] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:55 executing program 5: prctl$PR_SET_MM(0x35, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2000000, 0x0, 0x0) [ 467.201890][T17428] device ipvlan3 entered promiscuous mode 18:36:55 executing program 0: bpf$BPF_LINK_UPDATE(0x1e, &(0x7f0000000100), 0x10) 18:36:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000100)="29053341eb9cf89a2e4458eb", 0xc) 18:36:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e"], 0x48}}, 0x0) 18:36:55 executing program 4: bpf$BPF_LINK_UPDATE(0x4, &(0x7f0000000100), 0x10) 18:36:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x3000000, 0x0, 0x0) 18:36:55 executing program 5: r0 = epoll_create(0x4) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x8, &(0x7f0000000080), 0x8) 18:36:55 executing program 0: r0 = fsopen(&(0x7f0000000800)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000840)=':\x00', &(0x7f0000000880)='\x00', 0x0) 18:36:55 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1f) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0) 18:36:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e"], 0x48}}, 0x0) 18:36:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x1c, 0x48, 0x1}, 0x1c}}, 0x0) 18:36:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x4000000, 0x0, 0x0) 18:36:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000040)=@in={0x2, 0x0, @empty}, 0x80) 18:36:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) dup3(r1, r0, 0x0) 18:36:55 executing program 2: prctl$PR_SET_MM(0xd, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast}}}], 0x20}, 0x0) 18:36:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e"], 0x48}}, 0x0) 18:36:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x5000000, 0x0, 0x0) 18:36:56 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x3}]}]}}, &(0x7f0000000140)=""/212, 0x36, 0xd4, 0x1}, 0x20) 18:36:56 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 18:36:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e000004000280"], 0x48}}, 0x0) 18:36:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = getpgid(0x0) r1 = pidfd_open(r0, 0x0) syz_open_procfs$userns(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) 18:36:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000000c0)={@multicast2, @remote, @multicast2}, 0xc) 18:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) 18:36:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/175, &(0x7f00000000c0)=0xaf) 18:36:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e000004000280"], 0x48}}, 0x0) 18:36:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x6000000, 0x0, 0x0) 18:36:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x1c}]}}}], 0x38}, 0x0) 18:36:56 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0x19, 0x0, 0x0) 18:36:56 executing program 5: mq_open(&(0x7f00000001c0)='R\x878\xcc8\xd9\xe5\xfbFLZL\xa3\x80\xd8\xf5+\xe8\xa0\xf4z\xdb\xb4\xbe\xb8\xf3\xf5\xcc\bJg\x1f\xde\x93\xe9\x9b\x87{\xec\xb9z\xa2\x1f7\xf1&\x94\x88\xb3a\x10\xe5T\xe4\x8d\xabt\xa07\x8f\xceX\xfc X\\+I \xf6\xcd\xe2n\xea\xd6\x826\xf9\x8c\x86C \xcdB\x0f$\x1az\x1bR\x0fNi\x87\xaeb\xcd\xec%8 H\xeb\xf5L\xb0~\xb0\xb9\xb7\xb3\xde,\v\x7f\xbe\x86\xb19\x8e6\xf3\x9d\b\n\x80\x9eX\xce\xf6\xefL\x15HN\xf6\xd9\x00+m\xd8HF\xc2\x8d\x9a\xa5\xda\xda\x86\x05ARb{+n\xd3\xc8\xda\xd7d\xbb\xc3\xb7\xda\xec\xf0\x9e5\x8b\xfdVs\x88\x8a\x91\xe6T\x00;\xce\t\xf36\x92\x18\xb0\xfc\xf4\xd5\xfb\f.\x80g\x0e\x83\xf3,\xd1\x88\xb6t\xa27j\x92\xef%\v=\x97\xfd\xf4{\v\x01\xb42\x11\x91~\xf6\n\xa7\xc0\bv\x8b\x95glY\xb1\v\x81>Nt[\x95#\x9c\xd7\xe3\xe5\xa3\xfa\xcb\x8f\xa5\xa8\\k\xea;\xc6\x96Z\x95\xdb\x8bh\xedK\f\xa2\x86\xf1Y\x1c\xecU\xe7\xb01\x13\x1cm\xfdd\xb7\xc9\xda\x93\xb4\xae\x1dX\x19\xba\x80\x18\xd2\xa0N\xb3\xd4\x06V\xf0#\xe6%\xa9\x83\x8a\x1a\r\xffge\rw\xa6Y\xa8?\x04WO\xe1lC\x95\xe3?&\x1c\xcbr\xb1\xfd\xf1\x94\x84+\x88\xffm\x1da\xd2\x87\x1e\x84r7 \x17\x1d\xbf@\xfc\xf9\xd8\xc5\x8c\xbfvx\xd4e/\n\xa2Q\x87:\xaa\x95V\x81\xc3\xeb\xa8L\xfc\x91t\xf6\xec\x8ai\xe4\t#\x06&\x00\x19_\x93\x1an[[\xcd\a\x91', 0x0, 0x0, 0x0) 18:36:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e000004000280"], 0x48}}, 0x0) 18:36:56 executing program 2: prctl$PR_SET_MM(0x2, 0x400000, &(0x7f0000ffc000/0x2000)=nil) 18:36:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x7000000, 0x0, 0x0) 18:36:56 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') lseek(r0, 0x4d985542, 0x0) 18:36:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x82, 0x2}, @timestamp={0x44, 0x4, 0x76}]}}}], 0x18}, 0x0) 18:36:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a0005"], 0x48}}, 0x0) 18:36:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x23, 0x0, 0x11) 18:36:56 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0x22, &(0x7f0000000040)={0xfffffffc}, 0x8) 18:36:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x8000000, 0x0, 0x0) 18:36:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @private}, 0xac, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='team_slave_1\x00'}) 18:36:56 executing program 5: shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) 18:36:56 executing program 4: prctl$PR_SET_MM(0x1e, 0x0, &(0x7f0000ffc000/0x2000)=nil) [ 468.392008][T17531] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a0005"], 0x48}}, 0x0) 18:36:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 18:36:56 executing program 5: syz_io_uring_setup(0x6057, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 18:36:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct]}, {0x0, [0x2e, 0x0, 0x30]}}, &(0x7f0000000140)=""/212, 0x29, 0xd4, 0x1}, 0x20) 18:36:56 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000140)=""/212, 0x36, 0xd4, 0x1}, 0x20) 18:36:56 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2) [ 468.549371][T17547] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x9000000, 0x0, 0x0) 18:36:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000015c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000000540)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xe84, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ace76767709424be43a4aad309dc8b4519c9ba2f3211f2739d4d8bcfba6e86af"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x578, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b9ce2455e1dabe897dfac0a182161b822f3098c467dac27f5a1fdbe53760742f"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x224, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e23a5431f4b52f0fa6021dcfc141b17e5803b7e8562dac3e3bd9ec127ca1f0e7"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ce425b468d367c1cd7d5b2690dd3cd627b73942ca4f772db440e78b628752a6c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x3e8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3e4, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 18:36:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a0005"], 0x48}}, 0x0) 18:36:56 executing program 4: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000280)=0x7, 0x5, 0x0) 18:36:56 executing program 5: bpf$BPF_LINK_UPDATE(0x11, 0x0, 0x0) 18:36:56 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xa000000, 0x0, 0x0) 18:36:56 executing program 0: prctl$PR_SET_MM(0x27, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @private}, 0xac, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='team_slave_1\x00'}) 18:36:57 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) [ 468.810251][T17566] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xb000000, 0x0, 0x0) 18:36:57 executing program 4: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='sync\x00', 0x0, 0x0) 18:36:57 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0x8, 0x0, 0x0) 18:36:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500"], 0x48}}, 0x0) 18:36:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x29, 0x0, 0x11) 18:36:57 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80002040, 0x0) 18:36:57 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffc000/0x2000)=nil) 18:36:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xc000000, 0x0, 0x0) [ 469.009712][T17586] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500"], 0x48}}, 0x0) 18:36:57 executing program 0: bpf$BPF_LINK_UPDATE(0x14, 0x0, 0x0) 18:36:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10}]}]}}, &(0x7f0000000140)=""/212, 0x2e, 0xd4, 0x1}, 0x20) 18:36:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000100)="29053341eb9c", 0x6) 18:36:57 executing program 5: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x2000)=nil) 18:36:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xd000000, 0x0, 0x0) 18:36:57 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0x3, 0x0, 0x0) [ 469.186967][T17601] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500"], 0x48}}, 0x0) 18:36:57 executing program 2: bpf$BPF_LINK_UPDATE(0x16, &(0x7f0000000100), 0x10) 18:36:57 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x38}}, 0x0) 18:36:57 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x10}, {0x8}, {}, {0x3, 0x5}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xc}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/212, 0x60, 0xd4, 0x1}, 0x20) 18:36:57 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0x4, 0x0, 0x700) 18:36:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xe000000, 0x0, 0x0) [ 469.379685][T17615] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:57 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x20000048) 18:36:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) 18:36:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000300), 0x4) 18:36:57 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) [ 469.541689][T17627] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xf000000, 0x0, 0x0) 18:36:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x10}}], 0x10}, 0x1f4) 18:36:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() getpriority(0x0, 0xffffffffffffffff) 18:36:57 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10}, {}, {0x3, 0x5}]}]}}, &(0x7f0000000140)=""/212, 0x3e, 0xd4, 0x1}, 0x20) 18:36:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000600)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) 18:36:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000140)=""/212, 0x26, 0xd4, 0x1}, 0x20) [ 469.712629][T17642] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x10000000, 0x0, 0x0) 18:36:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0x8) 18:36:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 18:36:58 executing program 0: prctl$PR_SET_MM(0x28, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x11000000, 0x0, 0x0) 18:36:58 executing program 4: syz_io_uring_setup(0x10c, &(0x7f0000000000)={0x0, 0x1000000, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) [ 469.891130][T17661] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:36:58 executing program 5: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) 18:36:58 executing program 2: prctl$PR_SET_MM(0x35, 0x5, &(0x7f0000ffc000/0x2000)=nil) 18:36:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:58 executing program 0: prctl$PR_SET_MM(0x2a, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:58 executing program 4: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='nomand\x00', 0x0, 0x0) 18:36:58 executing program 5: creat(&(0x7f0000000000)='.\x00', 0x0) 18:36:58 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xe, 0x0, 0x0) 18:36:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x12000000, 0x0, 0x0) 18:36:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:58 executing program 0: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) 18:36:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) 18:36:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x13000000, 0x0, 0x0) 18:36:58 executing program 2: prctl$PR_SET_MM(0x4, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = fork() r1 = fork() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) 18:36:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x1}]}}, &(0x7f00000000c0)=""/247, 0x26, 0xf7, 0x1}, 0x20) 18:36:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), 0x50) 18:36:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000600)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xf) 18:36:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x7, 0x40}}], 0x18}, 0x0) 18:36:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x14000000, 0x0, 0x0) 18:36:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback=0xac141429, @local}}}], 0x20}, 0x0) 18:36:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:58 executing program 5: prctl$PR_SET_MM(0x2, 0x544000, &(0x7f0000ffc000/0x2000)=nil) 18:36:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f00000000c0)) 18:36:58 executing program 2: fanotify_mark(0xffffffffffffffff, 0xb8, 0x0, 0xffffffffffffffff, 0x0) 18:36:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x15000000, 0x0, 0x0) 18:36:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x10}, {0x8}, {}, {}]}]}}, &(0x7f0000000140)=""/212, 0x46, 0xd4, 0x1}, 0x20) 18:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000080), 0x4) 18:36:59 executing program 5: prctl$PR_SET_MM(0x18, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, {}, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67a5, 0x4, 0x9}) 18:36:59 executing program 0: prctl$PR_SET_MM(0x8, 0x5, &(0x7f0000ffc000/0x2000)=nil) 18:36:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x16000000, 0x0, 0x0) 18:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:59 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000001}) 18:36:59 executing program 4: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x13, 0x0, &(0x7f0000000180)) 18:36:59 executing program 0: prctl$PR_SET_MM(0x25, 0x0, &(0x7f0000ffc000/0x2000)=nil) 18:36:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000300)=0x9, 0x4) 18:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x17000000, 0x0, 0x0) 18:36:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000080)="29053341ebea7f259cf89a2e", 0xc) 18:36:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}, 0x0) 18:36:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @local}}}], 0x20}, 0x0) 18:36:59 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0x9, 0x0, 0x0) [ 471.166602][T17765] __nla_validate_parse: 21 callbacks suppressed [ 471.166622][T17765] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x18000000, 0x0, 0x0) 18:36:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000), 0x4) 18:36:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @private}}) 18:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:59 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 18:36:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:36:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x45, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x5b, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000080)={0x15, 0x0, &(0x7f0000000200)}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 18:36:59 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xd3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x81}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x2, &(0x7f0000000680)=@string={0x2}}]}) 18:36:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x19000000, 0x0, 0x0) [ 471.361028][T17788] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:36:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1a000000, 0x0, 0x0) 18:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) [ 471.499997][T17804] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1b000000, 0x0, 0x0) 18:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) [ 471.572541][T17809] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 471.614708][T10398] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 471.624848][ T35] usb 1-1: new high-speed USB device number 3 using dummy_hcd 18:36:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1c000000, 0x0, 0x0) [ 471.655206][T10399] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 471.667421][T17815] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) [ 471.740918][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 471.790726][T17821] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 471.854557][T10398] usb 5-1: Using ep0 maxpacket: 8 [ 471.865344][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 471.945153][T10399] usb 6-1: too many configurations: 91, using maximum allowed: 8 [ 471.978034][T10398] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.994600][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 471.994698][ T35] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 472.019929][T10398] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.035569][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 472.045634][T10399] usb 6-1: config index 0 descriptor too short (expected 72, got 51) [ 472.057155][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 472.073457][T10398] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.084373][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.096783][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 472.110797][T10398] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 472.125410][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 472.126976][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.169662][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.179834][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.191794][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.203435][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 472.214839][T10399] usb 6-1: config index 1 descriptor too short (expected 72, got 51) [ 472.217208][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 472.224226][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 472.244207][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 472.284913][ T7] usb 3-1: language id specifier not provided by device, defaulting to English [ 472.294965][T10398] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.304648][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 472.328681][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 472.337722][T10398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.346148][T10399] usb 6-1: config index 2 descriptor too short (expected 72, got 51) [ 472.354228][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 472.365494][ T35] usb 1-1: Product: syz [ 472.369670][ T35] usb 1-1: Manufacturer: syz [ 472.374406][ T35] usb 1-1: SerialNumber: syz [ 472.379972][T10398] usb 5-1: Product: syz [ 472.384195][T10398] usb 5-1: Manufacturer: syz [ 472.389619][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 472.403172][T10398] usb 5-1: SerialNumber: syz [ 472.414871][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.426510][T17790] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 472.433973][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.445439][T10398] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 472.452584][ T7] usb 3-1: Product: syz [ 472.461082][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 472.464819][ T7] usb 3-1: SerialNumber: syz [ 472.473755][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 472.494880][T10399] usb 6-1: config index 3 descriptor too short (expected 72, got 51) [ 472.508348][ T35] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 472.520118][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 472.548925][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 472.635177][T10399] usb 6-1: config index 4 descriptor too short (expected 72, got 51) [ 472.643394][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 472.663963][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 472.680872][ T35] usb 5-1: USB disconnect, device number 12 [ 472.754602][ T7] cdc_ncm 3-1:1.0: bind() failure [ 472.756844][T10399] usb 6-1: config index 5 descriptor too short (expected 72, got 51) [ 472.768207][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 472.771484][ T7] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 472.778753][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 472.806015][ T7] cdc_ncm 3-1:1.1: bind() failure [ 472.819868][ T7] usb 3-1: USB disconnect, device number 11 [ 472.854917][T10399] usb 6-1: config index 6 descriptor too short (expected 72, got 51) [ 472.863200][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 472.875080][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 472.964620][T10399] usb 6-1: config index 7 descriptor too short (expected 72, got 51) [ 472.972761][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 472.983903][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 473.154909][T10399] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 473.164044][T10399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.173018][T10399] usb 6-1: Product: syz [ 473.180287][T10399] usb 6-1: Manufacturer: syz [ 473.185386][T10399] usb 6-1: SerialNumber: syz [ 473.225366][T10399] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 473.265864][T17790] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 473.434481][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 473.504532][T10420] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 473.512343][T17790] usb 1-1: Using ep0 maxpacket: 8 [ 473.655675][T17852] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 473.684525][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 473.794497][T10420] usb 3-1: Using ep0 maxpacket: 8 [ 473.794539][ T35] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 473.834572][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.845655][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 473.855524][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 473.865754][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 473.934751][T10420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.946102][T10420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.957109][T10420] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 473.968190][T10420] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 473.978840][T10420] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 473.989490][T10420] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 474.004661][T10248] usb 1-1: USB disconnect, device number 3 [ 474.025074][ T35] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 474.044608][T10420] usb 3-1: language id specifier not provided by device, defaulting to English [ 474.064626][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.073934][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.082437][ T7] usb 5-1: Product: syz [ 474.087086][ T7] usb 5-1: Manufacturer: syz [ 474.091882][ T7] usb 5-1: SerialNumber: syz [ 474.135200][ T7] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 474.194682][T10420] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.203877][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.212822][T10420] usb 3-1: Product: syz [ 474.217646][T10420] usb 3-1: SerialNumber: syz 18:37:02 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xd3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x5}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x2, &(0x7f0000000680)=@string={0x2}}]}) [ 474.327804][T10553] usb 5-1: USB disconnect, device number 13 [ 474.448743][T10399] usb 6-1: USB disconnect, device number 7 [ 474.475027][ T35] ath9k_htc: Failed to initialize the device [ 474.482588][T10399] usb 6-1: ath9k_htc: USB layer deinitialized [ 474.494506][T10420] cdc_ncm 3-1:1.0: bind() failure [ 474.508790][T10420] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 474.524791][T10420] cdc_ncm 3-1:1.1: bind() failure [ 474.533408][T10420] usb 3-1: USB disconnect, device number 12 [ 474.804381][T10553] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 475.074484][T10553] usb 5-1: Using ep0 maxpacket: 8 [ 475.204820][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.215837][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.225739][T10399] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 475.233471][T10553] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 475.243418][T10553] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 475.253595][T10553] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 475.263893][T10553] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 475.314552][T10553] usb 5-1: language id specifier not provided by device, defaulting to English [ 475.434584][T10553] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.443672][T10553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.451826][T10553] usb 5-1: Product: syz [ 475.456136][T10553] usb 5-1: SerialNumber: syz [ 475.534499][T10399] usb 6-1: too many configurations: 91, using maximum allowed: 8 [ 475.626495][T10399] usb 6-1: config index 0 descriptor too short (expected 72, got 51) [ 475.634909][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 475.646030][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 475.747091][T10399] usb 6-1: config index 1 descriptor too short (expected 72, got 51) [ 475.755319][T10399] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 475.766514][T10399] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 475.834385][T10399] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 475.841993][T10399] usb 6-1: can't read configurations, error -71 18:37:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:37:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1d000000, 0x0, 0x0) 18:37:06 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x81}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x88, &(0x7f0000000680)=@string={0x88, 0x3, "d58e4e3bd75e86d9ac529ee0bcceb844fc4033da81d33c0e8102a75165ae1087f8f5d12951d965a8ade4ac99473fefb90aa39db40b4928a7bdfc8aa802706a3d6dc9bb0085c3283de31217dfdfdaa44f23b6fec651051215d18cf5631fd6abc0389b04113010fd1dfa967f0ebfe061e89200da655b2682545fdb6e1387f781f66626b5ba2dd8"}}]}) 18:37:06 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x10000, 0x0) [ 478.144763][T17898] cdc_wdm 1-1:1.0: Error autopm - -16 18:37:06 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002880)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000002180)) [ 478.192637][T17940] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:37:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1e000000, 0x0, 0x0) 18:37:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:37:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 478.244580][T10553] cdc_ncm 5-1:1.0: bind() failure [ 478.263830][T10553] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 478.299761][T10553] cdc_ncm 5-1:1.1: bind() failure 18:37:06 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x88, &(0x7f0000000680)=@string={0x88, 0x3, "d58e4e3bd75e86d9ac529ee0bcceb844fc4033da81d33c0e8102a75165ae1087f8f5d12951d965a8ade4ac99473fefb90aa39db40b4928a7bdfc8aa802706a3d6dc9bb0085c3283de31217dfdfdaa44f23b6fec651051215d18cf5631fd6abc0389b04113010fd1dfa967f0ebfe061e89200da655b2682545fdb6e1387f781f66626b5ba2dd8"}}]}) 18:37:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) [ 478.331406][T10553] usb 5-1: USB disconnect, device number 14 [ 478.358281][T17960] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:37:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1f000000, 0x0, 0x0) [ 478.439749][T17975] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 478.476686][T10248] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 478.504236][T10398] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 478.654244][ T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 478.734211][T10248] usb 3-1: Using ep0 maxpacket: 8 [ 478.754213][T10398] usb 1-1: Using ep0 maxpacket: 8 [ 478.759628][T10553] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 478.874652][T10248] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.884181][T10398] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 478.905465][T10248] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.910919][T10398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 478.934629][T10398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 478.942744][T10248] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 478.949255][T10398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 478.965941][T10248] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 479.002298][T10248] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 479.013446][T10248] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 479.024106][T10553] usb 5-1: Using ep0 maxpacket: 8 [ 479.044289][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.059643][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.070955][T10248] usb 3-1: language id specifier not provided by device, defaulting to English [ 479.082861][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.097375][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 479.107115][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.117861][ T7] usb 6-1: config 0 descriptor?? [ 479.144428][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.157014][T10398] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 479.166478][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.179877][T10398] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 479.189189][T10553] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 479.199950][T10398] usb 1-1: Product: syz [ 479.204644][T10398] usb 1-1: Manufacturer: syz [ 479.209390][T10553] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 479.219713][T10398] usb 1-1: SerialNumber: syz [ 479.224269][T10248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.226061][T10553] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 479.240156][T10248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.245028][T17948] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 479.261262][T10248] usb 3-1: Product: syz [ 479.266107][T10248] usb 3-1: Manufacturer: 軕㭎廗劬캼䒸䃼펁฼ʁ冧깥蜐⧑ꡥ馬㽇맯ꌊ뒝䤋Ꜩﲽꢊ瀂㵪쥭»쎅㴨ዣ侤똣웾Ցᔒ賑揵혟삫鬸ᄄူ᷽雺๿’旚♛咂፮♦몵 [ 479.268506][T10553] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 479.289436][T10248] usb 3-1: SerialNumber: syz [ 479.305882][T10398] hub 1-1:1.0: bad descriptor, ignoring hub [ 479.311817][T10398] hub: probe of 1-1:1.0 failed with error -5 [ 479.332214][T10398] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 479.396754][T10553] usb 5-1: language id specifier not provided by device, defaulting to English [ 479.524151][T10553] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.533315][T10553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.542044][T10553] usb 5-1: Product: syz [ 479.546877][T10553] usb 5-1: Manufacturer: 軕㭎廗劬캼䒸䃼펁฼ʁ冧깥蜐⧑ꡥ馬㽇맯ꌊ뒝䤋Ꜩﲽꢊ瀂㵪쥭»쎅㴨ዣ侤똣웾Ցᔒ賑揵혟삫鬸ᄄူ᷽雺๿’旚♛咂፮♦몵 [ 479.568247][T10553] usb 5-1: SerialNumber: syz [ 479.594239][T10248] cdc_ncm 3-1:1.0: bind() failure [ 479.608065][T10248] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 479.622726][T10248] cdc_ncm 3-1:1.1: bind() failure [ 479.639660][T10248] usb 3-1: USB disconnect, device number 13 [ 479.854429][T10553] cdc_ncm 5-1:1.0: bind() failure [ 479.861377][T10553] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 479.868419][T10553] cdc_ncm 5-1:1.1: bind() failure [ 479.874469][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 479.876061][T10553] usb 5-1: USB disconnect, device number 15 [ 479.883471][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 479.903640][ T7] usb 6-1: USB disconnect, device number 10 [ 479.974582][T17948] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 480.215126][T17948] usb 1-1: Using ep0 maxpacket: 8 [ 480.314088][T10248] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 480.365310][T18011] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 480.564048][T10248] usb 3-1: Using ep0 maxpacket: 8 [ 480.574167][ T7] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 480.604045][T10553] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 480.684113][T10248] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.696543][T10248] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.707359][T10248] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.719025][T10248] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 480.724154][ T4131] usb 1-1: USB disconnect, device number 4 [ 480.728960][T10248] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 480.744439][T10248] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 480.794287][T10248] usb 3-1: language id specifier not provided by device, defaulting to English [ 480.854089][T10553] usb 5-1: Using ep0 maxpacket: 8 [ 480.914272][T10248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.923628][T10248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.932528][T10248] usb 3-1: Product: syz [ 480.937201][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.948475][T10248] usb 3-1: Manufacturer: 軕㭎廗劬캼䒸䃼펁฼ʁ冧깥蜐⧑ꡥ馬㽇맯ꌊ뒝䤋Ꜩﲽꢊ瀂㵪쥭»쎅㴨ዣ侤똣웾Ցᔒ賑揵혟삫鬸ᄄူ᷽雺๿’旚♛咂፮♦몵 [ 480.968201][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.978039][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.991204][T10248] usb 3-1: SerialNumber: syz [ 480.996485][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 480.998190][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.006537][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.024982][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.035457][T10553] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.037201][ T7] usb 6-1: config 0 descriptor?? [ 481.050678][T10553] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 481.068952][T10553] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 481.093436][T10553] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 481.154195][T10553] usb 5-1: language id specifier not provided by device, defaulting to English [ 481.204136][T10248] cdc_ncm 3-1:1.0: bind() failure [ 481.211869][T10248] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 481.233378][T10248] cdc_ncm 3-1:1.1: bind() failure [ 481.249969][T10248] usb 3-1: USB disconnect, device number 14 [ 481.284178][T10553] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.293256][T10553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.305140][T10553] usb 5-1: Product: syz [ 481.309958][T10553] usb 5-1: Manufacturer: 軕㭎廗劬캼䒸䃼펁฼ʁ冧깥蜐⧑ꡥ馬㽇맯ꌊ뒝䤋Ꜩﲽꢊ瀂㵪쥭»쎅㴨ዣ侤똣웾Ցᔒ賑揵혟삫鬸ᄄူ᷽雺๿’旚♛咂፮♦몵 [ 481.330548][T10553] usb 5-1: SerialNumber: syz [ 481.404110][T10553] usb 5-1: can't set config #1, error -71 [ 481.421832][T10553] usb 5-1: USB disconnect, device number 16 [ 481.424111][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 481.433791][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 481.455748][ T7] usb 6-1: USB disconnect, device number 11 18:37:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:37:13 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x20000000, 0x0, 0x0) 18:37:13 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xdf, 0x11, 0xc6, 0x10, 0x2304, 0x208, 0xc765, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0x45, 0xf, 0x29}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x60, 0x45, 0x91}}]}}]}}, 0x0) 18:37:13 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x2, &(0x7f0000000680)=@string={0x2}}]}) 18:37:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001a40)={&(0x7f00000019c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@sndrcv={0x2c}], 0x2c}, 0x100) 18:37:13 executing program 4: bpf$MAP_CREATE(0x1c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 484.899915][T18110] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:37:13 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x21000000, 0x0, 0x0) 18:37:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) 18:37:13 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 485.059685][T18121] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:37:13 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x22000000, 0x0, 0x0) 18:37:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a00050004"], 0x48}}, 0x0) [ 485.156176][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 485.163970][T10248] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 485.171869][T10419] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 485.203032][T18132] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.415628][T10248] usb 3-1: Using ep0 maxpacket: 16 [ 485.424464][T10419] usb 1-1: Using ep0 maxpacket: 8 [ 485.429582][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 485.533822][T10248] usb 3-1: config 0 has an invalid interface number: 228 but max is 1 [ 485.542278][T10248] usb 3-1: config 0 has no interface number 1 [ 485.549491][T10419] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 485.559908][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.572987][T10419] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 485.585462][ T7] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 485.596033][T10419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 485.608066][ T7] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 485.618474][ T7] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 485.629088][T10419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 485.674083][ T7] usb 6-1: language id specifier not provided by device, defaulting to English [ 485.723865][T10248] usb 3-1: New USB device found, idVendor=2304, idProduct=0208, bcdDevice=c7.65 [ 485.732977][T10248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.741933][T10248] usb 3-1: Product: syz [ 485.746253][T10248] usb 3-1: Manufacturer: syz [ 485.750882][T10248] usb 3-1: SerialNumber: syz [ 485.760862][T10248] usb 3-1: config 0 descriptor?? [ 485.793903][T10419] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 485.803247][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.820923][T10419] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 485.829304][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.837389][T10419] usb 1-1: Product: syz [ 485.841561][T10419] usb 1-1: Manufacturer: syz [ 485.846252][ T7] usb 6-1: Product: syz [ 485.853085][ T7] usb 6-1: SerialNumber: syz [ 485.859034][T10419] usb 1-1: SerialNumber: syz [ 485.896636][T18103] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 485.914864][T10419] hub 1-1:1.0: bad descriptor, ignoring hub [ 485.920800][T10419] hub: probe of 1-1:1.0 failed with error -5 [ 485.943140][T10419] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 486.017753][T10419] usb 3-1: USB disconnect, device number 15 [ 486.143803][ T7] cdc_ncm 6-1:1.0: bind() failure [ 486.160926][ T7] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 486.168698][ T7] cdc_ncm 6-1:1.1: bind() failure [ 486.191565][ T7] usb 6-1: USB disconnect, device number 12 [ 486.603926][T18103] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 486.803671][ T4131] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 486.853935][T18103] usb 1-1: Using ep0 maxpacket: 8 [ 486.883704][T10398] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 486.995357][T18175] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 487.063770][ T4131] usb 3-1: Using ep0 maxpacket: 16 [ 487.144269][T10398] usb 6-1: Using ep0 maxpacket: 8 [ 487.213978][ T4131] usb 3-1: config 0 has an invalid interface number: 228 but max is 1 [ 487.222344][ T4131] usb 3-1: config 0 has no interface number 1 [ 487.275034][T10398] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.286765][T10398] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 487.298182][T10398] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 487.308679][T10398] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 487.353840][T10399] usb 1-1: USB disconnect, device number 5 [ 487.359718][T10398] usb 6-1: language id specifier not provided by device, defaulting to English [ 487.383929][ T4131] usb 3-1: New USB device found, idVendor=2304, idProduct=0208, bcdDevice=c7.65 [ 487.392999][ T4131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.401180][ T4131] usb 3-1: Product: syz [ 487.405939][ T4131] usb 3-1: Manufacturer: syz [ 487.410564][ T4131] usb 3-1: SerialNumber: syz [ 487.416556][ T4131] usb 3-1: config 0 descriptor?? [ 487.484173][T10398] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.496685][T10398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.506303][T10398] usb 6-1: Product: syz [ 487.510699][T10398] usb 6-1: SerialNumber: syz [ 487.663710][T10420] usb 3-1: USB disconnect, device number 16 [ 487.793821][T10398] cdc_ncm 6-1:1.0: bind() failure [ 487.807654][T10398] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 487.814856][T10398] cdc_ncm 6-1:1.1: bind() failure [ 487.822926][T10398] usb 6-1: USB disconnect, device number 13 18:37:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x23000000, 0x0, 0x0) 18:37:19 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2105dffb93dbbc90f86358e3f251", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000300)="98919e585ce13dc01f45b205cfbbed907d2ad72e5b972628708ab0966795c13b164d9d9faa28b713f90399c6bdbbcbe8824665674f2254b231cfbfd29089599ea3177a5b274dc0ea9dec1c52a75ac892f3dfc86d86c0042156d388d2bd54dab3c262ad0308ffa5c1ebf9e6094e97ba3d41c7a92a46747fda0162abca8aad49495cb8dbb016107a46f803c16bf46a60f5201eba2f607eae5729955192659973c961e20932d72fbe65f926c0d6496eacc6056da22c7edfc85c"}, 0x48) 18:37:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:37:19 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="96", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)="9c", 0x1}, {0x0}, {0x0}, {&(0x7f00000014c0)}], 0x9, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x528}, 0x4004010) 18:37:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0045878, 0x0) 18:37:19 executing program 1: syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x240) 18:37:19 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003b00), 0x1, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 18:37:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:37:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x24000000, 0x0, 0x0) 18:37:19 executing program 4: r0 = getpgid(0x0) rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000002980)) 18:37:19 executing program 1: r0 = memfd_create(&(0x7f0000000040)=':\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup3(r1, r0, 0x0) [ 491.853441][T10420] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 492.093454][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 492.213466][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 492.224186][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 492.233209][T10420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 492.246865][T10420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 492.414067][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 492.423176][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 492.431630][T10420] usb 1-1: Product: syz [ 492.435962][T10420] usb 1-1: Manufacturer: syz [ 492.440564][T10420] usb 1-1: SerialNumber: syz [ 492.464514][T18242] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 492.484145][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 492.490087][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 492.505843][T10420] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 493.153538][T18242] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 493.403245][T18242] usb 1-1: Using ep0 maxpacket: 8 [ 493.554891][T18281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 493.903591][ T7] usb 1-1: USB disconnect, device number 6 18:37:26 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 18:37:26 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/211, 0x1a, 0xd3, 0x8}, 0x20) 18:37:26 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x10) 18:37:26 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x25000000, 0x0, 0x0) 18:37:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), 0xffffffffffffffff) 18:37:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 18:37:26 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 18:37:26 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x26000000, 0x0, 0x0) 18:37:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 18:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 18:37:26 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f00000007c0)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 18:37:26 executing program 1: r0 = gettid() r1 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) rt_sigqueueinfo(0x0, 0x0, 0x0) [ 498.297162][ T36] audit: type=1326 audit(1630607846.523:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18332 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=231 compat=0 ip=0x4665f9 code=0x0 [ 498.323059][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 498.335227][ T36] audit: type=1326 audit(1630607846.553:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=101 compat=0 ip=0x4665f9 code=0x0 [ 498.375392][ T36] audit: type=1326 audit(1630607846.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 498.572946][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 498.695017][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 498.713329][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.727997][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 498.740311][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 498.913153][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 498.922766][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 498.932434][ T7] usb 1-1: Product: syz [ 498.936996][ T7] usb 1-1: Manufacturer: syz [ 498.941760][ T7] usb 1-1: SerialNumber: syz [ 498.963904][T18296] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 498.983744][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 498.989689][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 499.006178][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 501.253927][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.260700][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 18:37:31 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 18:37:31 executing program 4: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612e2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dm_bufio', 0x0, 0x0) 18:37:31 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:37:31 executing program 5: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 18:37:31 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x27000000, 0x0, 0x0) 18:37:31 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612e2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) [ 503.334320][T18296] cdc_wdm 1-1:1.0: Error autopm - -16 [ 503.349783][ T7] usb 1-1: USB disconnect, device number 7 18:37:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x2}]}}, &(0x7f00000007c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 18:37:31 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x3d340000, 0x0, 0x0) 18:37:31 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000280)="1a", 0x1}], 0x1}, 0x0) close(r2) 18:37:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x72d78dd094c7db66, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x43, 0xd9f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) 18:37:31 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x0, 0x0, 0xfffffffd], '\x00', 0x11}, &(0x7f0000000140)=0x54) mmap(&(0x7f000049d000/0x12000)=nil, 0x12000, 0x0, 0x8d071, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltaction={0x68, 0x31, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x95}, 0x8050) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @initdev, 0x0}, &(0x7f0000000200)=0xc) clock_gettime(0x0, &(0x7f0000004680)={0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004500)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000004c0)=""/204, 0xcc}], 0x2, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f00000007c0)=""/125, 0x7d}], 0x3}}, {{&(0x7f0000000880)=@abs, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/139, 0x8b}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/44, 0x2c}, {&(0x7f0000001c80)=""/150, 0x96}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/17, 0x11}, {&(0x7f0000001e40)=""/216, 0xd8}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/149, 0x95}, {&(0x7f0000002000)=""/122, 0x7a}], 0x9, &(0x7f0000002140)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000002240)=[{&(0x7f00000042c0)=""/199, 0xc7}, {&(0x7f00000043c0)=""/240, 0xf0}], 0x2, &(0x7f00000044c0)=[@cred={{0x1c}}], 0x20}}], 0x6, 0x40, &(0x7f00000046c0)={r2}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004700)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@loopback, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x80, 0x29, r1, r3}, {0x6e3, 0x4000000000, 0x40, 0x2, 0x3, 0x0, 0x1, 0x5}, {0x1, 0x1f, 0xc42c, 0xfffffffffffff412}, 0x8, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d4, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x4, 0x1, 0xb, 0x6ef, 0x9, 0xfffffffb}}, 0xe8) unshare(0x28000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002280)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') socket$netlink(0x10, 0x3, 0x10) 18:37:31 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x3f000000, 0x0, 0x0) [ 503.874885][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 504.123867][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 504.242896][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 504.255675][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 504.266391][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 504.280409][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 504.454946][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 504.467450][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 504.490908][ T7] usb 1-1: Product: syz [ 504.500149][ T7] usb 1-1: Manufacturer: syz [ 504.518835][ T7] usb 1-1: SerialNumber: syz [ 504.563619][T18385] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 504.584673][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 504.590682][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 504.646983][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device 18:37:37 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 18:37:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x3, @dev}]}}}]}, 0x48}}, 0x0) 18:37:37 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/235, 0xeb}, {0x0}], 0x2, 0x20, 0x0) 18:37:37 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x48010000, 0x0, 0x0) 18:37:37 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:37:37 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x0, 0x0, 0xfffffffd], '\x00', 0x11}, &(0x7f0000000140)=0x54) mmap(&(0x7f000049d000/0x12000)=nil, 0x12000, 0x0, 0x8d071, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltaction={0x68, 0x31, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x95}, 0x8050) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @initdev, 0x0}, &(0x7f0000000200)=0xc) clock_gettime(0x0, &(0x7f0000004680)={0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004500)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000004c0)=""/204, 0xcc}], 0x2, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f00000007c0)=""/125, 0x7d}], 0x3}}, {{&(0x7f0000000880)=@abs, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/139, 0x8b}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/44, 0x2c}, {&(0x7f0000001c80)=""/150, 0x96}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/17, 0x11}, {&(0x7f0000001e40)=""/216, 0xd8}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/149, 0x95}, {&(0x7f0000002000)=""/122, 0x7a}], 0x9, &(0x7f0000002140)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000002240)=[{&(0x7f00000042c0)=""/199, 0xc7}, {&(0x7f00000043c0)=""/240, 0xf0}], 0x2, &(0x7f00000044c0)=[@cred={{0x1c}}], 0x20}}], 0x6, 0x40, &(0x7f00000046c0)={r2}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004700)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@loopback, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x80, 0x29, r1, r3}, {0x6e3, 0x4000000000, 0x40, 0x2, 0x3, 0x0, 0x1, 0x5}, {0x1, 0x1f, 0xc42c, 0xfffffffffffff412}, 0x8, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d4, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x4, 0x1, 0xb, 0x6ef, 0x9, 0xfffffffb}}, 0xe8) unshare(0x28000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002280)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') socket$netlink(0x10, 0x3, 0x10) [ 509.043862][T18385] cdc_wdm 1-1:1.0: Error autopm - -16 [ 509.044010][T10399] usb 1-1: USB disconnect, device number 8 18:37:37 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x68330000, 0x0, 0x0) [ 509.130248][T18497] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 18:37:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) 18:37:37 executing program 4: rt_sigtimedwait(&(0x7f0000000540), 0x0, 0x0, 0x8) fork() 18:37:37 executing program 1: setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000), 0xfffffffffffffd0a) 18:37:37 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xe4ffffff, 0x0, 0x0) 18:37:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r0, 0x0, 0x0) [ 509.521927][T10399] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 509.781898][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 509.901943][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 509.930019][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 509.977319][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 510.029740][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 510.232137][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 510.246591][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 510.255708][T10399] usb 1-1: Product: syz [ 510.260198][T10399] usb 1-1: Manufacturer: syz [ 510.268360][T10399] usb 1-1: SerialNumber: syz [ 510.292782][T18501] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.312601][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 510.318545][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 510.344185][T10399] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 511.453075][T18501] cdc_wdm 1-1:1.0: Error autopm - -16 [ 511.458719][T10248] usb 1-1: USB disconnect, device number 9 18:37:40 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:40 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xff0f0100, 0x0, 0x0) 18:37:40 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:37:40 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x8040000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x11c0400}]) 18:37:40 executing program 4: capget(&(0x7f0000001e40)={0x19980330}, &(0x7f0000001e80)) 18:37:40 executing program 5: rt_sigtimedwait(&(0x7f0000000540), 0x0, &(0x7f0000000600)={0x0, 0x989680}, 0x8) 18:37:40 executing program 5: accept4(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) clock_gettime(0x4, &(0x7f0000000740)) [ 512.029389][T18590] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 18:37:40 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xffffffe4, 0x0, 0x0) 18:37:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)=@secondary) 18:37:40 executing program 5: socketpair(0x11, 0x0, 0x0, &(0x7f0000000480)) 18:37:40 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x4000000000000, 0x0, 0x0) 18:37:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) [ 512.321460][T10419] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 512.591546][T10419] usb 1-1: Using ep0 maxpacket: 8 [ 512.751620][T10419] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 512.762194][T10419] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 512.771902][T10419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 512.783085][T10419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 512.951509][T10419] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 512.960860][T10419] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 512.970416][T10419] usb 1-1: Product: syz [ 512.974927][T10419] usb 1-1: Manufacturer: syz [ 512.979589][T10419] usb 1-1: SerialNumber: syz [ 513.003093][T18592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 513.022239][T10419] hub 1-1:1.0: bad descriptor, ignoring hub [ 513.028275][T10419] hub: probe of 1-1:1.0 failed with error -5 [ 513.044620][T10419] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 513.279790][T18636] udc-core: couldn't find an available UDC or it's busy [ 513.287504][T18636] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.342925][ T7] usb 1-1: USB disconnect, device number 10 18:37:42 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8b4) 18:37:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000002dc0)=@x25={0x9, @remote}, &(0x7f0000002e40)=0x80) 18:37:42 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x10000000000000, 0x0, 0x0) 18:37:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18:37:42 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:37:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 513.909483][T18652] tipc: Started in network mode [ 513.916776][T18652] tipc: Node identity a200b008989c, cluster identity 4711 [ 513.925917][T18652] tipc: Enabled bearer , priority 10 [ 513.948377][T18659] tipc: Enabling of bearer rejected, already enabled 18:37:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20008051) 18:37:42 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 18:37:42 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x20000000000000, 0x0, 0x0) 18:37:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7ffffff2}, 0x0) 18:37:42 executing program 4: socketpair(0x0, 0x80e, 0x0, &(0x7f0000000080)) [ 514.241403][T10399] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 514.491323][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 514.631523][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 514.641957][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 514.650906][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 514.662604][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 514.831329][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 514.840489][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 514.848939][T10399] usb 1-1: Product: syz [ 514.853579][T10399] usb 1-1: Manufacturer: syz [ 514.858284][T10399] usb 1-1: SerialNumber: syz [ 514.882063][T18661] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 514.902048][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 514.907998][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 514.917781][T10399] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 515.051143][T10399] tipc: Node number set to 983347208 [ 515.158692][T18704] udc-core: couldn't find an available UDC or it's busy [ 515.166387][T18704] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 515.213237][T10399] usb 1-1: USB disconnect, device number 11 18:37:43 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xd, 0x4) 18:37:43 executing program 4: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100), &(0x7f0000000640)=ANY=[@ANYBLOB='enc='], 0x0, 0x0) 18:37:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002a00)={0x14}, 0x40) 18:37:43 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x70000000000000, 0x0, 0x0) 18:37:43 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d5269", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:37:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000ac0)=0x5, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) 18:37:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 18:37:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) 18:37:44 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x100000000000000, 0x0, 0x0) [ 515.891425][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 515.907453][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:37:44 executing program 1: r0 = fork() capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000040)) [ 515.933862][T18738] tipc: Started in network mode [ 515.951594][T18738] tipc: Node identity e0000002, cluster identity 4711 18:37:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x1c}, 0x37fe0}}, 0x0) [ 515.992960][T18738] tipc: Enabling of bearer rejected, failed to enable media [ 516.038792][T18748] tipc: Enabling of bearer rejected, failed to enable media [ 516.064296][T18750] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 516.093288][T10398] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 516.361035][T10398] usb 1-1: Using ep0 maxpacket: 8 [ 516.511293][T10398] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 516.522837][T10398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 516.532383][T10398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 516.543734][T10398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 516.751099][T10398] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 516.760612][T10398] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 516.769071][T10398] usb 1-1: Product: syz [ 516.773821][T10398] usb 1-1: Manufacturer: syz [ 516.778426][T10398] usb 1-1: SerialNumber: syz [ 516.812445][T18728] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 516.831802][T10398] hub 1-1:1.0: bad descriptor, ignoring hub [ 516.837851][T10398] hub: probe of 1-1:1.0 failed with error -5 [ 516.846758][T10398] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 517.089206][T18778] udc-core: couldn't find an available UDC or it's busy [ 517.097188][T18778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 517.142570][T10398] usb 1-1: USB disconnect, device number 12 18:37:45 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x200000000000000, 0x0, 0x0) 18:37:45 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000002c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 18:37:45 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x1d, &(0x7f0000000080)={0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x0, 0x2, 0x202}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x1, 0x3}]}}) 18:37:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x1c}, 0x1c}}, 0x0) 18:37:45 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:37:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg2\x00'}) 18:37:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x5100}, 0x0) 18:37:46 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x300000000000000, 0x0, 0x0) 18:37:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) 18:37:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x4c}, 0x4c}}, 0x0) 18:37:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[{0x70, 0x0, 0x0, "706a47754703d6a798872199a590e9554e37bc541a8379c106556b1225dbd62fb5b2ebcfcba12c4426b1fdcfe298772880908e2d0e08910aac09af64ce43a3f7b43fa2d870bcf5ba5bd3cfaaabaf3132d8a5f6c87f1dae5b64"}, {0x108, 0x0, 0x0, "a245beab0772a4112f2e0d681e83c8babec42f8e6b8505b23728937cb5df99275a3640b3968180318141e7d4a2ecb7ae8ecd10d7d8c76e6db402067d248ed953e68b59f167330adf88d3f9ab6a17814f163e5c1767b9454abef2f16c334b253c0784e9d1f048a2337fc79388838603bd07c323eba5e6add0473867ee3b9fd8b0efc69a16bdf18bcbd65d97a4a7b90e9ec9bf92d74434256cbc5c08106fee0b41877a814c4b02a28dfece22a83b57c779851404d64bdaf7f15c4e77c4100034eeb8f0c4eb0c36745756e59b87c2fac85567e9c115ca2c1785c4176d7772ada91e911c832eed849b301be4643d8474839bd0"}, {0x1010, 0x0, 0x0, "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"}, {0xe80, 0x0, 0x0, "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"}], 0x2008}, 0x0) [ 518.001123][T10419] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 518.030852][T10399] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 518.290707][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 518.420854][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 518.432105][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 518.441024][T10419] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1023 [ 518.441344][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 518.455630][T10419] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 8 [ 518.463060][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 518.476120][T10419] usb 2-1: config 1 interface 0 has no altsetting 0 [ 518.640838][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 518.650144][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 518.650738][T10419] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 518.661640][T10399] usb 1-1: Product: syz [ 518.671759][T10419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.674364][T10399] usb 1-1: Manufacturer: syz [ 518.682133][T10419] usb 2-1: Product: syz [ 518.686939][T10399] usb 1-1: SerialNumber: syz [ 518.690177][T10419] usb 2-1: Manufacturer: syz [ 518.704186][T10419] usb 2-1: SerialNumber: syz [ 518.717081][T18803] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 518.731310][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 518.741185][T18799] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 518.748208][T18799] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 518.748467][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 518.778806][T10399] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 519.341371][T18803] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 519.590583][T18803] usb 1-1: Using ep0 maxpacket: 8 [ 519.732520][T18848] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 519.773615][T10419] usblp 2-1:1.0: usblp1: USB Bidirectional printer dev 9 if 0 alt 255 proto 2 vid 0x0525 pid 0xA4A8 [ 519.787408][T10419] usb 2-1: USB disconnect, device number 9 [ 519.809558][T10419] usblp1: removed [ 520.070881][T10553] usb 1-1: USB disconnect, device number 13 [ 520.160499][T10419] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 520.600520][T10419] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1023 [ 520.611013][T10419] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 8 [ 520.623613][T10419] usb 2-1: config 1 interface 0 has no altsetting 0 [ 520.810494][T10419] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 520.819891][T10419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.840460][T10419] usb 2-1: can't set config #1, error -71 [ 520.846929][T10419] usb 2-1: USB disconnect, device number 10 18:37:52 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x0, "132843e7d9adc85bc104474afcfc5dcaa1b2f2beecd22282cb7ece503824efb0f586317301e4f60dce6fb58755ed13dca986b013dfd33c2603e65f93ed2fef1f"}, 0x48, r0) keyctl$revoke(0x3, r1) 18:37:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x400000000000000, 0x0, 0x0) 18:37:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={0x0}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc) 18:37:52 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d5269", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:37:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6}]}) 18:37:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004180)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000000c0)) 18:37:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) [ 524.206579][ T36] audit: type=1326 audit(1630607872.436:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18885 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 18:37:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x500000000000000, 0x0, 0x0) 18:37:52 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) pipe(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 18:37:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc) 18:37:52 executing program 5: syz_emit_ethernet(0x82, &(0x7f0000001240)={@dev, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "9990d4", 0x48, 0x0, 0x0, @loopback, @dev, {[@hopopts={0x0, 0x7, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @mcast1}, @jumbo, @calipso={0x7, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}, 0x0) [ 524.394118][ T36] audit: type=1326 audit(1630607872.626:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18916 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 524.492199][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 524.739971][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 524.860052][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 524.870969][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 524.881183][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 524.893054][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 525.060093][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 525.069304][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 525.078904][ T7] usb 1-1: Product: syz [ 525.083940][ T7] usb 1-1: Manufacturer: syz [ 525.088563][ T7] usb 1-1: SerialNumber: syz [ 525.110735][T18904] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 525.130556][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 525.136501][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 525.152777][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 525.214920][ T36] audit: type=1326 audit(1630607873.446:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18916 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 525.890411][T18904] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 526.149676][T18904] usb 1-1: Using ep0 maxpacket: 8 [ 526.291254][T18952] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 526.630189][T10248] usb 1-1: USB disconnect, device number 14 18:37:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x1c5800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:37:59 executing program 5: syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast2}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "54f3acbd45cfb110a5e8633758197428bb279c8cc16f3f15ac83674ab24163b7", "b5e44f02ab4dc009cc168ac0d7fe7d1e", {"5e1614781485adb1826ac507d3333552", "1b1d5110f19e2fd4586877eeb59d2bd7"}}}}}}}, 0x0) 18:37:59 executing program 4: syz_emit_ethernet(0x163, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6013d0df012d2f00fe8000000000000000000000000000aafe8000000000000000000000000000aa"], 0x0) 18:37:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x600000000000000, 0x0, 0x0) 18:37:59 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:37:59 executing program 1: syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a6bb500183a00fe800000e22e000000000000000000bba1"], 0x0) 18:37:59 executing program 4: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@generic={0x0, 0x2}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) 18:37:59 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @broadcast, @link_local, @multicast2}}}}, 0x0) 18:37:59 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x7}, {0x6}]}) 18:37:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x700000000000000, 0x0, 0x0) [ 530.945763][ T36] audit: type=1326 audit(1630607879.177:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18988 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 18:37:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d80)={0x18, 0x3, &(0x7f0000001c80)=@framed, &(0x7f0000001cc0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001d00)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002d00), 0x8, 0x10, 0x0}, 0x78) 18:37:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000115c0)={0x7, 0x0, 0x0, 0x2}, 0x40) [ 531.092459][T10248] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 531.349029][T10248] usb 1-1: Using ep0 maxpacket: 8 [ 531.469236][T10248] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 531.485936][T10248] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 531.496096][T10248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 531.551598][T10248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 531.739023][T10248] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 531.748635][T10248] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 531.759804][T10248] usb 1-1: Product: syz [ 531.763966][T10248] usb 1-1: Manufacturer: syz [ 531.768546][T10248] usb 1-1: SerialNumber: syz [ 531.789919][T18980] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 531.809945][T10248] hub 1-1:1.0: bad descriptor, ignoring hub [ 531.815882][T10248] hub: probe of 1-1:1.0 failed with error -5 [ 531.828734][T10248] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 532.599506][T18980] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 532.838845][T18980] usb 1-1: Using ep0 maxpacket: 8 [ 532.990521][T19029] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 533.328978][T10248] usb 1-1: USB disconnect, device number 15 18:38:05 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003780)={&(0x7f0000003600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x9c, [{0x4, 0x5}, {0x6}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000003680)=""/236, 0x43, 0xec, 0x1}, 0x20) 18:38:05 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x19}, 0x14) 18:38:05 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x800000000000000, 0x0, 0x0) 18:38:05 executing program 4: socketpair(0x2c, 0x0, 0x0, &(0x7f00000000c0)) 18:38:05 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x1c, 0x1, &(0x7f0000000380)=@raw=[@ldst], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:38:05 executing program 1: bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0}, 0x48) 18:38:05 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 18:38:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 18:38:05 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x900000000000000, 0x0, 0x0) 18:38:05 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=0x1, 0xffffffffffffffff, 0x4}, 0x10) [ 537.848295][T10399] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 538.138239][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 538.268344][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 538.279683][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 538.290073][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 538.302764][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 538.488193][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 538.497477][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 538.507193][T10399] usb 1-1: Product: syz [ 538.511536][T10399] usb 1-1: Manufacturer: syz [ 538.516145][T10399] usb 1-1: SerialNumber: syz [ 538.539116][T19059] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 538.559307][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 538.565880][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 538.581105][T10399] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 539.208292][T19059] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 539.447985][T19059] usb 1-1: Using ep0 maxpacket: 8 [ 539.591844][T19101] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.928092][T10419] usb 1-1: USB disconnect, device number 16 18:38:12 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:12 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:38:12 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x715b579f) 18:38:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xa00000000000000, 0x0, 0x0) 18:38:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000002640)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f00000024c0)=[@dstopts={{0x18}}], 0x18}, 0x0) 18:38:12 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001200)=[{0x0}, {&(0x7f0000000040)="ad", 0x1}], 0x2}, 0x0) 18:38:12 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) bind(r0, 0x0, 0x0) 18:38:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:38:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xb00000000000000, 0x0, 0x0) 18:38:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001800)={'ip6gre0\x00', &(0x7f0000001780)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @empty}}}) 18:38:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xc00000000000000, 0x0, 0x0) [ 544.397569][T10553] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 544.677323][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 544.807377][T10553] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 544.817991][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 544.827171][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 544.838502][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 545.027481][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 545.037125][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 545.046671][T10553] usb 1-1: Product: syz [ 545.051429][T10553] usb 1-1: Manufacturer: syz [ 545.056373][T10553] usb 1-1: SerialNumber: syz [ 545.078305][T19133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.098323][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 545.104273][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 545.115657][T10553] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 545.747459][T19133] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 545.987169][T19133] usb 1-1: Using ep0 maxpacket: 8 [ 546.148149][T19178] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 546.487265][T10553] usb 1-1: USB disconnect, device number 17 18:38:18 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:18 executing program 5: madvise(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x3) 18:38:18 executing program 4: keyctl$join(0x12, 0x0) 18:38:18 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xd00000000000000, 0x0, 0x0) 18:38:18 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) splice(r0, 0x0, r1, 0x0, 0x4ff99, 0x0) 18:38:18 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r0) 18:38:19 executing program 1: r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7006, 0x0) 18:38:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x1600bd78, 0x0, &(0x7f0000000040)) 18:38:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000040)) 18:38:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xe00000000000000, 0x0, 0x0) 18:38:19 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x8, 0x0) 18:38:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xca, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 551.038781][T10399] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 551.326576][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 551.456895][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 551.474736][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 551.485065][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 551.503230][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 551.696735][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 551.706068][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 551.714690][T10399] usb 1-1: Product: syz [ 551.719207][T10399] usb 1-1: Manufacturer: syz [ 551.723833][T10399] usb 1-1: SerialNumber: syz [ 551.757115][T19209] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 551.777210][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 551.783155][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 551.796004][T10399] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 552.436661][T19209] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 552.676373][T19209] usb 1-1: Using ep0 maxpacket: 8 [ 552.817562][T19254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 553.176909][T10399] usb 1-1: USB disconnect, device number 18 18:38:25 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000240)={'\x00', @ifru_data=0x0}) 18:38:25 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f00000001c0)={{0x2, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff}}) 18:38:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xf00000000000000, 0x0, 0x0) 18:38:25 executing program 1: prctl$PR_GET_TSC(0x19, &(0x7f0000001500)) 18:38:25 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d5269", 0x483, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) splice(r0, 0x0, r1, 0x0, 0x4ff99, 0x0) 18:38:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x31, 0x0, &(0x7f0000000500)) 18:38:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$unix(r0, &(0x7f0000001d00)={&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001c80)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, 0xffffffffffffffff]}}], 0x20}, 0x0) 18:38:25 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '\x00'}) 18:38:25 executing program 1: socket$packet(0x11, 0x3, 0x300) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000000)=@abs, 0x6e, 0x0}, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 18:38:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1000000000000000, 0x0, 0x0) 18:38:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5437, 0x0) [ 557.715843][T10399] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 557.960670][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 558.086222][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 558.097771][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 558.107108][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 558.119192][T10399] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 558.285855][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 558.294927][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 558.303956][T10399] usb 1-1: Product: syz [ 558.308461][T10399] usb 1-1: Manufacturer: syz [ 558.313948][T10399] usb 1-1: SerialNumber: syz [ 558.336658][T19285] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 558.357012][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 558.363693][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 558.375350][T10399] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 558.966096][T19285] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 559.205622][T19285] usb 1-1: Using ep0 maxpacket: 8 [ 559.347156][T19326] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 559.686392][T10419] usb 1-1: USB disconnect, device number 19 [ 562.686005][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.692345][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 18:38:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:38:32 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1100000000000000, 0x0, 0x0) 18:38:32 executing program 5: unshare(0x20280) 18:38:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) 18:38:32 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) splice(r0, 0x0, r1, 0x0, 0x4ff99, 0x0) 18:38:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x541b, 0x0) 18:38:32 executing program 5: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') creat(&(0x7f0000000200)='./file1\x00', 0x0) 18:38:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) 18:38:32 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1200000000000000, 0x0, 0x0) 18:38:32 executing program 1: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001040)={0x0, @sco={0x1f, @fixed}, @nfc, @tipc=@id}) r0 = fork() process_vm_readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001300)=""/253, 0xfd}, {&(0x7f00000010c0)=""/148, 0x94}], 0x2, &(0x7f00000016c0)=[{&(0x7f0000001500)=""/173, 0xad}, {&(0x7f0000001600)=""/113, 0x71}, {0x0}], 0x3, 0x0) 18:38:32 executing program 5: syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@multicast, @random="7b43ba752fc7", @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x1, 0x0, @dev, 'i', @link_local, "9d622f7f3af5c2"}}}}, 0x0) [ 564.325140][T10399] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 564.519164][T10399] usb 1-1: device descriptor read/64, error 18 [ 564.794991][T10399] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 564.994922][T10399] usb 1-1: device descriptor read/64, error 18 [ 565.115400][T10399] usb usb1-port1: attempt power cycle [ 565.525006][T10399] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 565.715442][T10399] usb 1-1: device descriptor read/8, error -61 [ 565.994843][T10399] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 566.205147][T10399] usb 1-1: device descriptor read/8, error -61 [ 566.335081][T10399] usb usb1-port1: unable to enumerate USB device 18:38:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x4, &(0x7f0000000580)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0xf6, &(0x7f0000001a80)=""/246, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:38:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1300000000000000, 0x0, 0x0) 18:38:35 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x16, 0x0, 0x0) 18:38:35 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x1600bd5f, 0x0, &(0x7f00000007c0)) 18:38:35 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:35 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f00000007c0)) 18:38:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000040)={'ip6gretap0\x00', @ifru_flags}) 18:38:35 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1400000000000000, 0x0, 0x0) 18:38:35 executing program 5: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:35 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x8, 0x0) [ 567.103843][T19432] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19432] [ 567.234712][T10399] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 567.404766][T10553] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 567.484677][T10399] usb 5-1: Using ep0 maxpacket: 8 [ 567.605017][T10399] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 567.615526][T10399] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 567.625528][T10553] usb 1-1: device descriptor read/64, error 18 [ 567.631854][T10399] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 567.644063][T10399] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 567.814708][T10399] usb 5-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 567.823846][T10399] usb 5-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 567.833237][T10399] usb 5-1: Product: syz [ 567.838072][T10399] usb 5-1: Manufacturer: syz [ 567.842727][T10399] usb 5-1: SerialNumber: syz [ 567.864908][T19419] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 567.885498][T10399] hub 5-1:1.0: bad descriptor, ignoring hub [ 567.891988][T10399] hub: probe of 5-1:1.0 failed with error -5 [ 567.898392][T10553] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 567.917826][T10399] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 568.094634][T10553] usb 1-1: device descriptor read/64, error 18 [ 568.215025][T10553] usb usb1-port1: attempt power cycle [ 568.545453][T19419] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 568.624626][T10553] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 568.794566][T19419] usb 5-1: Using ep0 maxpacket: 8 [ 568.808363][T10553] usb 1-1: device descriptor read/8, error -61 [ 568.934996][T19458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 569.084646][T10553] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 569.264569][T10553] usb 1-1: device descriptor read/8, error -61 [ 569.284645][ T35] usb 5-1: USB disconnect, device number 17 [ 569.384580][T10553] usb usb1-port1: unable to enumerate USB device 18:38:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:38 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1500000000000000, 0x0, 0x0) 18:38:38 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:38 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)) 18:38:38 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1600000000000000, 0x0, 0x0) [ 569.949929][T19477] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19477] 18:38:38 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1700000000000000, 0x0, 0x0) 18:38:38 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x8, 0x0) 18:38:38 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1800000000000000, 0x0, 0x0) [ 570.171579][T19498] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19498] [ 570.484338][T10419] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 570.674386][T10419] usb 1-1: device descriptor read/64, error 18 [ 570.944341][T10419] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 571.144242][T10419] usb 1-1: device descriptor read/64, error 18 [ 571.264336][T10419] usb usb1-port1: attempt power cycle [ 571.674224][T10419] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 571.844245][T10419] usb 1-1: device descriptor read/8, error -61 [ 572.114148][T10419] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 572.284391][T10419] usb 1-1: device descriptor read/8, error -61 [ 572.404197][T10419] usb usb1-port1: unable to enumerate USB device 18:38:41 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:41 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d5269", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1900000000000000, 0x0, 0x0) 18:38:41 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)) [ 573.485676][T19479] cdc_wdm 5-1:1.0: Error autopm - -16 18:38:41 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:41 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)) 18:38:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1a00000000000000, 0x0, 0x0) [ 573.586522][T19528] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19528] [ 573.613706][T19537] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19537] 18:38:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1b00000000000000, 0x0, 0x0) 18:38:42 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1c00000000000000, 0x0, 0x0) 18:38:42 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1d00000000000000, 0x0, 0x0) [ 573.873921][T10419] usb 5-1: new high-speed USB device number 18 using dummy_hcd 18:38:42 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1e00000000000000, 0x0, 0x0) 18:38:42 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x1f00000000000000, 0x0, 0x0) [ 574.113941][T10248] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 574.153934][T10419] usb 5-1: Using ep0 maxpacket: 8 [ 574.313967][T10248] usb 1-1: device descriptor read/64, error 18 [ 574.320245][T10419] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 574.330748][T10419] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 574.339698][T10419] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 574.351355][T10419] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 574.524000][T10419] usb 5-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 574.533375][T10419] usb 5-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 574.542160][T10419] usb 5-1: Product: syz [ 574.546536][T10419] usb 5-1: Manufacturer: syz [ 574.551287][T10419] usb 5-1: SerialNumber: syz [ 574.574302][T19534] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 574.595740][T10419] hub 5-1:1.0: bad descriptor, ignoring hub [ 574.601846][T10419] hub: probe of 5-1:1.0 failed with error -5 [ 574.611368][T10248] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 574.623315][T10419] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 574.823899][T10248] usb 1-1: device descriptor read/64, error 18 [ 574.944458][T10248] usb usb1-port1: attempt power cycle [ 575.254092][T19534] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 575.353801][T10248] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 575.523842][T10248] usb 1-1: device descriptor read/8, error -61 [ 575.523939][T19534] usb 5-1: Using ep0 maxpacket: 8 [ 575.684077][T19594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 575.793817][T10248] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 575.964026][T10248] usb 1-1: device descriptor read/8, error -61 [ 576.034565][T10553] usb 5-1: USB disconnect, device number 18 [ 576.083780][T10248] usb usb1-port1: unable to enumerate USB device 18:38:48 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2000000000000000, 0x0, 0x0) 18:38:48 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:38:48 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:38:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:48 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2100000000000000, 0x0, 0x0) [ 580.210495][T19623] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19623] [ 580.238300][T19627] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19627] 18:38:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2200000000000000, 0x0, 0x0) 18:38:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2300000000000000, 0x0, 0x0) 18:38:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2400000000000000, 0x0, 0x0) [ 580.523367][T10248] usb 5-1: new high-speed USB device number 19 using dummy_hcd 18:38:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2500000000000000, 0x0, 0x0) 18:38:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2600000000000000, 0x0, 0x0) [ 580.753267][ T7] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 580.813382][T10248] usb 5-1: Using ep0 maxpacket: 8 [ 580.963243][T10248] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 580.974765][ T7] usb 1-1: device descriptor read/64, error 18 [ 580.981032][T10248] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 580.990865][T10248] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 581.004790][T10248] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 581.203427][T10248] usb 5-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 581.212642][T10248] usb 5-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 581.222193][T10248] usb 5-1: Product: syz [ 581.227142][T10248] usb 5-1: Manufacturer: syz [ 581.232281][T10248] usb 5-1: SerialNumber: syz [ 581.243421][ T7] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 581.254747][T19634] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 581.274459][T10248] hub 5-1:1.0: bad descriptor, ignoring hub [ 581.280446][T10248] hub: probe of 5-1:1.0 failed with error -5 [ 581.299005][T10248] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 581.433167][ T7] usb 1-1: device descriptor read/64, error 18 [ 581.555058][ T7] usb usb1-port1: attempt power cycle [ 581.953365][T19634] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 581.963046][ T7] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 582.143159][ T7] usb 1-1: device descriptor read/8, error -61 [ 582.203133][T19634] usb 5-1: Using ep0 maxpacket: 8 [ 582.343477][T19691] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 582.413052][ T7] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 582.583235][ T7] usb 1-1: device descriptor read/8, error -61 [ 582.683506][T10398] usb 5-1: USB disconnect, device number 19 [ 582.703194][ T7] usb usb1-port1: unable to enumerate USB device 18:38:55 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:38:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x2700000000000000, 0x0, 0x0) 18:38:55 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:38:55 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d5269", 0x483, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:55 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:38:55 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:55 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) 18:38:55 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 586.879161][T19726] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19726] [ 586.889717][T19729] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19729] [ 586.904116][T19727] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[19727] 18:38:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x3d34000000000000, 0x0, 0x0) 18:38:55 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000000)) [ 586.985499][T19738] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19738] 18:38:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x3f00000000000000, 0x0, 0x0) 18:38:55 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 587.097647][T19749] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19749] [ 587.175994][T19758] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19758] [ 587.364741][ T35] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 587.552505][ T35] usb 1-1: device descriptor read/64, error 18 [ 587.842425][ T35] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 588.032410][ T35] usb 1-1: device descriptor read/64, error 18 [ 588.152515][ T35] usb usb1-port1: attempt power cycle [ 588.572361][ T35] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 588.762655][ T35] usb 1-1: device descriptor read/8, error -61 [ 589.032330][ T35] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 589.212501][ T35] usb 1-1: device descriptor read/8, error -61 [ 589.332525][ T35] usb usb1-port1: unable to enumerate USB device 18:38:58 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d5269", 0x483, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x4801000000000000, 0x0, 0x0) 18:38:58 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:38:58 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:38:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x6833000000000000, 0x0, 0x0) 18:38:58 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:38:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xe4ffffff00000000, 0x0, 0x0) [ 590.068251][T19793] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19793] 18:38:58 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:38:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xff0f010000000000, 0x0, 0x0) [ 590.229749][T19804] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19804] 18:38:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0xffffffff00000000, 0x0, 0x0) 18:38:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2) [ 590.352856][ T7] usb 1-1: new high-speed USB device number 44 using dummy_hcd 18:38:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3) [ 590.612178][ T7] usb 1-1: Using ep0 maxpacket: 8 18:38:59 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:38:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x4) 18:38:59 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 590.772467][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.785000][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 590.815458][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.835361][T19835] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[19835] [ 591.092244][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 591.101366][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 591.110549][ T7] usb 1-1: Product: syz [ 591.115532][ T7] usb 1-1: Manufacturer: syz [ 591.120139][ T7] usb 1-1: SerialNumber: syz [ 591.173236][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 591.179173][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 591.186870][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 591.502113][T10398] usb 1-1: USB disconnect, device number 44 [ 591.842008][T10398] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 592.091989][T10398] usb 1-1: Using ep0 maxpacket: 8 [ 592.235290][T10398] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.245922][T10398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 592.255738][T10398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.422210][T10398] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 592.431353][T10398] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 592.440778][T10398] usb 1-1: Product: syz [ 592.445141][T10398] usb 1-1: Manufacturer: syz [ 592.449755][T10398] usb 1-1: SerialNumber: syz [ 592.492680][T10398] hub 1-1:1.0: bad descriptor, ignoring hub [ 592.498711][T10398] hub: probe of 1-1:1.0 failed with error -5 [ 592.515691][T10398] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 592.832395][T10398] usb 1-1: USB disconnect, device number 45 18:39:01 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:01 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x5) 18:39:01 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:01 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:01 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x0) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:01 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x6) 18:39:01 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:01 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) [ 593.297494][T19879] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19879] [ 593.330675][T19883] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19883] 18:39:01 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x7) [ 593.420152][T19898] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19898] [ 593.448066][T19901] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19901] [ 593.581834][T10420] usb 1-1: new high-speed USB device number 46 using dummy_hcd 18:39:02 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:02 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x8) 18:39:02 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) [ 593.836400][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 593.892983][T19924] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[19924] [ 593.921742][T19927] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[19927] [ 593.953730][T10420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.969495][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 593.993799][T10420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.172196][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 594.181244][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 594.190580][T10420] usb 1-1: Product: syz [ 594.195243][T10420] usb 1-1: Manufacturer: syz [ 594.199841][T10420] usb 1-1: SerialNumber: syz [ 594.242503][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 594.248501][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 594.263278][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 594.562103][T10420] usb 1-1: USB disconnect, device number 46 [ 594.921691][T10553] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 595.161692][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 595.284634][T10553] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.294876][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 595.305178][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.471904][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 595.481084][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 595.489820][T10553] usb 1-1: Product: syz [ 595.494320][T10553] usb 1-1: Manufacturer: syz [ 595.498950][T10553] usb 1-1: SerialNumber: syz [ 595.553394][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 595.559407][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 595.581991][T10553] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 595.871687][T10420] usb 1-1: USB disconnect, device number 47 18:39:04 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x9) 18:39:04 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:04 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:04 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:04 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:04 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:04 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:04 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:04 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) [ 596.318514][T19966] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19966] [ 596.354361][T19970] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[19970] 18:39:04 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xa) 18:39:04 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:04 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 596.446659][T19983] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[19983] [ 596.469255][T19987] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[19987] 18:39:04 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:04 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:04 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 596.661625][T10553] usb 1-1: new high-speed USB device number 48 using dummy_hcd 18:39:05 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xb) [ 596.911578][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 597.054057][T10553] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.069111][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 597.089504][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:39:05 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ff99, 0x0) [ 597.291546][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 597.301160][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 597.309925][T10553] usb 1-1: Product: syz [ 597.314793][T10553] usb 1-1: Manufacturer: syz [ 597.319736][T10553] usb 1-1: SerialNumber: syz [ 597.362239][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 597.368296][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 597.378332][T10553] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 597.691948][T10553] usb 1-1: USB disconnect, device number 48 [ 598.051403][T10553] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 598.311377][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 598.441415][T10553] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.452709][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.462016][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.641566][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 598.650615][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 598.660805][T10553] usb 1-1: Product: syz [ 598.665229][T10553] usb 1-1: Manufacturer: syz [ 598.675845][T10553] usb 1-1: SerialNumber: syz [ 598.742366][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 598.748310][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 598.758174][T10553] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 599.062049][T10553] usb 1-1: USB disconnect, device number 49 18:39:07 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xc) 18:39:07 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 18:39:07 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:07 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:07 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ff99, 0x0) 18:39:07 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:07 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 599.507461][T20064] __report_access: 6 callbacks suppressed [ 599.507486][T20064] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20064] 18:39:07 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 18:39:07 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xd) [ 599.759433][T20082] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20082] 18:39:08 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) gettid() [ 599.804048][T10420] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 599.840721][T20079] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20079] [ 599.858523][T20071] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20071] [ 599.959416][T20095] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20095] 18:39:08 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xe) 18:39:08 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) gettid() [ 600.001239][T10420] usb 1-1: device descriptor read/64, error 18 [ 600.205669][T20103] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20103] 18:39:08 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) gettid() 18:39:08 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) gettid() 18:39:08 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xf) [ 600.271260][T10420] usb 1-1: new high-speed USB device number 51 using dummy_hcd 18:39:08 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 18:39:08 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ff99, 0x0) [ 600.356994][T20109] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20109] [ 600.436168][T20114] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20114] [ 600.462711][T20117] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20117] [ 600.481230][T10420] usb 1-1: device descriptor read/64, error 18 [ 600.603774][T10420] usb usb1-port1: attempt power cycle [ 601.011063][T10420] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 601.181691][T10420] usb 1-1: device descriptor read/8, error -61 [ 601.451075][T10420] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 601.621484][T10420] usb 1-1: device descriptor read/8, error -61 [ 601.751544][T10420] usb usb1-port1: unable to enumerate USB device 18:39:10 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:10 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 18:39:10 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x10) 18:39:10 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 18:39:10 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:10 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) r0 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ff99, 0x0) 18:39:10 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:10 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 18:39:10 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) gettid() [ 602.594574][T20141] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20141] 18:39:10 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) r0 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ff99, 0x0) 18:39:10 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:11 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 602.940868][T10420] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 603.149913][T10420] usb 1-1: device descriptor read/64, error 18 [ 603.430805][T10420] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 603.620825][T10420] usb 1-1: device descriptor read/64, error 18 [ 603.740879][T10420] usb usb1-port1: attempt power cycle [ 604.160860][T10420] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 604.330765][T10420] usb 1-1: device descriptor read/8, error -61 [ 604.600871][T10420] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 604.770884][T10420] usb 1-1: device descriptor read/8, error -61 [ 604.890798][T10420] usb usb1-port1: unable to enumerate USB device 18:39:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:13 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x7, r1, 0x0, 0x0) 18:39:13 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x11) 18:39:13 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:13 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x7, r1, 0x0, 0x0) 18:39:13 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000640)) r0 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ff99, 0x0) 18:39:13 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:13 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:14 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:14 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x9, 0x4}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:14 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:14 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 605.867486][T20213] __report_access: 7 callbacks suppressed [ 605.867520][T20213] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20213] [ 606.060592][T10248] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 606.260506][T10248] usb 1-1: device descriptor read/64, error 18 [ 606.530756][T10248] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 606.740470][T10248] usb 1-1: device descriptor read/64, error 18 [ 606.870972][T10248] usb usb1-port1: attempt power cycle [ 607.280529][T10248] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 607.450604][T10248] usb 1-1: device descriptor read/8, error -61 [ 607.720458][T10248] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 607.890695][T10248] usb 1-1: device descriptor read/8, error -61 [ 608.010760][T10248] usb usb1-port1: unable to enumerate USB device 18:39:16 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:16 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x12) 18:39:16 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:16 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:16 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:16 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:17 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:17 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x13) 18:39:17 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:17 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:17 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:17 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 609.049491][T20253] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20253] [ 609.150244][T10553] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 609.305956][T20263] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20263] [ 609.370234][T10553] usb 1-1: device descriptor read/64, error 18 [ 609.652542][T10553] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 609.850280][T10553] usb 1-1: device descriptor read/64, error 18 [ 609.971707][T10553] usb usb1-port1: attempt power cycle [ 610.380201][T10553] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 610.550185][T10553] usb 1-1: device descriptor read/8, error -61 [ 610.820127][T10553] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 610.990886][T10553] usb 1-1: device descriptor read/8, error -61 [ 611.110162][T10553] usb usb1-port1: unable to enumerate USB device 18:39:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x14) 18:39:19 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:19 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:19 executing program 2: pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ff99, 0x0) 18:39:19 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:20 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:20 executing program 2: pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d5269", 0x483, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ff99, 0x0) [ 611.905406][T20306] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20306] 18:39:20 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x15) 18:39:20 executing program 2: pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ff99, 0x0) 18:39:20 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 612.074991][T20297] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20297] 18:39:20 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 612.119936][T10553] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 612.140309][T20295] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20295] [ 612.265245][T20324] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20324] [ 612.321114][T10553] usb 1-1: device descriptor read/64, error 18 [ 612.508762][T20326] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20326] [ 612.593658][T10553] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 612.799929][T10553] usb 1-1: device descriptor read/64, error 18 [ 612.920033][T10553] usb usb1-port1: attempt power cycle [ 613.339833][T10553] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 613.529878][T10553] usb 1-1: device descriptor read/8, error -61 [ 613.799766][T10553] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 613.970553][T10553] usb 1-1: device descriptor read/8, error -61 [ 614.090136][T10553] usb usb1-port1: unable to enumerate USB device 18:39:23 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:23 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x0, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:23 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x16) 18:39:23 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:23 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:23 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 614.852767][T20346] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20346] 18:39:23 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x17) 18:39:23 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 615.111676][T20368] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20368] [ 615.150147][T20367] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20367] 18:39:23 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:23 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x18) [ 615.242804][T10553] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 615.245797][T20348] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20348] 18:39:23 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:23 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 615.321647][T20377] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20377] [ 615.453114][T10553] usb 1-1: device descriptor read/64, error 18 [ 615.719669][T10553] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 615.909747][T10553] usb 1-1: device descriptor read/64, error 18 [ 616.029619][T10553] usb usb1-port1: attempt power cycle [ 616.459512][T10553] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 616.640237][T10553] usb 1-1: device descriptor read/8, error -61 [ 616.919519][T10553] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 617.129701][T10553] usb 1-1: device descriptor read/8, error -61 [ 617.249956][T10553] usb usb1-port1: unable to enumerate USB device 18:39:26 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a09040000010209", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:26 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x19) 18:39:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:26 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 18:39:26 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x0, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:26 executing program 1: perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:26 executing program 4: perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:26 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 617.922210][T20406] __report_access: 2 callbacks suppressed [ 617.922229][T20406] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20406] [ 617.941027][T20407] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20407] 18:39:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:26 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1a) 18:39:26 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 618.034457][T20422] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20422] [ 618.052082][T20421] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20421] [ 618.109908][T20427] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20427] 18:39:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 618.185771][T20435] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20435] [ 618.251605][T10553] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 618.267285][T20438] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20438] [ 618.509374][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 618.659375][T10553] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 618.670490][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 618.679941][T10553] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.859545][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 618.868902][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 618.878387][T10553] usb 1-1: Product: syz [ 618.882906][T10553] usb 1-1: Manufacturer: syz [ 618.887508][T10553] usb 1-1: SerialNumber: syz [ 619.159649][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 619.165632][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 619.181438][T10553] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 619.221041][T10553] usb 1-1: USB disconnect, device number 74 [ 619.739221][T10553] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 619.989269][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 620.109485][T10553] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 620.120200][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 620.129517][T10553] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.319533][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 620.330296][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 620.338989][T10553] usb 1-1: Product: syz [ 620.344460][T10553] usb 1-1: Manufacturer: syz [ 620.349468][T10553] usb 1-1: SerialNumber: syz [ 620.649364][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 620.655584][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 620.662649][T10553] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 620.702687][T10553] usb 1-1: USB disconnect, device number 75 18:39:29 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a09040000010209", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:29 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1b) 18:39:29 executing program 5: perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:29 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:29 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:29 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x0, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 621.173199][T20482] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20482] [ 621.208736][T20485] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20485] 18:39:29 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 621.211301][T20483] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20483] 18:39:29 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:29 executing program 5: perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:29 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:39:29 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1c) 18:39:29 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 621.531640][T10420] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 621.782459][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 621.899109][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 621.909530][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 621.918666][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.089058][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 622.099084][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 622.107913][T10420] usb 1-1: Product: syz [ 622.113704][T10420] usb 1-1: Manufacturer: syz [ 622.118498][T10420] usb 1-1: SerialNumber: syz [ 622.399326][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 622.409323][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 622.415776][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 622.459572][T10420] usb 1-1: USB disconnect, device number 76 [ 622.918899][T10420] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 623.158981][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 623.278937][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 623.292015][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.301358][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.469081][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 623.478147][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 623.488944][T10420] usb 1-1: Product: syz [ 623.493343][T10420] usb 1-1: Manufacturer: syz [ 623.498024][T10420] usb 1-1: SerialNumber: syz [ 623.779061][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 623.785216][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 623.792063][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 623.829799][T10420] usb 1-1: USB disconnect, device number 77 [ 624.119830][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.126159][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 18:39:32 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a09040000010209", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:32 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x7, r2, 0x0, 0x0) 18:39:32 executing program 5: perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:32 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1d) 18:39:32 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:39:32 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:32 executing program 5: perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 624.313144][T20563] __report_access: 5 callbacks suppressed [ 624.313164][T20563] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20563] [ 624.329126][T20568] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20568] 18:39:32 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:39:32 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 624.371239][T20569] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20569] 18:39:32 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) 18:39:32 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1e) [ 624.446811][T20582] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20582] [ 624.449375][T20584] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20584] 18:39:32 executing program 5: perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 624.493046][T20587] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20587] [ 624.604299][T20601] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20601] [ 624.616054][T10420] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 624.868693][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 624.988743][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 625.000309][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 625.009462][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.179025][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 625.188319][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 625.197504][T10420] usb 1-1: Product: syz [ 625.202274][T10420] usb 1-1: Manufacturer: syz [ 625.206871][T10420] usb 1-1: SerialNumber: syz [ 625.489011][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 625.494965][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 625.506829][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 625.540345][T10420] usb 1-1: USB disconnect, device number 78 [ 626.058574][T10420] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 626.298560][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 626.428760][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 626.441348][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 626.450762][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.618748][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 626.627836][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 626.637938][T10420] usb 1-1: Product: syz [ 626.642397][T10420] usb 1-1: Manufacturer: syz [ 626.647015][T10420] usb 1-1: SerialNumber: syz [ 626.928846][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 626.934873][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 626.946785][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 626.980488][T10420] usb 1-1: USB disconnect, device number 79 18:39:35 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:35 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x21) 18:39:35 executing program 5: perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:35 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:39:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:35 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:35 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 627.465249][T20647] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20647] [ 627.479857][T20652] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20652] [ 627.497802][T20651] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20651] 18:39:35 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x22) 18:39:35 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:35 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 627.739055][T10420] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 627.978455][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 628.098419][T10420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.108724][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 628.117659][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.288563][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 628.297678][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 628.307579][T10420] usb 1-1: Product: syz [ 628.312629][T10420] usb 1-1: Manufacturer: syz [ 628.317344][T10420] usb 1-1: SerialNumber: syz [ 628.359259][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 628.365305][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 628.377412][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 628.690531][T10399] usb 1-1: USB disconnect, device number 80 [ 629.038283][T10399] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 629.288294][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 629.438286][T10399] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.448515][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.458042][T10399] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.678596][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 629.687778][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 629.697501][T10399] usb 1-1: Product: syz [ 629.702376][T10399] usb 1-1: Manufacturer: syz [ 629.709269][T10399] usb 1-1: SerialNumber: syz [ 629.758756][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 629.764825][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 629.780620][T10399] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 630.088541][T10399] usb 1-1: USB disconnect, device number 81 18:39:38 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:38 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 18:39:38 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:38 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x23) 18:39:38 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x483, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:38 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:38 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 630.519578][T20723] __report_access: 5 callbacks suppressed [ 630.519675][T20723] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20723] [ 630.537434][T20731] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20731] [ 630.557117][T20724] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20724] 18:39:38 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 18:39:38 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:38 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 630.616072][T20741] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20741] 18:39:38 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x24) 18:39:38 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 630.696231][T20748] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20748] [ 630.730599][T20747] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20747] 18:39:39 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:39 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) [ 630.765661][T20753] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20753] [ 630.794426][T20758] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20758] 18:39:39 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x25) 18:39:39 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 630.856206][T20764] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20764] [ 630.869627][T10399] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 630.911131][T20767] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20767] [ 631.108158][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 631.232598][T10399] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.249780][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.260841][T10399] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 18:39:39 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 631.438307][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 631.447883][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 631.456632][T10399] usb 1-1: Product: syz [ 631.461253][T10399] usb 1-1: Manufacturer: syz [ 631.465937][T10399] usb 1-1: SerialNumber: syz [ 631.508810][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 631.514755][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 631.524835][T10399] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 631.838332][T10399] usb 1-1: USB disconnect, device number 82 [ 632.178007][T10398] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 632.430856][T10398] usb 1-1: Using ep0 maxpacket: 8 [ 632.548572][T10398] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.559244][T10398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 632.570106][T10398] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.738196][T10398] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 632.747241][T10398] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 632.756410][T10398] usb 1-1: Product: syz [ 632.760896][T10398] usb 1-1: Manufacturer: syz [ 632.765508][T10398] usb 1-1: SerialNumber: syz [ 632.808870][T10398] hub 1-1:1.0: bad descriptor, ignoring hub [ 632.815338][T10398] hub: probe of 1-1:1.0 failed with error -5 [ 632.826993][T10398] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 633.128382][T10398] usb 1-1: USB disconnect, device number 83 18:39:41 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x26) 18:39:41 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:41 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:41 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x27) 18:39:41 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:41 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) gettid() 18:39:42 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) gettid() 18:39:42 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) gettid() 18:39:42 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) [ 633.888539][T10398] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 634.147809][T10398] usb 1-1: Using ep0 maxpacket: 8 [ 634.268084][T10398] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.283865][T10398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 634.294706][T10398] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.478001][T10398] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 634.487318][T10398] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 634.496666][T10398] usb 1-1: Product: syz [ 634.501804][T10398] usb 1-1: Manufacturer: syz [ 634.506612][T10398] usb 1-1: SerialNumber: syz [ 634.548710][T10398] hub 1-1:1.0: bad descriptor, ignoring hub [ 634.554658][T10398] hub: probe of 1-1:1.0 failed with error -5 [ 634.570456][T10398] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 634.868465][T10398] usb 1-1: USB disconnect, device number 84 [ 635.227690][ T35] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 635.467759][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 635.597930][ T35] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.608923][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 635.618863][ T35] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.787782][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 635.796961][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 635.805809][ T35] usb 1-1: Product: syz [ 635.810374][ T35] usb 1-1: Manufacturer: syz [ 635.814992][ T35] usb 1-1: SerialNumber: syz [ 635.868475][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 635.874690][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 635.887033][ T35] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 636.198180][T10399] usb 1-1: USB disconnect, device number 85 18:39:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:44 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) 18:39:44 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x70) 18:39:44 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) 18:39:44 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:44 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:44 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x148) [ 636.666078][T20905] __report_access: 8 callbacks suppressed [ 636.666133][T20905] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20905] [ 636.694978][T20908] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20908] 18:39:45 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) 18:39:45 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 636.846156][T20919] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20919] [ 636.883746][T20906] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20906] 18:39:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x300) [ 636.977557][T10420] usb 1-1: new high-speed USB device number 86 using dummy_hcd 18:39:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x500) 18:39:45 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 637.227548][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 637.290264][T20931] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20931] [ 637.347817][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 637.372257][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 637.410196][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.589656][T20943] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[20943] [ 637.638210][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 637.664007][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 637.731113][T10420] usb 1-1: Product: syz [ 637.744768][T10420] usb 1-1: Manufacturer: syz [ 637.760709][T10420] usb 1-1: SerialNumber: syz [ 637.808207][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 637.814338][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 637.853402][T10420] cdc_wdm 1-1:1.0: skipping garbage [ 637.874089][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 638.127791][ T7] usb 1-1: USB disconnect, device number 86 [ 638.477417][T10420] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 638.717345][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 638.837653][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 638.848115][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 638.857024][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 639.030281][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 639.039438][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 639.048766][T10420] usb 1-1: Product: syz [ 639.053382][T10420] usb 1-1: Manufacturer: syz [ 639.058666][T10420] usb 1-1: SerialNumber: syz [ 639.098229][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 639.104690][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 639.120134][T10420] cdc_wdm 1-1:1.0: skipping garbage [ 639.125465][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 639.418583][T10420] usb 1-1: USB disconnect, device number 87 18:39:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x600) 18:39:48 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:48 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:48 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:48 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) 18:39:48 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 639.887942][T20987] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[20987] 18:39:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x700) 18:39:48 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:48 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x900) [ 640.137204][T10420] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 640.164162][T20981] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[20981] 18:39:48 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 640.417309][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 640.537584][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 640.548460][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 640.558802][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.727313][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 640.736652][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 640.745967][T10420] usb 1-1: Product: syz [ 640.750750][T10420] usb 1-1: Manufacturer: syz [ 640.755472][T10420] usb 1-1: SerialNumber: syz [ 640.797854][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 640.803909][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 640.818827][T10420] cdc_wdm 1-1:1.0: skipping garbage [ 640.824397][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 641.127248][T10399] usb 1-1: USB disconnect, device number 88 [ 641.467141][ T7] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 641.707157][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 641.827336][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 641.837664][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 641.847363][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.027103][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 642.036673][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 642.045754][ T7] usb 1-1: Product: syz [ 642.050295][ T7] usb 1-1: Manufacturer: syz [ 642.054949][ T7] usb 1-1: SerialNumber: syz [ 642.097735][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 642.103680][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 642.113614][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 642.119378][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 642.417485][T10399] usb 1-1: USB disconnect, device number 89 18:39:51 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:51 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xa00) 18:39:51 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:51 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:51 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:51 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) 18:39:51 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xb00) [ 643.011562][T21074] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21074] 18:39:51 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:51 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 643.120496][T21062] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21062] [ 643.199220][T10399] usb 1-1: new high-speed USB device number 90 using dummy_hcd 18:39:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xc00) [ 643.446981][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 643.568844][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 643.587366][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 643.606536][T10399] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.777020][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 643.786175][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 643.795621][T10399] usb 1-1: Product: syz [ 643.800163][T10399] usb 1-1: Manufacturer: syz [ 643.804765][T10399] usb 1-1: SerialNumber: syz [ 643.848372][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 643.854531][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 643.865878][T10399] cdc_wdm 1-1:1.0: skipping garbage [ 643.876440][T10399] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 644.169245][T10399] usb 1-1: USB disconnect, device number 90 [ 644.516986][T10399] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 644.776808][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 644.896852][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 644.908496][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 644.918304][T10399] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.087045][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 645.096149][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 645.105469][T10399] usb 1-1: Product: syz [ 645.109872][T10399] usb 1-1: Manufacturer: syz [ 645.114477][T10399] usb 1-1: SerialNumber: syz [ 645.157520][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 645.164214][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 645.173954][T10399] cdc_wdm 1-1:1.0: skipping garbage [ 645.179640][T10399] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 645.486874][ T7] usb 1-1: USB disconnect, device number 91 18:39:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xd00) 18:39:54 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:54 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 18:39:54 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:39:54 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a0000", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:54 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:54 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 645.941934][T21140] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21140] [ 646.035838][T21154] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21154] 18:39:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xe00) 18:39:54 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:54 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 646.237252][ T7] usb 1-1: new high-speed USB device number 92 using dummy_hcd 18:39:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xf00) 18:39:54 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 18:39:54 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:54 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:39:54 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) [ 646.439544][T21181] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21181] [ 646.486710][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 646.525538][T21189] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21189] [ 646.616936][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 646.627375][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 646.636268][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 18:39:55 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d3", 0x242, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 646.806694][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 646.815898][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 646.825014][ T7] usb 1-1: Product: syz [ 646.829508][ T7] usb 1-1: Manufacturer: syz [ 646.834119][ T7] usb 1-1: SerialNumber: syz [ 646.877417][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 646.883484][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 646.896068][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 647.197263][T10420] usb 1-1: USB disconnect, device number 92 [ 647.546549][T10420] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 647.786524][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 647.906815][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 647.918479][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 647.927940][T10420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.096887][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 648.106037][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 648.114727][T10420] usb 1-1: Product: syz [ 648.119147][T10420] usb 1-1: Manufacturer: syz [ 648.123816][T10420] usb 1-1: SerialNumber: syz [ 648.167368][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 648.173308][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 648.182259][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 648.487052][T10420] usb 1-1: USB disconnect, device number 93 18:39:57 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 18:39:57 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x242, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 648.916600][T21228] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21228] 18:39:57 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1100) 18:39:57 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a0000", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:39:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1200) [ 649.108651][T21243] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21243] 18:39:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1300) 18:39:57 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:39:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1400) [ 649.329305][ T7] usb 1-1: new high-speed USB device number 94 using dummy_hcd 18:39:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1500) [ 649.451566][T21266] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21266] 18:39:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1600) [ 649.586359][ T7] usb 1-1: Using ep0 maxpacket: 8 18:39:57 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1700) [ 649.709716][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 649.746841][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 649.807895][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.016517][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 650.026294][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 650.035116][ T7] usb 1-1: Product: syz [ 650.039990][ T7] usb 1-1: Manufacturer: syz [ 650.044822][ T7] usb 1-1: SerialNumber: syz [ 650.086881][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 650.092917][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 650.106536][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 650.406433][ T7] usb 1-1: USB disconnect, device number 94 [ 650.766359][ T7] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 651.006251][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 651.126324][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 651.136805][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.145729][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.316886][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 651.326458][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 651.334931][ T7] usb 1-1: Product: syz [ 651.339627][ T7] usb 1-1: Manufacturer: syz [ 651.344248][ T7] usb 1-1: SerialNumber: syz [ 651.386930][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 651.392873][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 651.402615][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 651.706265][ T7] usb 1-1: USB disconnect, device number 95 18:40:00 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 18:40:00 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x242, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 651.950018][T21321] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21321] 18:40:00 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:00 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) 18:40:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1800) 18:40:00 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a0000", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) [ 652.100112][T21328] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21328] [ 652.151334][T21330] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21330] 18:40:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1900) 18:40:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1a00) 18:40:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1b00) 18:40:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1c00) [ 652.456103][ T7] usb 1-1: new high-speed USB device number 96 using dummy_hcd 18:40:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1d00) 18:40:00 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1e00) [ 652.716139][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 652.836215][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 652.847099][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 652.857460][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.026272][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 653.035730][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 653.044439][ T7] usb 1-1: Product: syz [ 653.048954][ T7] usb 1-1: Manufacturer: syz [ 653.053754][ T7] usb 1-1: SerialNumber: syz [ 653.096701][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 653.103200][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 653.113532][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 653.416251][ T7] usb 1-1: USB disconnect, device number 96 [ 653.765949][ T7] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 654.036072][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 654.186211][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 654.200756][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 654.211035][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.376183][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 654.385719][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 654.395772][ T7] usb 1-1: Product: syz [ 654.400750][ T7] usb 1-1: Manufacturer: syz [ 654.405462][ T7] usb 1-1: SerialNumber: syz [ 654.446939][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 654.452882][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 654.465475][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 654.766377][ T7] usb 1-1: USB disconnect, device number 97 18:40:03 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) 18:40:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f00) [ 654.991183][T21411] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21411] 18:40:03 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:03 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x363, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2000) 18:40:03 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a00000009", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2100) 18:40:03 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) [ 655.198187][T21425] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21425] 18:40:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2200) [ 655.266790][T21433] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21433] 18:40:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2300) 18:40:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2400) 18:40:03 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2500) [ 655.535777][ T7] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 655.776501][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 655.895998][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.906589][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 655.917352][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.085840][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 656.094918][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 656.104290][ T7] usb 1-1: Product: syz [ 656.108767][ T7] usb 1-1: Manufacturer: syz [ 656.113973][ T7] usb 1-1: SerialNumber: syz [ 656.156585][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 656.165473][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 656.172663][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 656.178624][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 656.476080][ T7] usb 1-1: USB disconnect, device number 98 [ 656.825712][ T7] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 657.065712][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 657.185946][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.196268][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 657.205254][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.375871][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 657.386560][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 657.395444][ T7] usb 1-1: Product: syz [ 657.401512][ T7] usb 1-1: Manufacturer: syz [ 657.406781][ T7] usb 1-1: SerialNumber: syz [ 657.446388][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 657.452322][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 657.468074][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 657.473455][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 657.765706][ T7] usb 1-1: USB disconnect, device number 99 18:40:06 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) 18:40:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2600) [ 658.031535][T21498] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21498] 18:40:06 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:06 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d", 0x363, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2700) 18:40:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a00000009", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:06 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3368) [ 658.273494][T21518] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21518] [ 658.334889][T21522] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21522] 18:40:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x343d) 18:40:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3d34) 18:40:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3f00) [ 658.505628][ T7] usb 1-1: new high-speed USB device number 100 using dummy_hcd 18:40:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x4801) [ 658.755585][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 658.875566][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.885891][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 658.894897][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.065712][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 659.078037][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 659.086664][ T7] usb 1-1: Product: syz [ 659.090841][ T7] usb 1-1: Manufacturer: syz [ 659.095648][ T7] usb 1-1: SerialNumber: syz [ 659.137536][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 659.143490][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 659.151148][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 659.159079][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 659.455764][T10248] usb 1-1: USB disconnect, device number 100 [ 659.805426][T10248] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 660.045479][T10248] usb 1-1: Using ep0 maxpacket: 8 [ 660.165449][T10248] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.176326][T10248] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.185860][T10248] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.355508][T10248] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 660.365031][T10248] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 660.374165][T10248] usb 1-1: Product: syz [ 660.378947][T10248] usb 1-1: Manufacturer: syz [ 660.383556][T10248] usb 1-1: SerialNumber: syz [ 660.426224][T10248] hub 1-1:1.0: bad descriptor, ignoring hub [ 660.432171][T10248] hub: probe of 1-1:1.0 failed with error -5 [ 660.445168][T10248] cdc_wdm 1-1:1.0: skipping garbage [ 660.457918][T10248] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 660.745975][T10248] usb 1-1: USB disconnect, device number 101 18:40:09 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) 18:40:09 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x6833) [ 661.089106][T21587] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21587] 18:40:09 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:09 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d", 0x363, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:09 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x7000) 18:40:09 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a00000009", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:09 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:09 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x10fff) [ 661.352913][T21607] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21607] [ 661.394930][T21612] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21612] 18:40:09 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x40000) 18:40:09 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x100000) [ 661.535402][T10398] usb 1-1: new high-speed USB device number 102 using dummy_hcd 18:40:09 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x200000) 18:40:10 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x700000) [ 661.797415][T10398] usb 1-1: Using ep0 maxpacket: 8 [ 661.915526][T10398] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.927220][T10398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 661.936910][T10398] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.115602][T10398] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 662.124744][T10398] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 662.134027][T10398] usb 1-1: Product: syz [ 662.138852][T10398] usb 1-1: Manufacturer: syz [ 662.143456][T10398] usb 1-1: SerialNumber: syz [ 662.196253][T10398] hub 1-1:1.0: bad descriptor, ignoring hub [ 662.202198][T10398] hub: probe of 1-1:1.0 failed with error -5 [ 662.213594][T10398] cdc_wdm 1-1:1.0: skipping garbage [ 662.223809][T10398] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 662.515587][ T35] usb 1-1: USB disconnect, device number 102 [ 662.875195][ T35] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 663.135110][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 663.295269][ T35] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.305799][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 663.314719][ T35] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 663.495260][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 663.505171][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 663.513610][ T35] usb 1-1: Product: syz [ 663.518951][ T35] usb 1-1: Manufacturer: syz [ 663.523621][ T35] usb 1-1: SerialNumber: syz [ 663.566038][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 663.572003][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 663.584780][ T35] cdc_wdm 1-1:1.0: skipping garbage [ 663.595282][ T35] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 663.887750][ T35] usb 1-1: USB disconnect, device number 103 18:40:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1000000) 18:40:12 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) [ 664.123301][T21677] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21677] 18:40:12 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:12 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x3f3, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2000000) 18:40:12 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a0000000905", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:12 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3000000) [ 664.375952][T21692] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21692] 18:40:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x4000000) [ 664.498703][T21705] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21705] 18:40:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x5000000) [ 664.635125][T10420] usb 1-1: new high-speed USB device number 104 using dummy_hcd 18:40:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x6000000) 18:40:13 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x7000000) 18:40:13 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x8000000) [ 664.887120][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 665.005014][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 665.015543][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 665.024765][T10420] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 665.195323][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 665.204396][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 665.213276][T10420] usb 1-1: Product: syz [ 665.217968][T10420] usb 1-1: Manufacturer: syz [ 665.222569][T10420] usb 1-1: SerialNumber: syz [ 665.249615][T21691] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 665.265867][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 665.272513][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 665.287506][T10420] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 665.585862][ T35] usb 1-1: USB disconnect, device number 104 [ 665.944899][T10399] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 666.184959][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 666.305201][T10399] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 666.315584][T10399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 666.324552][T10399] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 666.495144][T10399] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 666.504480][T10399] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 666.513672][T10399] usb 1-1: Product: syz [ 666.518288][T10399] usb 1-1: Manufacturer: syz [ 666.522894][T10399] usb 1-1: SerialNumber: syz [ 666.546488][T21691] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 666.565656][T10399] hub 1-1:1.0: bad descriptor, ignoring hub [ 666.571599][T10399] hub: probe of 1-1:1.0 failed with error -5 [ 666.583345][T10399] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 666.884985][T10248] usb 1-1: USB disconnect, device number 105 18:40:15 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:15 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:15 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x9000000) 18:40:15 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x3f3, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:15 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) [ 667.400992][T21779] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21779] 18:40:15 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 18:40:15 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a0000000905", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:15 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:15 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xa000000) 18:40:15 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 667.552138][T21796] ptrace attach of ""[8610] was attempted by ""[21796] [ 667.577756][T21802] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21802] 18:40:15 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xb000000) 18:40:15 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 667.660163][T21809] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[21809] 18:40:16 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xc000000) 18:40:16 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:16 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xd000000) [ 667.814690][ T35] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 668.094803][ T35] usb 1-1: Using ep0 maxpacket: 8 18:40:16 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x3f3, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 668.214987][ T35] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 668.225320][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 668.234471][ T35] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 668.424936][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 668.434261][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 668.443949][ T35] usb 1-1: Product: syz [ 668.448721][ T35] usb 1-1: Manufacturer: syz [ 668.453668][ T35] usb 1-1: SerialNumber: syz [ 668.478471][T21797] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 668.495660][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 668.501787][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 668.509582][ T35] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 668.817350][ T35] usb 1-1: USB disconnect, device number 106 [ 669.174642][ T35] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 669.415767][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 669.554700][ T35] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 669.566081][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 669.576434][ T35] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 669.764904][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 669.774084][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 669.784403][ T35] usb 1-1: Product: syz [ 669.790419][ T35] usb 1-1: Manufacturer: syz [ 669.795995][ T35] usb 1-1: SerialNumber: syz [ 669.816169][T21797] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 669.846082][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 669.852054][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 669.860211][ T35] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 670.165108][ T35] usb 1-1: USB disconnect, device number 107 18:40:18 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 670.430776][T21868] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21868] 18:40:18 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:18 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a0000000905", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:18 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:18 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xe000000) 18:40:18 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x43b, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:18 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 670.592151][T21873] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21873] 18:40:18 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xf000000) 18:40:19 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x10000000) 18:40:19 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 670.925133][ T35] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 671.174474][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 671.304472][ T35] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 671.315330][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 671.324518][ T35] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 671.494649][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 671.503901][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 671.512923][ T35] usb 1-1: Product: syz [ 671.517305][ T35] usb 1-1: Manufacturer: syz [ 671.522166][ T35] usb 1-1: SerialNumber: syz [ 671.545365][T21885] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 671.565262][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 671.571205][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 671.578916][ T35] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 671.884852][ T35] usb 1-1: USB disconnect, device number 108 [ 672.234346][ T35] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 672.474327][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 672.594738][ T35] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 672.605304][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 672.616520][ T35] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 672.794578][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 672.804001][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 672.813246][ T35] usb 1-1: Product: syz [ 672.817911][ T35] usb 1-1: Manufacturer: syz [ 672.822508][ T35] usb 1-1: SerialNumber: syz [ 672.846485][T21885] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 672.875077][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 672.881206][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 672.893223][ T35] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 673.204443][ T35] usb 1-1: USB disconnect, device number 109 18:40:21 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x11000000) 18:40:21 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:21 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:21 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x43b, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:21 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 18:40:21 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:21 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x12000000) [ 673.618576][T21957] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[21957] 18:40:21 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:21 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:22 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x13000000) 18:40:22 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 673.703796][T21972] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21972] 18:40:22 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000000)) 18:40:22 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x14000000) [ 673.853181][T21988] ptrace attach of "/root/syz-executor.1"[8610] was attempted by ""[21988] [ 673.891270][T21994] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[21994] [ 673.994176][T10248] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 674.244325][T10248] usb 1-1: Using ep0 maxpacket: 8 [ 674.364476][T10248] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 674.375620][T10248] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 674.387046][T10248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 674.399402][T10248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 674.564463][T10248] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 674.573742][T10248] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 674.583421][T10248] usb 1-1: Product: syz [ 674.588355][T10248] usb 1-1: Manufacturer: syz [ 674.593363][T10248] usb 1-1: SerialNumber: syz [ 674.615171][T21973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 674.634909][T10248] hub 1-1:1.0: bad descriptor, ignoring hub [ 674.641728][T10248] hub: probe of 1-1:1.0 failed with error -5 [ 674.659603][T10248] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 675.254480][T21973] usb 1-1: reset high-speed USB device number 110 using dummy_hcd [ 675.494082][T21973] usb 1-1: Using ep0 maxpacket: 8 [ 675.645446][T22020] raw-gadget gadget: fail, usb_ep_enable returned -22 18:40:24 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 676.641071][T22032] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22032] 18:40:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:28 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x43b, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:28 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) 18:40:28 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:28 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) r2 = gettid() ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:28 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x15000000) [ 680.085691][T10399] usb 1-1: USB disconnect, device number 110 18:40:28 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:28 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) r2 = gettid() ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 680.179149][T22053] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22053] [ 680.190062][T22058] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22058] [ 680.196859][T22054] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[22054] 18:40:28 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) r2 = gettid() ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) 18:40:28 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x16000000) [ 680.288507][T22070] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22070] [ 680.293361][T22071] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22071] 18:40:28 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:28 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) r2 = gettid() ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000000)) [ 680.367556][T22076] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22076] [ 680.455662][T22085] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22085] [ 680.488001][T22087] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22087] [ 680.503572][T10553] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 680.763712][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 680.884192][T10553] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 680.894489][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 680.904896][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 680.917510][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 681.105837][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 681.115454][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 681.124560][T10553] usb 1-1: Product: syz [ 681.128953][T10553] usb 1-1: Manufacturer: syz [ 681.134535][T10553] usb 1-1: SerialNumber: syz [ 681.156931][T22063] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 681.184474][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 681.190723][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 681.204827][T10553] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 681.823791][T22063] usb 1-1: reset high-speed USB device number 111 using dummy_hcd [ 682.073498][T22063] usb 1-1: Using ep0 maxpacket: 8 [ 682.225106][T22106] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 682.563799][T10420] usb 1-1: USB disconnect, device number 111 [ 685.554304][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.560775][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 18:40:34 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:34 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x17000000) 18:40:34 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:34 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:34 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c72", 0x45f, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:34 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x7, r3, 0x0, 0x0) [ 686.722267][T22130] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22130] [ 686.732025][T22133] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[22133] 18:40:35 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 686.767605][T22136] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22136] 18:40:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x18000000) 18:40:35 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 686.860695][T22147] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22147] 18:40:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x19000000) 18:40:35 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 686.974488][T22153] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22153] [ 686.988972][T22155] ptrace attach of "/root/syz-executor.1"[22153] was attempted by "/root/syz-executor.1"[22155] [ 687.035528][T10420] usb 1-1: new high-speed USB device number 112 using dummy_hcd 18:40:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1a000000) [ 687.109893][T22164] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22164] [ 687.126265][T22165] ptrace attach of "/root/syz-executor.1"[22164] was attempted by "/root/syz-executor.1"[22165] [ 687.293121][T10420] usb 1-1: Using ep0 maxpacket: 8 [ 687.413077][T10420] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 687.429311][T10420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 687.450123][T10420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 687.472308][T10420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 687.643060][T10420] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 687.663362][T10420] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 687.672224][T10420] usb 1-1: Product: syz [ 687.679783][T10420] usb 1-1: Manufacturer: syz [ 687.685160][T10420] usb 1-1: SerialNumber: syz [ 687.713937][T22137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 687.737777][T10420] hub 1-1:1.0: bad descriptor, ignoring hub [ 687.746440][T10420] hub: probe of 1-1:1.0 failed with error -5 [ 687.761581][T10420] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 688.355828][T22137] usb 1-1: reset high-speed USB device number 112 using dummy_hcd [ 688.613013][T22137] usb 1-1: Using ep0 maxpacket: 8 [ 688.764079][T22190] raw-gadget gadget: fail, usb_ep_enable returned -22 18:40:41 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:41 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1b000000) 18:40:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x45f, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:41 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 693.172085][ T35] usb 1-1: USB disconnect, device number 112 [ 693.242057][T22215] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22215] [ 693.246467][T22218] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[22218] 18:40:41 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 693.282382][T22217] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22217] [ 693.296358][T22222] ptrace attach of "/root/syz-executor.4"[22218] was attempted by "/root/syz-executor.4"[22222] 18:40:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1c000000) 18:40:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1d000000) 18:40:41 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) [ 693.421074][T22235] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[22235] [ 693.441966][T22238] ptrace attach of "/root/syz-executor.4"[22235] was attempted by "/root/syz-executor.4"[22238] 18:40:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1e000000) [ 693.562465][ T35] usb 1-1: new high-speed USB device number 113 using dummy_hcd 18:40:41 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f000000) [ 693.792635][T10553] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 693.822610][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 693.952510][ T35] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 693.952540][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 693.952576][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 693.952606][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 694.062898][T10553] usb 5-1: Using ep0 maxpacket: 8 [ 694.152588][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 694.161783][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 694.171560][ T35] usb 1-1: Product: syz [ 694.176641][ T35] usb 1-1: Manufacturer: syz [ 694.181274][ T35] usb 1-1: SerialNumber: syz [ 694.202745][T10553] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 694.203372][T22225] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 694.218966][T10553] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 694.230412][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 694.236461][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 694.249485][ T35] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 694.260071][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 694.281379][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 694.482590][T10553] usb 5-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 694.492135][T10553] usb 5-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 694.504832][T10553] usb 5-1: Product: syz [ 694.509215][T10553] usb 5-1: Manufacturer: syz [ 694.515724][T10553] usb 5-1: SerialNumber: syz [ 694.532791][T22247] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 694.554348][T10553] hub 5-1:1.0: bad descriptor, ignoring hub [ 694.560375][T10553] hub: probe of 5-1:1.0 failed with error -5 [ 694.852848][T22225] usb 1-1: reset high-speed USB device number 113 using dummy_hcd [ 695.102390][T22225] usb 1-1: Using ep0 maxpacket: 8 [ 695.244030][T22276] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 695.295024][T10553] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 695.543275][T10553] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 695.782293][T10553] usb 5-1: Using ep0 maxpacket: 8 [ 695.922862][T22286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 696.322899][T22247] cdc_wdm 1-1:1.0: Error autopm - -16 [ 696.328658][T10420] usb 1-1: USB disconnect, device number 113 [ 696.452809][T10248] usb 5-1: USB disconnect, device number 20 18:40:45 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:45 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c72", 0x45f, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x20000000) 18:40:45 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:45 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) [ 696.907022][T22334] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22334] [ 696.928834][T22335] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22335] 18:40:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x21000000) 18:40:45 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$cont(0x7, 0x0, 0x0, 0x0) 18:40:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x22000000) [ 697.088027][T22351] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22351] 18:40:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x23000000) [ 697.176625][T10398] usb 1-1: new high-speed USB device number 114 using dummy_hcd 18:40:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x24000000) [ 697.252489][T10420] usb 5-1: new high-speed USB device number 21 using dummy_hcd 18:40:45 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x25000000) [ 697.422266][T10398] usb 1-1: Using ep0 maxpacket: 8 [ 697.505478][T10420] usb 5-1: Using ep0 maxpacket: 8 [ 697.542867][T10398] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 697.554244][T10398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 697.565017][T10398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 697.577726][T10398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 697.622484][T10420] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 697.634835][T10420] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 697.645409][T10420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 697.657360][T10420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 697.752525][T10398] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 697.761605][T10398] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 697.771033][T10398] usb 1-1: Product: syz [ 697.776095][T10398] usb 1-1: Manufacturer: syz [ 697.780803][T10398] usb 1-1: SerialNumber: syz [ 697.813116][T22333] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 697.822507][T10420] usb 5-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 697.833008][T10420] usb 5-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 697.841936][T10420] usb 5-1: Product: syz [ 697.842838][T10398] hub 1-1:1.0: bad descriptor, ignoring hub [ 697.853100][T10420] usb 5-1: Manufacturer: syz [ 697.860574][T10398] hub: probe of 1-1:1.0 failed with error -5 [ 697.860988][T10420] usb 5-1: SerialNumber: syz [ 697.873542][T10398] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 697.902581][T22343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 697.923166][T10420] hub 5-1:1.0: bad descriptor, ignoring hub [ 697.929376][T10420] hub: probe of 5-1:1.0 failed with error -5 [ 697.954591][T10420] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 698.312232][T10420] usb 5-1: USB disconnect, device number 21 [ 698.472606][T22333] usb 1-1: reset high-speed USB device number 114 using dummy_hcd [ 698.712072][T22333] usb 1-1: Using ep0 maxpacket: 8 [ 698.863760][T22401] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 699.102972][T10419] usb 1-1: USB disconnect, device number 114 [ 699.452052][T10420] usb 5-1: new high-speed USB device number 22 using dummy_hcd 18:40:47 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:47 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x26000000) 18:40:47 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x471, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:47 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x27000000) [ 699.691960][T10420] usb 5-1: Using ep0 maxpacket: 8 18:40:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 699.822098][T10420] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 699.833144][T10420] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 699.842550][T10420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 699.854279][T10420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 699.915951][T22455] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22455] [ 699.922213][T10248] usb 1-1: new high-speed USB device number 115 using dummy_hcd 18:40:48 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3d340000) 18:40:48 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) [ 700.041973][T10420] usb 5-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 700.064663][T10420] usb 5-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 18:40:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3f000000) [ 700.106949][T10420] usb 5-1: Product: syz [ 700.142031][T10420] usb 5-1: can't set config #1, error -71 [ 700.150340][T10420] usb 5-1: USB disconnect, device number 22 18:40:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x48010000) [ 700.192491][T10248] usb 1-1: Using ep0 maxpacket: 8 18:40:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x68330000) [ 700.312182][T10248] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 700.328286][T10248] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 18:40:48 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xe4ffffff) [ 700.352538][T10248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 700.368015][T10248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 700.403215][ T7] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 700.521977][T10420] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 700.532914][T10248] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 700.543831][T10248] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 700.554400][T10248] usb 1-1: Product: syz [ 700.558592][T10248] usb 1-1: Manufacturer: syz [ 700.564991][T10248] usb 1-1: SerialNumber: syz [ 700.592887][T22438] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 700.612577][T10248] hub 1-1:1.0: bad descriptor, ignoring hub [ 700.618733][T10248] hub: probe of 1-1:1.0 failed with error -5 [ 700.635563][T10248] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 700.675278][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 700.761884][T10420] usb 5-1: Using ep0 maxpacket: 8 [ 700.792013][ T7] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 700.803167][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 700.813080][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 700.829984][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 700.881983][T10420] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 700.895938][T10420] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 700.906422][T10420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 700.920090][T10420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 701.011954][ T7] usb 6-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 701.021589][ T7] usb 6-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 701.030782][ T7] usb 6-1: Product: syz [ 701.035487][ T7] usb 6-1: Manufacturer: syz [ 701.040078][ T7] usb 6-1: SerialNumber: syz [ 701.062734][T22469] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 701.082768][ T7] hub 6-1:1.0: bad descriptor, ignoring hub [ 701.089047][ T7] hub: probe of 6-1:1.0 failed with error -5 [ 701.100645][T10420] usb 5-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 701.114499][T10420] usb 5-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 701.124484][T10420] usb 5-1: Product: syz [ 701.128722][T10420] usb 5-1: Manufacturer: syz [ 701.136758][T10420] usb 5-1: SerialNumber: syz [ 701.164302][T22461] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 701.182617][T10420] hub 5-1:1.0: bad descriptor, ignoring hub [ 701.188577][T10420] hub: probe of 5-1:1.0 failed with error -5 [ 701.252107][T22438] usb 1-1: reset high-speed USB device number 115 using dummy_hcd [ 701.503645][T22438] usb 1-1: Using ep0 maxpacket: 8 [ 701.643486][T22507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 701.702376][ T7] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 701.710355][T10420] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 701.922332][ T7] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 701.934339][T10420] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 702.161799][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 702.191825][T10420] usb 5-1: Using ep0 maxpacket: 8 [ 702.303681][T22523] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 702.333384][T22526] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 702.722592][T22461] cdc_wdm 1-1:1.0: Error autopm - -16 [ 702.728294][T10023] usb 1-1: USB disconnect, device number 115 [ 702.728790][T22469] cdc_wdm 1-1:1.0: Error autopm - -16 [ 702.872044][T10398] usb 5-1: USB disconnect, device number 23 [ 702.883361][T10420] usb 6-1: USB disconnect, device number 14 18:40:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xff0f0100) 18:40:51 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x471, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:51 executing program 1: perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:51 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:51 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:51 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) [ 703.296602][T22582] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22582] 18:40:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xffffffe4) 18:40:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x4000000000000) 18:40:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x10000000000000) 18:40:51 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x20000000000000) [ 703.644045][ T35] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 703.655122][T10398] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 703.663102][T10553] usb 5-1: new high-speed USB device number 24 using dummy_hcd 18:40:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x70000000000000) 18:40:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x100000000000000) 18:40:52 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x200000000000000) [ 703.922472][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 703.927644][T10398] usb 6-1: Using ep0 maxpacket: 8 [ 703.932737][T10553] usb 5-1: Using ep0 maxpacket: 8 [ 704.061847][T10553] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 704.072764][T10398] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 704.083326][ T35] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 704.094377][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 18:40:52 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493", 0x471, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 704.103595][T10398] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 704.112733][T10553] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 704.122380][T10398] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 704.134331][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 704.146292][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 704.168078][T10398] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 704.180111][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 704.192142][T10553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 704.391678][T10553] usb 5-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 704.405975][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 704.415230][T10398] usb 6-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 704.424292][T10398] usb 6-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 704.434247][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 704.443296][T10553] usb 5-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 704.452158][T10398] usb 6-1: Product: syz [ 704.456323][T10398] usb 6-1: Manufacturer: syz [ 704.460947][T10398] usb 6-1: SerialNumber: syz [ 704.466672][ T35] usb 1-1: Product: syz [ 704.470841][ T35] usb 1-1: Manufacturer: syz [ 704.476429][T10553] usb 5-1: Product: syz [ 704.480597][T10553] usb 5-1: Manufacturer: syz [ 704.486423][ T35] usb 1-1: SerialNumber: syz [ 704.492929][T10553] usb 5-1: SerialNumber: syz [ 704.511907][T22593] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 704.512444][T22596] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 704.522508][T22589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 704.542421][T10398] hub 6-1:1.0: bad descriptor, ignoring hub [ 704.548581][T10398] hub: probe of 6-1:1.0 failed with error -5 [ 704.555716][T10553] hub 5-1:1.0: bad descriptor, ignoring hub [ 704.571636][T10553] hub: probe of 5-1:1.0 failed with error -5 [ 704.583119][T10553] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 704.594519][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 704.600554][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 704.612283][T10398] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 704.636874][ T35] cdc_wdm 1-1:1.0: cdc-wdm2: USB WDM device [ 704.984654][ T35] usb 6-1: USB disconnect, device number 15 [ 704.992222][T10553] usb 1-1: USB disconnect, device number 116 [ 705.401855][T22596] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 705.641555][T22596] usb 5-1: Using ep0 maxpacket: 8 [ 705.782078][T22678] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 706.052294][T10023] usb 5-1: USB disconnect, device number 24 18:40:54 executing program 1: perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 706.296364][T22717] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22717] 18:40:54 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) [ 706.403213][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 706.410905][T10553] usb 1-1: new high-speed USB device number 117 using dummy_hcd 18:40:54 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:40:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x300000000000000) 18:40:54 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x47a, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:54 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:54 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x400000000000000) [ 706.644983][T22742] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[22742] 18:40:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x500000000000000) [ 706.811355][T10553] usb 1-1: device descriptor read/64, error -71 18:40:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x600000000000000) 18:40:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x700000000000000) 18:40:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x800000000000000) 18:40:55 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x900000000000000) [ 707.091402][ T35] usb 6-1: device descriptor read/64, error -71 [ 707.111647][T10553] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 707.371356][ T35] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 707.379698][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 707.521451][T10553] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 707.532280][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 707.542694][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 707.557517][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 707.651309][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 707.731586][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 707.741145][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 707.750239][T10553] usb 1-1: Product: syz [ 707.754987][T10553] usb 1-1: Manufacturer: syz [ 707.759755][T10553] usb 1-1: SerialNumber: syz [ 707.794898][T22725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 707.802824][ T35] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 707.814272][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 707.820220][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 707.834154][ T35] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 707.845579][T10553] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 707.859011][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 707.877362][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 708.061356][ T35] usb 6-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 708.071519][ T35] usb 6-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 708.080137][ T35] usb 6-1: Product: syz [ 708.086194][ T35] usb 6-1: Manufacturer: syz [ 708.092274][ T35] usb 6-1: SerialNumber: syz [ 708.114752][T22739] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 708.133812][ T35] hub 6-1:1.0: bad descriptor, ignoring hub [ 708.139937][ T35] hub: probe of 6-1:1.0 failed with error -5 [ 708.581846][T22725] usb 1-1: reset high-speed USB device number 118 using dummy_hcd [ 708.841237][T22725] usb 1-1: Using ep0 maxpacket: 8 [ 708.992938][T22795] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 709.034036][ T35] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device 18:40:57 executing program 1: perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 709.241689][ T35] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 709.320473][T22823] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22823] [ 709.511156][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 710.062003][T22739] cdc_wdm 1-1:1.0: Error autopm - -16 [ 710.062116][ T7] usb 1-1: USB disconnect, device number 118 [ 710.131166][ T35] usb 6-1: device firmware changed [ 710.136580][ T35] usb 6-1: USB disconnect, device number 17 18:40:58 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:40:58 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xa00000000000000) 18:40:58 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39", 0x47a, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:40:58 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:40:58 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:58 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 710.643941][T22850] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[22850] [ 710.662048][T22852] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22852] 18:40:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xb00000000000000) [ 710.758429][T22865] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22865] 18:40:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xc00000000000000) 18:40:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xd00000000000000) [ 710.991569][ T7] usb 1-1: new high-speed USB device number 119 using dummy_hcd 18:40:59 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x38) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:40:59 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xe00000000000000) [ 711.280981][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 711.308150][T22893] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22893] [ 711.432593][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 711.449903][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 711.466192][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 711.485461][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 711.671112][ T7] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 711.680332][ T7] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 711.688713][ T7] usb 1-1: Product: syz [ 711.692986][ T7] usb 1-1: Manufacturer: syz [ 711.697599][ T7] usb 1-1: SerialNumber: syz [ 711.741828][T22860] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 711.771856][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 711.777843][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 711.793468][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device 18:41:00 executing program 1: perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 712.344105][T22917] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22917] [ 712.402359][T22860] usb 1-1: reset high-speed USB device number 119 using dummy_hcd [ 712.651045][T22860] usb 1-1: Using ep0 maxpacket: 8 [ 712.792614][T22911] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 713.141558][T10553] usb 1-1: USB disconnect, device number 119 18:41:05 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:41:05 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xf00000000000000) 18:41:05 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x17) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:41:05 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39", 0x47a, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:41:05 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) gettid() 18:41:05 executing program 1: perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) [ 717.281913][T22945] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[22945] [ 717.307484][T22949] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22949] [ 717.326654][T22950] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[22950] 18:41:05 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1000000000000000) 18:41:05 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1100000000000000) [ 717.570790][ T35] usb 1-1: new high-speed USB device number 120 using dummy_hcd 18:41:05 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:41:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1200000000000000) [ 717.795278][T22978] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[22978] 18:41:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1300000000000000) [ 717.840643][ T35] usb 1-1: Using ep0 maxpacket: 8 18:41:06 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1400000000000000) [ 717.990785][ T35] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 718.010189][ T35] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 718.031030][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 718.049429][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 718.240585][ T35] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 718.249967][ T35] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 718.260404][ T35] usb 1-1: Product: syz [ 718.264581][ T35] usb 1-1: Manufacturer: syz [ 718.269851][ T35] usb 1-1: SerialNumber: syz [ 718.291384][T22951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 718.311365][ T35] hub 1-1:1.0: bad descriptor, ignoring hub [ 718.317318][ T35] hub: probe of 1-1:1.0 failed with error -5 [ 718.327568][ T35] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 719.070830][T22951] usb 1-1: reset high-speed USB device number 120 using dummy_hcd [ 719.310436][T22951] usb 1-1: Using ep0 maxpacket: 8 [ 719.462035][T23010] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 719.800993][T10553] usb 1-1: USB disconnect, device number 120 18:41:12 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:41:12 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x47f, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:41:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1500000000000000) 18:41:12 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 18:41:12 executing program 1: perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:41:12 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 723.940910][T23040] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[23040] [ 723.944532][T23042] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[23042] [ 723.967992][T23043] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[23043] 18:41:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1600000000000000) 18:41:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1700000000000000) 18:41:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1800000000000000) [ 724.230150][T10553] usb 1-1: new high-speed USB device number 121 using dummy_hcd 18:41:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1900000000000000) 18:41:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1a00000000000000) 18:41:12 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1b00000000000000) [ 724.502120][T10553] usb 1-1: Using ep0 maxpacket: 8 [ 724.640005][T10553] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 724.650473][T10553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 724.659537][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 724.671224][T10553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 724.871258][T10553] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 724.880382][T10553] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 724.888913][T10553] usb 1-1: Product: syz [ 724.894546][T10553] usb 1-1: Manufacturer: syz [ 724.899170][T10553] usb 1-1: SerialNumber: syz [ 724.920826][T23050] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 724.940793][T10553] hub 1-1:1.0: bad descriptor, ignoring hub [ 724.946747][T10553] hub: probe of 1-1:1.0 failed with error -5 [ 724.959510][T10553] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 725.570352][T23050] usb 1-1: reset high-speed USB device number 121 using dummy_hcd [ 725.809916][T23050] usb 1-1: Using ep0 maxpacket: 8 [ 725.961477][T23104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 726.311071][T10398] usb 1-1: USB disconnect, device number 121 18:41:18 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:41:18 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x47f, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:41:18 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1c00000000000000) 18:41:18 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) 18:41:18 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:41:18 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) [ 730.485510][T23138] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[23138] [ 730.489071][T23135] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[23135] [ 730.522888][T23137] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[23137] 18:41:18 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1d00000000000000) 18:41:18 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1e00000000000000) 18:41:18 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f00000000000000) 18:41:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2000000000000000) [ 730.769390][ T4131] usb 1-1: new high-speed USB device number 122 using dummy_hcd 18:41:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2100000000000000) 18:41:19 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2200000000000000) [ 731.039488][ T4131] usb 1-1: Using ep0 maxpacket: 8 [ 731.160926][ T4131] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 731.171357][ T4131] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 731.184924][ T4131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 731.196939][ T4131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 731.389557][ T4131] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 731.398628][ T4131] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 731.407891][ T4131] usb 1-1: Product: syz [ 731.412586][ T4131] usb 1-1: Manufacturer: syz [ 731.417181][ T4131] usb 1-1: SerialNumber: syz [ 731.440343][T23142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 731.460371][ T4131] hub 1-1:1.0: bad descriptor, ignoring hub [ 731.466320][ T4131] hub: probe of 1-1:1.0 failed with error -5 [ 731.481761][ T4131] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 732.099655][T23142] usb 1-1: reset high-speed USB device number 122 using dummy_hcd [ 732.349386][T23142] usb 1-1: Using ep0 maxpacket: 8 [ 732.490401][T23198] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 732.829769][T10023] usb 1-1: USB disconnect, device number 122 18:41:25 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:41:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2300000000000000) 18:41:25 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x47f, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:41:25 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:41:25 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 18:41:25 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 736.942772][T23225] ptrace attach of "/root/syz-executor.5"[9100] was attempted by "/root/syz-executor.5"[23225] [ 736.952008][T23230] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[23230] [ 736.998443][T23232] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[23232] 18:41:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2400000000000000) 18:41:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2500000000000000) [ 737.268943][T10023] usb 1-1: new high-speed USB device number 123 using dummy_hcd 18:41:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2600000000000000) 18:41:25 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) gettid() [ 737.452339][T23260] ptrace attach of "/root/syz-executor.4"[9002] was attempted by ""[23260] 18:41:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2700000000000000) [ 737.519141][T10023] usb 1-1: Using ep0 maxpacket: 8 18:41:25 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3d34000000000000) [ 737.639320][T10023] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 737.662853][T10023] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 737.674682][T10023] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 737.688870][T10023] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 737.859451][T10023] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 737.868540][T10023] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 737.878911][T10023] usb 1-1: Product: syz [ 737.883295][T10023] usb 1-1: Manufacturer: syz [ 737.887880][T10023] usb 1-1: SerialNumber: syz [ 737.909924][T23236] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 737.930021][T10023] hub 1-1:1.0: bad descriptor, ignoring hub [ 737.936095][T10023] hub: probe of 1-1:1.0 failed with error -5 [ 737.957657][T10023] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 738.393906][T23236] udc-core: couldn't find an available UDC or it's busy [ 738.401564][T23236] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 738.529207][T10023] usb 1-1: USB disconnect, device number 123 18:41:27 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:41:27 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x3f00000000000000) 18:41:27 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d", 0x481, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 739.368808][ T4131] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 739.629068][ T4131] usb 1-1: Using ep0 maxpacket: 8 [ 739.760954][ T4131] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 739.772162][ T4131] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 739.782191][ T4131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 739.794249][ T4131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 18:41:28 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:41:28 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x4801000000000000) 18:41:28 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x481, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:41:28 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) [ 739.981228][T23324] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[23324] [ 739.992397][ T4131] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 740.003793][ T4131] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 740.016691][ T4131] usb 1-1: Product: syz 18:41:28 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x6833000000000000) [ 740.034548][ T4131] usb 1-1: Manufacturer: syz [ 740.051021][ T4131] usb 1-1: SerialNumber: syz [ 740.089628][T23310] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 740.110242][ T4131] hub 1-1:1.0: bad descriptor, ignoring hub [ 740.116181][ T4131] hub: probe of 1-1:1.0 failed with error -5 [ 740.143078][ T4131] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device 18:41:28 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xe4ffffff00000000) [ 740.258873][ T7] usb 6-1: new high-speed USB device number 18 using dummy_hcd 18:41:28 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) gettid() 18:41:28 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xff0f010000000000) 18:41:28 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 740.503884][T23363] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[23363] [ 740.508759][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 740.541393][T23310] udc-core: couldn't find an available UDC or it's busy [ 740.551266][T23310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 740.649178][ T7] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 740.667178][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 740.679167][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 740.696707][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 740.710628][ T4131] usb 1-1: USB disconnect, device number 124 [ 740.868831][ T7] usb 6-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 740.878201][ T7] usb 6-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 740.887770][ T7] usb 6-1: Product: syz [ 740.892470][ T7] usb 6-1: Manufacturer: syz [ 740.897066][ T7] usb 6-1: SerialNumber: syz [ 740.919693][T23327] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 740.939351][ T7] hub 6-1:1.0: bad descriptor, ignoring hub [ 740.945377][ T7] hub: probe of 6-1:1.0 failed with error -5 [ 740.956885][ T7] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device 18:41:29 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:41:29 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r0, 0x6, 0x8000, 0x40}) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffff7, @mcast2, 0x6}, 0x1c) 18:41:29 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4891560dc93aa5b554c124d7c8f7c8f6eff997bee44aad3454c25e60e83895e75cdb7b9a9ef9014861e5f2eb7d91773d5dc5dfd9348167f2944b5ea543a9e050bddb2232c2b8c124e26cc56a525faf19fbfe74e36f261f7e0aa417b7acff9c2d8652935113cf0011c307079b3cc88cf7bc6a39e70a86c7dbb101bfbee907609157355f5b51bb842149764c4620dda8eeb42e50f8cdbc5ab0711915ff15d6bad1c13b4bd2d98df1f4308d8a479f67b9d7c96871326957fced95bea87e63fb5dc95d65aa84003a51dc6942dd03b964f015f070383371215dd7218f4cdf97f27f9fbf1034d2cb8b99beb77520e0e4c990f00bc0039d978707739eb1193c832d9cf8ad9ec24f6cff47dc570e6c66c130f482c16214e5f1d40553b11d834da79fc3f9bae8f6095d8002b509fefc373dca4b7d1a9c6cb4b1cb5345a860202d3766f36d53a9088f499bfed4143690583ce40f1bf79064338c072be4a21563801f4ac063c3063932b7fd529cf21e1d80035185bbd8754eb4bea10f5926de0d943a03d1403353e7108f20e59ff1cfc9fa2c01e1dc849dcd77c728bd12c8b44918e0877054b8df8689b466a047bf23f34535d291d1c99996a7b715a1758eda28d7a1a555576a5245f1e29a5067556d64a5ffac23922ea702e401f708ff1e71984d31561bfe1c5d9fab9a15348e00972f8730b23f55fb797c62fbf14c313bbd1523843f01cd2119965c894c9324d35c34fbd563f09122fab603ac9953e3b3494d6feb6ba77e86aa98a7eb67b37e653cc2578acaa344ec19f26192ebf0daf39dafd1144e3b0d00d31f6dafa5f367e199e64b48daea80670ee453700a2ade6d18faeebb4f1057ac4d9e2d6e32bd7fa6c7ed2c78e841b05c5ac41d7d6431a75f517e06b99938e197540fedaec0ea713e19c98b26b1402f06132d1b91f7137aea4f740ca40d519eb8a7cf902f894c9f7f8e1f9c7790a06c532dc3f6afd3e4aaecd6da9f45d2ff17245cebaa77b726657d9675649f2e9d12c2a4394f77aa760169152c4dac603e7bc78e03539f851951756ab8b82bd945d02c6d566c68f4c5a5a71597455eea830190474b55efede57dbfc505b58a3d17cb36934c00b3863a28e37cdb98f7332d4df7cc7fb63dfd76bc25904c06d4db8098eebfde09c9483fd40eb11b5a490a69625420ecbeec2baaa750147d939aa43f47cd0471b6f4b6199119fad66979e5d2981f295d5152b8e781ecd97ebc1fb0d1d2bac1328f0273856e9d291494cb3be1fb985363229d7f1a3ba55b89bcd10416527e0308c0b8010593d15f4701f11a1e94d90fa376b78fcb28b17aa8b0f1b328482f1dda5c975b6eefb5e20e3fe738f364728c607af40270d7c80957def1cb8dd88d7211aa4c86114d448a2aaf67716fd166aab4c9705c4967d0330f594f8d3dc3189505cb7b5c98e106bf8298409c2efdb0b3f60ad2083c85c89b5bcc17efbc4d9b27ef036a91637457e89ca65adf95811e7c842f9a03ee8f964721db441bc55bf5f9b080ae45fd942dbdde7d5defd99df68d6b781ffdd7406c3e394b0c896065dcd182e7af385de565653702d39c7260616460fb0387daecee4ef6accd6977f493d52d09eaa69b9acb39496a27c72e587d", 0x481, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 741.438551][ T4131] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 741.629037][T23327] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 741.688607][ T4131] usb 1-1: Using ep0 maxpacket: 8 [ 741.838966][ T4131] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 741.849941][ T4131] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 741.860689][ T4131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 741.874458][ T4131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 741.898761][T23327] usb 6-1: Using ep0 maxpacket: 8 [ 742.038862][ T4131] usb 1-1: New USB device found, idVendor=b143, idProduct=4d57, bcdDevice=2e.e0 [ 742.040024][T23406] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 742.048066][ T4131] usb 1-1: New USB device strings: Mfr=162, Product=38, SerialNumber=3 [ 742.065726][ T4131] usb 1-1: Product: syz [ 742.070060][ T4131] usb 1-1: Manufacturer: syz [ 742.074663][ T4131] usb 1-1: SerialNumber: syz [ 742.113610][T23398] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 742.129263][ T4131] hub 1-1:1.0: bad descriptor, ignoring hub [ 742.135206][ T4131] hub: probe of 1-1:1.0 failed with error -5 [ 742.149089][ T4131] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 742.398591][ T7] usb 6-1: USB disconnect, device number 18 [ 742.588489][T23427] udc-core: couldn't find an available UDC or it's busy [ 742.595997][T23427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:41:31 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:41:31 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 18:41:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x482, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 743.026965][T23435] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[23435] 18:41:34 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 18:41:34 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x1, 0x800000) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 18:41:34 executing program 4: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) gettid() 18:41:34 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x482, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 18:41:34 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000000)) 18:41:34 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000900000843b1574de02ea226030109025c00020100f92a090400000102090000052406002005240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff, "06015400000000000000000000000100000000000000120001000100"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 746.491278][T23398] cdc_wdm 6-1:1.0: Error autopm - -16 18:41:34 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d4000/0x3000)=nil, 0x3000, 0x3000006, 0x13, r0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0xd3f, 0x0, 0x1, 0x4, 0x1, {0x0, r4}}, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000100)={0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x20) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000180)={0x0, 0x1b, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @generic={0x1, 0x8c, "482b58fb671d6af4f32e4e4f984a0b171a57f89c99d398566da03b1a424f6da496490bbb9424c8bd1d1a38db406d380910de5f70e97db59f78da97a28bc59253cc1976b88300b4e575eb784d82b3ad6dc6555fe337844f963e9b422888f98e6109d2df16d75e9ec055946528ed2d4c72e9526065fe0973120cf42c7405f71ce19e707db2c8bc3da1ac69c812"}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x3f, 0x3, [0x3, 0x8, 0x5, 0x3, 0x0]}}, @jumbo={0xc2, 0x4, 0x66}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, 0xe8) [ 746.592719][T23461] ptrace attach of "/root/syz-executor.4"[9002] was attempted by "/root/syz-executor.4"[23461] [ 746.617220][T23463] ptrace attach of "/root/syz-executor.1"[8610] was attempted by "/root/syz-executor.1"[23463] 18:41:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ede000/0xc000)=nil, 0xc000, 0x1000000, 0x810, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x404094c}, 0xd) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_setup(0x7b52, &(0x7f00000001c0)={0x0, 0x9eb0, 0x8, 0x0, 0x34a, 0x0, r0}) [ 746.818459][ T7] usb 1-1: reset high-speed USB device number 125 using dummy_hcd 18:41:35 executing program 3: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x2, 0x7, &(0x7f0000000300)="5153128581986227f89958151625d141a978ffc78f033d1145cbd2bc0d2a17cf7984c648a15e911a693f034a18014c2dcf249830d8bf1ef1040ccb77030d383ee43cf692a010a88395aa2c01a4945009954e51e0b88729704700eedc23669bd56acdcf275d", 0x65}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r3, 0x0, &(0x7f0000002c00)={0x0, 0x0, 0x0}}, 0x21cc) io_uring_enter(r0, 0x783d, 0x24ba, 0x2, &(0x7f0000000100)={[0x9]}, 0x8) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x77b, &(0x7f0000001500), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del, 0xe33e) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x76ba, &(0x7f00000003c0)={0x0, 0x1550, 0x20, 0x1, 0x16d, 0x0, r0}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xfff, 0x1, &(0x7f00000004c0)="a8480fd84e353701b49bf86e9030ba02608bbdf87ab2b0d2299918047299a0e1c45da7585591807df83ca977dce9bd904954b29fa084b149b91c5b9c38ea60580a586f4ddbc0c8c7b9150c91656bc769076b5c499a260e", 0x0, 0x0, 0x0, {0x3}}, 0x81) syz_io_uring_setup(0x1320, &(0x7f0000000180)={0x0, 0xd388, 0x2, 0x1, 0x26d, 0x0, r0}, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x0, 0x76fe69164b3e357a}, 0x10000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 746.858713][T10023] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 746.949789][T23492] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 746.961638][T23492] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 746.970147][T23492] CPU: 0 PID: 23492 Comm: syz-executor.3 Not tainted 5.14.0-syzkaller #0 [ 746.978562][T23492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.988627][T23492] RIP: 0010:__io_file_supports_nowait+0x26/0x500 [ 746.995464][T23492] Code: 00 00 00 00 41 55 41 54 41 89 f4 55 48 89 fd 53 e8 4f e7 95 ff 48 8d 7d 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2d 04 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b [ 747.016811][T23492] RSP: 0018:ffffc90002eff948 EFLAGS: 00010202 [ 747.022887][T23492] RAX: dffffc0000000000 RBX: 0000000000000008 RCX: ffffc9000feb3000 [ 747.030874][T23492] RDX: 0000000000000004 RSI: ffffffff81e02f31 RDI: 0000000000000020 [ 747.039016][T23492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 747.047085][T23492] R10: ffffffff81e30b7c R11: 0000000000000001 R12: 0000000000000001 [ 747.055411][T23492] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000001 [ 747.063515][T23492] FS: 00007f723c61c700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 747.072901][T23492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.079490][T23492] CR2: 00007f723c5fb718 CR3: 000000007d771000 CR4: 00000000001506f0 [ 747.087739][T23492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.095733][T23492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 747.103799][T23492] Call Trace: [ 747.107109][T23492] io_write+0x4cf/0xed0 [ 747.111271][T23492] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 747.117512][T23492] ? io_read+0x1140/0x1140 [ 747.122027][T23492] ? lock_downgrade+0x6e0/0x6e0 [ 747.126972][T23492] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 747.133243][T23492] ? io_install_fixed_file.isra.0+0x3a0/0x4c0 [ 747.139496][T23492] ? rcu_read_lock_sched_held+0xd/0x70 [ 747.144976][T23492] ? lock_acquire+0x442/0x510 [ 747.149663][T23492] ? lock_release+0x720/0x720 [ 747.154510][T23492] ? rcu_read_lock_sched_held+0xd/0x70 [ 747.160325][T23492] ? rcu_read_lock_sched_held+0xd/0x70 [ 747.165812][T23492] ? lock_release+0x522/0x720 [ 747.170599][T23492] ? percpu_ref_put_many+0x14c/0x260 [ 747.176256][T23492] ? lock_downgrade+0x6e0/0x6e0 [ 747.181117][T23492] ? do_raw_spin_lock+0x120/0x2b0 [ 747.186179][T23492] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 747.192432][T23492] ? io_dismantle_req+0xdf/0x180 [ 747.197386][T23492] io_issue_sqe+0x289/0x6ba0 [ 747.202173][T23492] ? lock_release+0x522/0x720 [ 747.206873][T23492] ? __do_sys_io_uring_enter+0xf59/0x1f00 [ 747.212606][T23492] ? lock_downgrade+0x6e0/0x6e0 [ 747.217458][T23492] ? io_write+0xed0/0xed0 [ 747.221843][T23492] ? rcu_read_lock_sched_held+0xd/0x70 [ 747.227297][T23492] ? lock_acquire+0x442/0x510 [ 747.232054][T23492] ? rcu_read_lock_sched_held+0xd/0x70 [ 747.237518][T23492] ? lock_acquire+0x442/0x510 [ 747.242211][T23492] ? lock_release+0x720/0x720 [ 747.247763][T23492] ? wait_for_completion_io+0x280/0x280 [ 747.253329][T23492] ? percpu_ref_put_many+0x14c/0x260 [ 747.258616][T23492] ? lock_downgrade+0x6e0/0x6e0 [ 747.263550][T23492] __io_queue_sqe+0x90/0xb50 [ 747.268142][T23492] ? lock_acquire+0x442/0x510 [ 747.272825][T23492] ? rcu_read_lock_sched_held+0xd/0x70 [ 747.278275][T23492] ? io_issue_sqe+0x6ba0/0x6ba0 [ 747.283207][T23492] ? tctx_task_work+0x11e/0x610 [ 747.288055][T23492] ? lock_downgrade+0x6e0/0x6e0 [ 747.292922][T23492] ? ww_mutex_unlock+0x2f0/0x2f0 [ 747.297855][T23492] ? rwlock_bug.part.0+0x90/0x90 [ 747.302824][T23492] io_req_task_submit+0xbf/0x1b0 [ 747.307758][T23492] tctx_task_work+0x166/0x610 [ 747.312517][T23492] ? io_fallback_req_func+0x3e0/0x3e0 [ 747.317897][T23492] ? rwlock_bug.part.0+0x90/0x90 [ 747.323017][T23492] ? lock_downgrade+0x621/0x6e0 [ 747.327867][T23492] task_work_run+0xdd/0x1a0 [ 747.332438][T23492] exit_to_user_mode_prepare+0x256/0x290 [ 747.338196][T23492] syscall_exit_to_user_mode+0x19/0x60 [ 747.343742][T23492] do_syscall_64+0x42/0xb0 [ 747.348152][T23492] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 747.354130][T23492] RIP: 0033:0x4665f9 [ 747.358039][T23492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 747.377775][T23492] RSP: 002b:00007f723c61c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 747.386183][T23492] RAX: 0000000000001000 RBX: 000000000056c038 RCX: 00000000004665f9 [ 747.394159][T23492] RDX: 00000000000024ba RSI: 000000000000783d RDI: 0000000000000003 18:41:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="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", 0x482, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 747.402117][T23492] RBP: 00000000004bfcc4 R08: 0000000020000100 R09: 0000000000000008 [ 747.410089][T23492] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c038 [ 747.418070][T23492] R13: 0000000000a9fb1f R14: 00007f723c61c300 R15: 0000000000022000 [ 747.426038][T23492] Modules linked in: [ 747.434026][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.440529][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.507315][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 747.520229][T23492] ---[ end trace 83fd087d1f5003f9 ]--- [ 747.526426][T23492] RIP: 0010:__io_file_supports_nowait+0x26/0x500 [ 747.535709][T23492] Code: 00 00 00 00 41 55 41 54 41 89 f4 55 48 89 fd 53 e8 4f e7 95 ff 48 8d 7d 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2d 04 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b [ 747.558460][T23492] RSP: 0018:ffffc90002eff948 EFLAGS: 00010202 [ 747.564915][T23492] RAX: dffffc0000000000 RBX: 0000000000000008 RCX: ffffc9000feb3000 [ 747.573937][T23492] RDX: 0000000000000004 RSI: ffffffff81e02f31 RDI: 0000000000000020 [ 747.582924][T23492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 747.591471][T10023] usb 6-1: Using ep0 maxpacket: 8 [ 747.597774][T23492] R10: ffffffff81e30b7c R11: 0000000000000001 R12: 0000000000000001 [ 747.607152][T23492] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000001 [ 747.615660][T23492] FS: 00007f723c61c700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 747.625635][T23492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.632846][T23492] CR2: 0000001b33025000 CR3: 000000007d771000 CR4: 00000000001506e0 [ 747.641783][T23492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.652672][T23492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 747.660943][T23492] Kernel panic - not syncing: Fatal exception [ 747.668710][T23492] Kernel Offset: disabled [ 747.673064][T23492] Rebooting in 86400 seconds..