ar_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:11 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x85, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc2"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:11 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be", 0x16}], 0x2)

15:23:11 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x43, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f1936"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2084.139178][T25390] ptrace attach of "/root/syz-executor.0"[25388] was attempted by "/root/syz-executor.0"[25390]
[ 2084.197104][ T4135] usb 5-1: new high-speed USB device number 9 using dummy_hcd
15:23:11 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}], 0x1)

[ 2084.289815][ T4135] usb 5-1: Using ep0 maxpacket: 8
15:23:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

[ 2084.407385][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2084.441776][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
15:23:12 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x2e4, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0x7c, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2084.482696][ T4135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2084.534257][ T4135] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2084.570287][ T4135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
15:23:12 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {0x0}], 0x2)

[ 2084.592185][ T4135] usb 5-1: config 0 descriptor??
15:23:12 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:12 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:12 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {0x0}], 0x2)

[ 2085.087732][ T4135] keytouch 0003:0926:3333.0081: fixing up Keytouch IEC report descriptor
[ 2085.107457][ T4135] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0081/input/input133
[ 2085.188976][ T4135] keytouch 0003:0926:3333.0081: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2085.292922][T10684] usb 5-1: USB disconnect, device number 9
15:23:13 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e65"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:13 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {0x0}], 0x2)

[ 2086.127046][T27550] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 2086.217333][T27550] usb 5-1: Using ep0 maxpacket: 8
[ 2086.337068][T27550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2086.348394][T27550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2086.358384][T27550] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2086.371381][T27550] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2086.380584][T27550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2086.389692][T27550] usb 5-1: config 0 descriptor??
[ 2086.867703][T27550] keytouch 0003:0926:3333.0082: fixing up Keytouch IEC report descriptor
[ 2086.878032][T27550] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0082/input/input134
[ 2086.970358][T27550] keytouch 0003:0926:3333.0082: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2087.079900][T27550] usb 5-1: USB disconnect, device number 10
15:23:14 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:14 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:14 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:14 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x65, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:14 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)={0xc021})
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:14 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)={0x0, 0x1})
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:14 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:15 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:15 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)={0xc021})
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:15 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:15 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:15 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2087.824280][T25551] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2087.824280][T25551]    program syz-executor.1 not setting count and/or reply_len properly
15:23:15 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

[ 2088.045097][T25564] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2088.045097][T25564]    program syz-executor.2 not setting count and/or reply_len properly
[ 2088.147113][ T4135] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 2088.247123][ T4135] usb 5-1: Using ep0 maxpacket: 8
[ 2088.377444][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2088.388725][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2088.399520][ T4135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2088.412904][ T4135] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2088.422541][ T4135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2088.434203][ T4135] usb 5-1: config 0 descriptor??
[ 2088.967112][ T4135] usbhid 5-1:0.0: can't add hid device: -71
[ 2088.973285][ T4135] usbhid: probe of 5-1:0.0 failed with error -71
[ 2088.987809][ T4135] usb 5-1: USB disconnect, device number 11
15:23:17 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:17 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x65, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:17 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300))
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:17 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4d, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:17 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:17 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

[ 2090.542260][T25592] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2090.542260][T25592]    program syz-executor.2 not setting count and/or reply_len properly
15:23:18 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2)

15:23:18 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2090.717026][T22337] usb 5-1: new high-speed USB device number 12 using dummy_hcd
15:23:18 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4d, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4b, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac877"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2090.857657][T22337] usb 5-1: Using ep0 maxpacket: 8
[ 2090.906422][T25609] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2090.906422][T25609]    program syz-executor.2 not setting count and/or reply_len properly
[ 2090.987797][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
15:23:18 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4b, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac877"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2091.032229][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
15:23:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x0)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2091.088359][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2091.124020][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2091.139826][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2091.159163][T22337] usb 5-1: config 0 descriptor??
[ 2091.368183][T25625] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2091.368183][T25625]    program syz-executor.2 not setting count and/or reply_len properly
[ 2091.403127][T25629] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2091.403127][T25629]    program syz-executor.1 not setting count and/or reply_len properly
[ 2091.737108][T22337] usbhid 5-1:0.0: can't add hid device: -71
[ 2091.743189][T22337] usbhid: probe of 5-1:0.0 failed with error -71
[ 2091.757792][T22337] usb 5-1: USB disconnect, device number 12
15:23:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x0)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:20 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x65, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:20 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:20 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4b, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac877"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:20 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:21 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2093.645986][T25653] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2093.645986][T25653]    program syz-executor.5 not setting count and/or reply_len properly
15:23:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x0)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2093.777026][T10684] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 2093.838999][T25667] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2093.838999][T25667]    program syz-executor.2 not setting count and/or reply_len properly
[ 2093.879589][T10684] usb 5-1: Using ep0 maxpacket: 8
15:23:21 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:21 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2093.964493][T25673] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2093.964493][T25673]    program syz-executor.1 not setting count and/or reply_len properly
[ 2094.017441][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2094.041431][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
15:23:21 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x354, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x314, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x46, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x354}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2094.081038][T10684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2094.085823][T25679] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2094.085823][T25679]    program syz-executor.5 not setting count and/or reply_len properly
[ 2094.095806][T10684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2094.121221][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2094.131781][T10684] usb 5-1: config 0 descriptor??
15:23:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x34c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x30c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x3d, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:21 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x338, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2f8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x2a, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a29"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x338}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2094.593602][T25698] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2094.593602][T25698]    program syz-executor.5 not setting count and/or reply_len properly
[ 2094.689738][T10684] usbhid 5-1:0.0: can't add hid device: -71
[ 2094.695849][T10684] usbhid: probe of 5-1:0.0 failed with error -71
[ 2094.730641][T10684] usb 5-1: USB disconnect, device number 13
[ 2094.730854][T25701] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2094.730854][T25701]    program syz-executor.1 not setting count and/or reply_len properly
15:23:23 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x76, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba7"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x338, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2f8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x2a, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a29"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x338}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:23 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:23 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0x0, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:23 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2096.598171][T25717] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2096.598171][T25717]    program syz-executor.1 not setting count and/or reply_len properly
[ 2096.661593][T25722] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2096.661593][T25722]    program syz-executor.5 not setting count and/or reply_len properly
15:23:24 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0x0, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2096.767806][   T17] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 2096.872588][T25732] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2096.872588][T25732]    program syz-executor.1 not setting count and/or reply_len properly
[ 2096.892072][   T17] usb 5-1: Using ep0 maxpacket: 8
15:23:24 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:24 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0x0, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:24 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:24 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2097.047030][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2097.076193][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2097.098759][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2097.140497][   T17] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2097.162235][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2097.176121][   T17] usb 5-1: config 0 descriptor??
[ 2097.232742][T25742] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2097.232742][T25742]    program syz-executor.5 not setting count and/or reply_len properly
15:23:24 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x30c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2cc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x30c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:24 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0x0, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2097.660075][   T17] keytouch 0003:0926:3333.0083: fixing up Keytouch IEC report descriptor
[ 2097.673249][   T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0083/input/input135
[ 2097.765049][   T17] keytouch 0003:0926:3333.0083: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2097.864733][T22337] usb 5-1: USB disconnect, device number 14
15:23:27 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x76, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba7"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:27 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:27 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:27 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x14, 0x1, "33c1cb7f164e490888e56232bd3a199b"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:27 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002810e8310a60715859e7701020301090283070204209007090484020d7891d90309210600480122af0809218100000122260909050f08200000208039110df42af58b5030b5d580c235c6f662ae25515eb6ee7cd8c4abcda9d73c044af6b6f2cf293359912df6b7b1a04b3fbcfed981182264b235da0636788e3a467ae22c00fa138addfebc3051a6901d2d34d62b629bed8150f27f8a6c01dc2af92a7e49b657bd68cda52eb5139522ab21c1b86d53ac7848f3a7011b231dba7c668963cd3c9d9f3ba0482be429516d1fdd80450c743fbe60464642db3c44a123c9560f00edd895cf013fa4c747b6eeaae4c7f44365186d4d11b78fe0e60544134883ae1f3b368a2a4990eb836cb97ed98d8dd4ed01f9e3da3a9bea9c0d860b9a155d5942a6206e6f272597def552e3d46a875d9c7dedde6590d2d3bfc29f3107952659bea8a240899620fc0ab1ca6bfff7a0296330c91e00926be779b72c8d2ec8bc09050300ff036e8006a323d1a12292a6eac4e022a9565e7b2d3a1d2441bc6817b9baa61bdc6bbbc91ea36f920d03308cabcc89320f6b559e38f181e3ea492658501ed900dbc5689705b5e00501162ae24f42bf2aa82ee10320edaea0ecb7c7a569202d53f40c6400b4d9a985cc6c1116b5ba358221aa89ed61762ee65f25bd262ab0d0e6fa7ca9095437d88603545308cddbfcaf7e26d72c93e3d541ec21d0e36bbe236f1dd194722ce9912609050a0820000900810725010203470009050200200000062055081eeb1bd08e2c4adf91a51e54a64124c21862f2ca04001e1ab02788101e46b44bd20a734735c95d42af46f74b91413b8b536966f4bc2882eb61bb060ad3172347102d852ee1ff18277a52339209bb1f49a6001f09050a00400008200307250102de05005e24db4e2fb1d3677122dd073c16ea76b3ee9db51cd2d25074868ad65c103f8a60d247873c5a6e33adcc32bd0b20c6350d83c11fea3dbfda477547b5cade436a64ceed995d3caf3a9f76cee14a9ed5c794c068269fa20a10525f673efa0809050610400015400109050f04feffffff02de3e293a81777d6ad29ddf2eaf8089cfde0eb315251a8b81d9a7d2f323368022ef863073d6b6ef8a6d1d2205264ecbfea9572b327f6b434378a24255a6da70dc94508f78c8bd18ca4db0ade3cf5f3be81086cb777c3bbd251afa24e569e7aabe6fbd15fe7703227e68f19552f7972478b92925b7139848d91c5227de1d66f8"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2099.707480][T25810] sg_write: 4 callbacks suppressed
[ 2099.707513][T25810] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2099.707513][T25810]    program syz-executor.2 not setting count and/or reply_len properly
[ 2099.756812][T25809] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2099.756812][T25809]    program syz-executor.5 not setting count and/or reply_len properly
15:23:27 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2099.857024][T10684] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 2099.949875][T10684] usb 5-1: Using ep0 maxpacket: 8
[ 2100.054965][T25825] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2100.054965][T25825]    program syz-executor.1 not setting count and/or reply_len properly
[ 2100.073273][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2100.094226][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
15:23:27 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:27 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, 0x0)
r1 = open(0x0, 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:27 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x14, 0x1, "33c1cb7f164e490888e56232bd3a199b"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2100.105040][T10684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2100.123746][T10684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2100.133916][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2100.147785][T10684] usb 5-1: config 0 descriptor??
15:23:27 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0))
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2100.281237][T25835] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2100.281237][T25835]    program syz-executor.5 not setting count and/or reply_len properly
15:23:27 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0))
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:27 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x14, 0x1, "33c1cb7f164e490888e56232bd3a199b"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2100.454095][T25843] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2100.454095][T25843]    program syz-executor.1 not setting count and/or reply_len properly
[ 2100.583895][T25848] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2100.583895][T25848]    program syz-executor.5 not setting count and/or reply_len properly
[ 2100.628651][T10684] keytouch 0003:0926:3333.0084: fixing up Keytouch IEC report descriptor
[ 2100.665439][T10684] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0084/input/input136
[ 2100.760145][T10684] keytouch 0003:0926:3333.0084: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2100.835340][T10684] usb 5-1: USB disconnect, device number 15
15:23:30 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x76, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba7"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x13, 0x1, "33c1cb7f164e490888e56232bd3a19"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:30 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0))
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x14, 0x1, "33c1cb7f164e490888e56232bd3a199b"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:30 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2102.848356][T25907] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2102.848356][T25907]    program syz-executor.5 not setting count and/or reply_len properly
15:23:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2103.027066][T10684] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 2103.086806][T25914] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2103.086806][T25914]    program syz-executor.2 not setting count and/or reply_len properly
[ 2103.147476][T10684] usb 5-1: Using ep0 maxpacket: 8
15:23:30 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x13, 0x1, "33c1cb7f164e490888e56232bd3a19"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:30 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x13, 0x1, "33c1cb7f164e490888e56232bd3a19"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2103.285314][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2103.309441][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2103.341707][T10684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2103.430071][T10684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
15:23:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x13, 0x1, "33c1cb7f164e490888e56232bd3a19"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2103.479376][T25931] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2103.479376][T25931]    program syz-executor.5 not setting count and/or reply_len properly
[ 2103.484501][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2103.546741][T10684] usb 5-1: config 0 descriptor??
15:23:31 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x358, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x318, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x11, 0x1, "33c1cb7f164e490888e56232bd"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x358}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2103.802787][T25937] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2103.802787][T25937]    program syz-executor.1 not setting count and/or reply_len properly
[ 2104.037760][T10684] keytouch 0003:0926:3333.0085: fixing up Keytouch IEC report descriptor
[ 2104.054807][T10684] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0085/input/input137
[ 2104.145853][T10684] keytouch 0003:0926:3333.0085: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2104.257509][T27550] usb 5-1: USB disconnect, device number 16
15:23:33 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x7e, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c16204"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:33 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x354, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x314, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0xd, 0x1, "33c1cb7f164e490888"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x354}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x348, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x308, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x348}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:33 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x348, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x308, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x348}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2106.087592][T28250] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 2106.180537][T28250] usb 5-1: Using ep0 maxpacket: 8
[ 2106.249776][T26004] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2106.249776][T26004]    program syz-executor.1 not setting count and/or reply_len properly
15:23:33 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x348, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x308, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x348}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x344, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x304, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x344}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2106.309415][T28250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2106.343889][T28250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2106.393520][T28250] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
15:23:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x344, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x304, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x344}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2106.479879][T28250] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2106.492895][T28250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2106.556277][T28250] usb 5-1: config 0 descriptor??
15:23:34 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x344, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x304, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x344}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2107.034877][T26028] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2107.034877][T26028]    program syz-executor.5 not setting count and/or reply_len properly
[ 2107.053477][T28250] keytouch 0003:0926:3333.0086: fixing up Keytouch IEC report descriptor
[ 2107.066513][T28250] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0086/input/input138
[ 2107.180412][T28250] keytouch 0003:0926:3333.0086: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2107.257964][T10684] usb 5-1: USB disconnect, device number 17
15:23:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:36 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x7e, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c16204"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:36 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:36 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:36 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2109.023661][T26075] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2109.023661][T26075]    program syz-executor.1 not setting count and/or reply_len properly
[ 2109.065692][T26076] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2109.065692][T26076]    program syz-executor.5 not setting count and/or reply_len properly
15:23:36 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2109.217086][ T4135] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 2109.319387][ T4135] usb 5-1: Using ep0 maxpacket: 8
[ 2109.329109][T26091] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2109.329109][T26091]    program syz-executor.1 not setting count and/or reply_len properly
15:23:36 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:36 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:36 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2109.457069][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2109.484312][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.542673][ T4135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2109.606932][T26102] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2109.606932][T26102]    program syz-executor.5 not setting count and/or reply_len properly
[ 2109.608313][ T4135] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
15:23:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2109.666651][ T4135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2109.688143][ T4135] usb 5-1: config 0 descriptor??
15:23:37 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x354, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:37 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2109.906440][T26117] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2109.906440][T26117]    program syz-executor.5 not setting count and/or reply_len properly
[ 2110.197729][ T4135] keytouch 0003:0926:3333.0087: fixing up Keytouch IEC report descriptor
[ 2110.215207][ T4135] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0087/input/input139
[ 2110.306934][ T4135] keytouch 0003:0926:3333.0087: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2110.404998][ T4135] usb 5-1: USB disconnect, device number 18
15:23:39 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:39 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x7e, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c16204"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:39 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:39 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x354, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2112.223814][T26169] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2112.223814][T26169]    program syz-executor.5 not setting count and/or reply_len properly
[ 2112.279998][T22337] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 2112.380105][T22337] usb 5-1: Using ep0 maxpacket: 8
15:23:40 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:40 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2112.497395][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2112.517607][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2112.545496][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2112.582085][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
15:23:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2112.670084][T26186] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2112.670084][T26186]    program syz-executor.5 not setting count and/or reply_len properly
[ 2112.699479][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2112.713980][T22337] usb 5-1: config 0 descriptor??
15:23:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2112.843997][T26201] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2112.843997][T26201]    program syz-executor.1 not setting count and/or reply_len properly
15:23:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:40 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2113.076765][T26209] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2113.076765][T26209]    program syz-executor.5 not setting count and/or reply_len properly
[ 2113.207816][T22337] keytouch 0003:0926:3333.0088: fixing up Keytouch IEC report descriptor
[ 2113.230783][T22337] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0088/input/input140
[ 2113.323199][T22337] keytouch 0003:0926:3333.0088: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2113.426361][T22337] usb 5-1: USB disconnect, device number 19
15:23:42 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x82, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:42 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:42 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:43 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:43 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:43 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff8"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:43 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2115.776023][T26285] ptrace attach of "/root/syz-executor.3"[26281] was attempted by "/root/syz-executor.3"[26285]
15:23:43 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, 0x0)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2115.897713][T10684] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 2115.976190][T26292] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2115.976190][T26292]    program syz-executor.5 not setting count and/or reply_len properly
[ 2116.001369][T10684] usb 5-1: Using ep0 maxpacket: 8
[ 2116.147330][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2116.158898][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2116.169281][T10684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2116.182236][T10684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2116.191321][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2116.200731][T10684] usb 5-1: config 0 descriptor??
[ 2116.687761][T10684] keytouch 0003:0926:3333.0089: fixing up Keytouch IEC report descriptor
[ 2116.705365][T10684] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0089/input/input141
[ 2116.796545][T10684] keytouch 0003:0926:3333.0089: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2116.894948][T27550] usb 5-1: USB disconnect, device number 20
15:23:45 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x82, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, 0x0)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:45 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2118.238734][T26346] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2118.238734][T26346]    program syz-executor.5 not setting count and/or reply_len properly
15:23:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, 0x0)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2118.437098][ T4135] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 2118.540903][ T4135] usb 5-1: Using ep0 maxpacket: 8
15:23:46 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2118.593646][T26363] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2118.593646][T26363]    program syz-executor.5 not setting count and/or reply_len properly
[ 2118.670319][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2118.693308][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2118.720178][ T4135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2118.762380][ T4135] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2118.777062][ T4135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2118.838699][ T4135] usb 5-1: config 0 descriptor??
15:23:46 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:46 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, 0x0)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r1 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000300)=0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2118.935123][T26375] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2118.935123][T26375]    program syz-executor.2 not setting count and/or reply_len properly
[ 2119.049612][T26378] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2119.049612][T26378]    program syz-executor.5 not setting count and/or reply_len properly
[ 2119.225713][T26379] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2119.225713][T26379]    program syz-executor.1 not setting count and/or reply_len properly
[ 2119.317782][ T4135] keytouch 0003:0926:3333.008A: fixing up Keytouch IEC report descriptor
[ 2119.344913][ T4135] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.008A/input/input142
[ 2119.424612][ T4135] keytouch 0003:0926:3333.008A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2119.523479][ T4135] usb 5-1: USB disconnect, device number 21
15:23:48 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x82, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:48 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:48 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2121.388442][T26434] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2121.388442][T26434]    program syz-executor.1 not setting count and/or reply_len properly
[ 2121.413963][T26443] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2121.413963][T26443]    program syz-executor.5 not setting count and/or reply_len properly
15:23:49 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x84, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cf"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2121.442543][T26445] ptrace attach of "/root/syz-executor.0"[26441] was attempted by "/root/syz-executor.0"[26445]
15:23:49 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:49 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2121.527072][ T4135] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 2121.628195][ T4135] usb 5-1: Using ep0 maxpacket: 8
[ 2121.758019][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2121.795918][T26457] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2121.795918][T26457]    program syz-executor.1 not setting count and/or reply_len properly
[ 2121.817202][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2121.830423][T26455] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2121.830423][T26455]    program syz-executor.5 not setting count and/or reply_len properly
[ 2121.839712][ T4135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2121.911715][ T4135] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2121.932392][ T4135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2121.944492][ T4135] usb 5-1: config 0 descriptor??
15:23:49 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:49 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:49 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2122.215499][T26468] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2122.215499][T26468]    program syz-executor.5 not setting count and/or reply_len properly
[ 2122.249746][T26477] ptrace attach of "/root/syz-executor.3"[26473] was attempted by "/root/syz-executor.3"[26477]
15:23:49 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:49 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2122.427785][ T4135] keytouch 0003:0926:3333.008B: fixing up Keytouch IEC report descriptor
[ 2122.458323][ T4135] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.008B/input/input143
[ 2122.559243][ T4135] keytouch 0003:0926:3333.008B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2122.645836][ T4135] usb 5-1: USB disconnect, device number 22
15:23:50 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2123.467088][T27550] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 2123.557081][T27550] usb 5-1: Using ep0 maxpacket: 8
[ 2123.677502][T27550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2123.688801][T27550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2123.699437][T27550] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2123.712829][T27550] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2123.722564][T27550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2123.734407][T27550] usb 5-1: config 0 descriptor??
[ 2124.217980][T27550] keytouch 0003:0926:3333.008C: fixing up Keytouch IEC report descriptor
[ 2124.235133][T27550] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.008C/input/input144
[ 2124.329996][T27550] keytouch 0003:0926:3333.008C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2124.426936][ T4135] usb 5-1: USB disconnect, device number 23
15:23:52 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x84, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cf"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:52 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:52 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, 0x0)
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2124.699623][T26570] sg_write: 2 callbacks suppressed
[ 2124.699743][T26570] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2124.699743][T26570]    program syz-executor.5 not setting count and/or reply_len properly
[ 2124.712122][T26578] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2124.712122][T26578]    program syz-executor.1 not setting count and/or reply_len properly
15:23:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:52 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:52 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:52 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2125.128140][T26586] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2125.128140][T26586]    program syz-executor.5 not setting count and/or reply_len properly
15:23:52 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:52 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2125.447337][ T4135] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 2125.504388][T26604] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2125.504388][T26604]    program syz-executor.1 not setting count and/or reply_len properly
[ 2125.559862][ T4135] usb 5-1: Using ep0 maxpacket: 8
[ 2125.677377][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2125.689212][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2125.699322][ T4135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2125.712805][ T4135] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2125.722443][ T4135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2125.731633][ T4135] usb 5-1: config 0 descriptor??
[ 2126.207625][ T4135] keytouch 0003:0926:3333.008D: fixing up Keytouch IEC report descriptor
[ 2126.220802][ T4135] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.008D/input/input145
[ 2126.304739][ T4135] keytouch 0003:0926:3333.008D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2126.414480][T22337] usb 5-1: USB disconnect, device number 24
15:23:55 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x84, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cf"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:55 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:55 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2127.774456][T26664] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2127.774456][T26664]    program syz-executor.1 not setting count and/or reply_len properly
15:23:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:55 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2127.939514][ T4135] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 2128.037577][ T4135] usb 5-1: Using ep0 maxpacket: 8
[ 2128.063218][T26676] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2128.063218][T26676]    program syz-executor.1 not setting count and/or reply_len properly
[ 2128.157626][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2128.196827][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2128.266621][ T4135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2128.307245][ T4135] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2128.316767][ T4135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2128.327741][ T4135] usb 5-1: config 0 descriptor??
15:23:55 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:55 executing program 1:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2128.590869][T26694] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2128.590869][T26694]    program syz-executor.5 not setting count and/or reply_len properly
[ 2128.701501][T26696] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2128.701501][T26696]    program syz-executor.2 not setting count and/or reply_len properly
[ 2128.807072][T22337] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 2128.807825][ T4135] keytouch 0003:0926:3333.008E: fixing up Keytouch IEC report descriptor
[ 2128.836593][ T4135] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.008E/input/input146
[ 2128.897706][T22337] usb 2-1: Using ep0 maxpacket: 8
[ 2128.929309][ T4135] keytouch 0003:0926:3333.008E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2129.035524][ T4135] usb 5-1: USB disconnect, device number 25
[ 2129.048054][T22337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2129.096000][T22337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2129.115135][T22337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2129.146372][T22337] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2129.156795][T22337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2129.177497][T22337] usb 2-1: config 0 descriptor??
[ 2129.667938][T22337] keytouch 0003:0926:3333.008F: fixing up Keytouch IEC report descriptor
[ 2129.687404][T22337] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.008F/input/input147
[ 2129.770952][T22337] keytouch 0003:0926:3333.008F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[ 2129.913361][T22337] usb 2-1: USB disconnect, device number 7
15:23:58 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:58 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x85, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc2"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:58 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002810e8310a60715859e7701020301090283070204209007090484020d7891d90309210600480122af0809218100000122260909050f08200000208039110df42af58b5030b5d580c235c6f662ae25515eb6ee7cd8c4abcda9d73c044af6b6f2cf293359912df6b7b1a04b3fbcfed981182264b235da0636788e3a467ae22c00fa138addfebc3051a6901d2d34d62b629bed8150f27f8a6c01dc2af92a7e49b657bd68cda52eb5139522ab21c1b86d53ac7848f3a7011b231dba7c668963cd3c9d9f3ba0482be429516d1fdd80450c743fbe60464642db3c44a123c9560f00edd895cf013fa4c747b6eeaae4c7f44365186d4d11b78fe0e60544134883ae1f3b368a2a4990eb836cb97ed98d8dd4ed01f9e3da3a9bea9c0d860b9a155d5942a6206e6f272597def552e3d46a875d9c7dedde6590d2d3bfc29f3107952659bea8a240899620fc0ab1ca6bfff7a0296330c91e00926be779b72c8d2ec8bc09050300ff036e8006a323d1a12292a6eac4e022a9565e7b2d3a1d2441bc6817b9baa61bdc6bbbc91ea36f920d03308cabcc89320f6b559e38f181e3ea492658501ed900dbc5689705b5e00501162ae24f42bf2aa82ee10320edaea0ecb7c7a569202d53f40c6400b4d9a985cc6c1116b5ba358221aa89ed61762ee65f25bd262ab0d0e6fa7ca9095437d88603545308cddbfcaf7e26d72c93e3d541ec21d0e36bbe236f1dd194722ce9912609050a0820000900810725010203470009050200200000062055081eeb1bd08e2c4adf91a51e54a64124c21862f2ca04001e1ab02788101e46b44bd20a734735c95d42af46f74b91413b8b536966f4bc2882eb61bb060ad3172347102d852ee1ff18277a52339209bb1f49a6001f09050a00400008200307250102de05005e24db4e2fb1d3677122dd073c16ea76b3ee9db51cd2d25074868ad65c103f8a60d247873c5a6e33adcc32bd0b20c6350d83c11fea3dbfda477547b5cade436a64ceed995d3caf3a9f76cee14a9ed5c794c068269fa20a10525f673efa0809050610400015400109050f04feffffff02de3e293a81777d6ad29ddf2eaf8089cfde0eb315251a8b81d9a7d2f323368022ef863073d6b6ef8a6d1d2205264ecbfea9572b327f6b434378a24255a6da70dc94508f78c8bd18ca4db0ade3cf5f3be81086cb777c3bbd251afa24e569e7aabe6fbd15fe7703227e68f19552f7972478b92925b7139848d91c5227de1d66f8"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:58 executing program 1:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:23:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2130.871230][T26791] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2130.871230][T26791]    program syz-executor.5 not setting count and/or reply_len properly
[ 2131.003147][T26788] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2131.003147][T26788]    program syz-executor.2 not setting count and/or reply_len properly
[ 2131.087303][T22337] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 2131.117157][ T4135] usb 2-1: new high-speed USB device number 8 using dummy_hcd
15:23:58 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2131.187449][T22337] usb 5-1: Using ep0 maxpacket: 8
15:23:58 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2131.217916][ T4135] usb 2-1: Using ep0 maxpacket: 8
[ 2131.307386][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2131.333894][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2131.349395][ T4135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2131.362007][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2131.373518][ T4135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2131.385447][ T4135] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2131.398982][ T4135] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2131.431903][T26809] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2131.431903][T26809]    program syz-executor.5 not setting count and/or reply_len properly
[ 2131.432669][ T4135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2131.459944][T26814] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2131.459944][T26814]    program syz-executor.2 not setting count and/or reply_len properly
[ 2131.483350][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2131.485662][ T4135] usb 2-1: config 0 descriptor??
15:23:59 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:23:59 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2131.550782][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2131.604128][T22337] usb 5-1: config 0 descriptor??
15:23:59 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:23:59 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2131.907902][T26828] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2131.907902][T26828]    program syz-executor.5 not setting count and/or reply_len properly
15:23:59 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2132.028095][ T4135] keytouch 0003:0926:3333.0090: fixing up Keytouch IEC report descriptor
[ 2132.052019][ T4135] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0090/input/input148
[ 2132.068728][T26832] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2132.068728][T26832]    program syz-executor.2 not setting count and/or reply_len properly
[ 2132.118254][T22337] keytouch 0003:0926:3333.0091: fixing up Keytouch IEC report descriptor
[ 2132.160294][T22337] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0091/input/input149
[ 2132.168892][ T4135] keytouch 0003:0926:3333.0090: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[ 2132.193671][T26838] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2132.193671][T26838]    program syz-executor.5 not setting count and/or reply_len properly
[ 2132.268733][ T4135] usb 2-1: USB disconnect, device number 8
[ 2132.301327][T22337] keytouch 0003:0926:3333.0091: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2132.362426][T22337] usb 5-1: USB disconnect, device number 26
15:24:01 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x85, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc2"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:01 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:01 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:01 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:01 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2133.963715][T26910] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2133.963715][T26910]    program syz-executor.5 not setting count and/or reply_len properly
15:24:01 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:01 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2134.142710][T26923] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2134.142710][T26923]    program syz-executor.5 not setting count and/or reply_len properly
[ 2134.237171][T10684] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 2134.337480][T10684] usb 5-1: Using ep0 maxpacket: 8
[ 2134.467466][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2134.478739][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2134.489910][T10684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2134.503483][T10684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2134.513027][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2134.524502][T10684] usb 5-1: config 0 descriptor??
15:24:02 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:02 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:02 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:02 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2134.997977][T10684] keytouch 0003:0926:3333.0092: fixing up Keytouch IEC report descriptor
[ 2135.027370][T10684] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0092/input/input150
[ 2135.118806][T10684] keytouch 0003:0926:3333.0092: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2135.203237][T10684] usb 5-1: USB disconnect, device number 27
15:24:04 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x85, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc2"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:04 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:04 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002810e8310a60715859e7701020301090283070204209007090484020d7891d90309210600480122af0809218100000122260909050f08200000208039110df42af58b5030b5d580c235c6f662ae25515eb6ee7cd8c4abcda9d73c044af6b6f2cf293359912df6b7b1a04b3fbcfed981182264b235da0636788e3a467ae22c00fa138addfebc3051a6901d2d34d62b629bed8150f27f8a6c01dc2af92a7e49b657bd68cda52eb5139522ab21c1b86d53ac7848f3a7011b231dba7c668963cd3c9d9f3ba0482be429516d1fdd80450c743fbe60464642db3c44a123c9560f00edd895cf013fa4c747b6eeaae4c7f44365186d4d11b78fe0e60544134883ae1f3b368a2a4990eb836cb97ed98d8dd4ed01f9e3da3a9bea9c0d860b9a155d5942a6206e6f272597def552e3d46a875d9c7dedde6590d2d3bfc29f3107952659bea8a240899620fc0ab1ca6bfff7a0296330c91e00926be779b72c8d2ec8bc09050300ff036e8006a323d1a12292a6eac4e022a9565e7b2d3a1d2441bc6817b9baa61bdc6bbbc91ea36f920d03308cabcc89320f6b559e38f181e3ea492658501ed900dbc5689705b5e00501162ae24f42bf2aa82ee10320edaea0ecb7c7a569202d53f40c6400b4d9a985cc6c1116b5ba358221aa89ed61762ee65f25bd262ab0d0e6fa7ca9095437d88603545308cddbfcaf7e26d72c93e3d541ec21d0e36bbe236f1dd194722ce9912609050a0820000900810725010203470009050200200000062055081eeb1bd08e2c4adf91a51e54a64124c21862f2ca04001e1ab02788101e46b44bd20a734735c95d42af46f74b91413b8b536966f4bc2882eb61bb060ad3172347102d852ee1ff18277a52339209bb1f49a6001f09050a00400008200307250102de05005e24db4e2fb1d3677122dd073c16ea76b3ee9db51cd2d25074868ad65c103f8a60d247873c5a6e33adcc32bd0b20c6350d83c11fea3dbfda477547b5cade436a64ceed995d3caf3a9f76cee14a9ed5c794c068269fa20a10525f673efa0809050610400015400109050f04feffffff02de3e293a81777d6ad29ddf2eaf8089cfde0eb315251a8b81d9a7d2f323368022ef863073d6b6ef8a6d1d2205264ecbfea9572b327f6b434378a24255a6da70dc94508f78c8bd18ca4db0ade3cf5f3be81086cb777c3bbd251afa24e569e7aabe6fbd15fe7703227e68f19552f7972478b92925b7139848d91c5227de1d66f8"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2137.275014][T27006] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2137.275014][T27006]    program syz-executor.2 not setting count and/or reply_len properly
[ 2137.293506][T10684] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 2137.409609][T10684] usb 5-1: Using ep0 maxpacket: 8
[ 2137.547113][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2137.561940][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2137.573669][T10684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2137.591260][T10684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2137.601196][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2137.618357][T10684] usb 5-1: config 0 descriptor??
15:24:05 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:05 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, 0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2137.744256][T27023] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2137.744256][T27023]    program syz-executor.5 not setting count and/or reply_len properly
15:24:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x0)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2137.853078][T27030] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2137.853078][T27030]    program syz-executor.5 not setting count and/or reply_len properly
15:24:05 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2137.904898][T27026] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2137.904898][T27026]    program syz-executor.2 not setting count and/or reply_len properly
[ 2138.005673][T27033] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2138.005673][T27033]    program syz-executor.5 not setting count and/or reply_len properly
[ 2138.090295][T10684] keytouch 0003:0926:3333.0093: fixing up Keytouch IEC report descriptor
[ 2138.117550][T10684] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0093/input/input151
[ 2138.199029][T10684] keytouch 0003:0926:3333.0093: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2138.295582][T22337] usb 5-1: USB disconnect, device number 28
15:24:07 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:07 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
socket(0x22, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000300)=0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:07 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002810e8310a60715859e7701020301090283070204209007090484020d7891d90309210600480122af0809218100000122260909050f08200000208039110df42af58b5030b5d580c235c6f662ae25515eb6ee7cd8c4abcda9d73c044af6b6f2cf293359912df6b7b1a04b3fbcfed981182264b235da0636788e3a467ae22c00fa138addfebc3051a6901d2d34d62b629bed8150f27f8a6c01dc2af92a7e49b657bd68cda52eb5139522ab21c1b86d53ac7848f3a7011b231dba7c668963cd3c9d9f3ba0482be429516d1fdd80450c743fbe60464642db3c44a123c9560f00edd895cf013fa4c747b6eeaae4c7f44365186d4d11b78fe0e60544134883ae1f3b368a2a4990eb836cb97ed98d8dd4ed01f9e3da3a9bea9c0d860b9a155d5942a6206e6f272597def552e3d46a875d9c7dedde6590d2d3bfc29f3107952659bea8a240899620fc0ab1ca6bfff7a0296330c91e00926be779b72c8d2ec8bc09050300ff036e8006a323d1a12292a6eac4e022a9565e7b2d3a1d2441bc6817b9baa61bdc6bbbc91ea36f920d03308cabcc89320f6b559e38f181e3ea492658501ed900dbc5689705b5e00501162ae24f42bf2aa82ee10320edaea0ecb7c7a569202d53f40c6400b4d9a985cc6c1116b5ba358221aa89ed61762ee65f25bd262ab0d0e6fa7ca9095437d88603545308cddbfcaf7e26d72c93e3d541ec21d0e36bbe236f1dd194722ce9912609050a0820000900810725010203470009050200200000062055081eeb1bd08e2c4adf91a51e54a64124c21862f2ca04001e1ab02788101e46b44bd20a734735c95d42af46f74b91413b8b536966f4bc2882eb61bb060ad3172347102d852ee1ff18277a52339209bb1f49a6001f09050a00400008200307250102de05005e24db4e2fb1d3677122dd073c16ea76b3ee9db51cd2d25074868ad65c103f8a60d247873c5a6e33adcc32bd0b20c6350d83c11fea3dbfda477547b5cade436a64ceed995d3caf3a9f76cee14a9ed5c794c068269fa20a10525f673efa0809050610400015400109050f04feffffff02de3e293a81777d6ad29ddf2eaf8089cfde0eb315251a8b81d9a7d2f323368022ef863073d6b6ef8a6d1d2205264ecbfea9572b327f6b434378a24255a6da70dc94508f78c8bd18ca4db0ade3cf5f3be81086cb777c3bbd251afa24e569e7aabe6fbd15fe7703227e68f19552f7972478b92925b7139848d91c5227de1d66f8"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:07 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:07 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2140.128739][T27074] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2140.128739][T27074]    program syz-executor.5 not setting count and/or reply_len properly
15:24:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2140.192832][T27078] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2140.192832][T27078]    program syz-executor.2 not setting count and/or reply_len properly
[ 2140.373468][   T17] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 2140.479692][   T17] usb 5-1: Using ep0 maxpacket: 8
[ 2140.488139][T27092] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2140.488139][T27092]    program syz-executor.5 not setting count and/or reply_len properly
[ 2140.597133][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2140.608407][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2140.623072][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2140.636020][   T17] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2140.645185][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2140.654573][   T17] usb 5-1: config 0 descriptor??
15:24:08 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:08 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:08 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2140.870760][T27102] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2140.870760][T27102]    program syz-executor.5 not setting count and/or reply_len properly
[ 2140.906445][T27103] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2140.906445][T27103]    program syz-executor.2 not setting count and/or reply_len properly
15:24:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2141.128069][   T17] keytouch 0003:0926:3333.0094: fixing up Keytouch IEC report descriptor
[ 2141.161311][   T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0094/input/input152
15:24:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2141.269681][   T17] keytouch 0003:0926:3333.0094: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2141.333103][T27550] usb 5-1: USB disconnect, device number 29
15:24:09 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002810e8310a60715859e7701020301090283070204209007090484020d7891d90309210600480122af0809218100000122260909050f08200000208039110df42af58b5030b5d580c235c6f662ae25515eb6ee7cd8c4abcda9d73c044af6b6f2cf293359912df6b7b1a04b3fbcfed981182264b235da0636788e3a467ae22c00fa138addfebc3051a6901d2d34d62b629bed8150f27f8a6c01dc2af92a7e49b657bd68cda52eb5139522ab21c1b86d53ac7848f3a7011b231dba7c668963cd3c9d9f3ba0482be429516d1fdd80450c743fbe60464642db3c44a123c9560f00edd895cf013fa4c747b6eeaae4c7f44365186d4d11b78fe0e60544134883ae1f3b368a2a4990eb836cb97ed98d8dd4ed01f9e3da3a9bea9c0d860b9a155d5942a6206e6f272597def552e3d46a875d9c7dedde6590d2d3bfc29f3107952659bea8a240899620fc0ab1ca6bfff7a0296330c91e00926be779b72c8d2ec8bc09050300ff036e8006a323d1a12292a6eac4e022a9565e7b2d3a1d2441bc6817b9baa61bdc6bbbc91ea36f920d03308cabcc89320f6b559e38f181e3ea492658501ed900dbc5689705b5e00501162ae24f42bf2aa82ee10320edaea0ecb7c7a569202d53f40c6400b4d9a985cc6c1116b5ba358221aa89ed61762ee65f25bd262ab0d0e6fa7ca9095437d88603545308cddbfcaf7e26d72c93e3d541ec21d0e36bbe236f1dd194722ce9912609050a0820000900810725010203470009050200200000062055081eeb1bd08e2c4adf91a51e54a64124c21862f2ca04001e1ab02788101e46b44bd20a734735c95d42af46f74b91413b8b536966f4bc2882eb61bb060ad3172347102d852ee1ff18277a52339209bb1f49a6001f09050a00400008200307250102de05005e24db4e2fb1d3677122dd073c16ea76b3ee9db51cd2d25074868ad65c103f8a60d247873c5a6e33adcc32bd0b20c6350d83c11fea3dbfda477547b5cade436a64ceed995d3caf3a9f76cee14a9ed5c794c068269fa20a10525f673efa0809050610400015400109050f04feffffff02de3e293a81777d6ad29ddf2eaf8089cfde0eb315251a8b81d9a7d2f323368022ef863073d6b6ef8a6d1d2205264ecbfea9572b327f6b434378a24255a6da70dc94508f78c8bd18ca4db0ade3cf5f3be81086cb777c3bbd251afa24e569e7aabe6fbd15fe7703227e68f19552f7972478b92925b7139848d91c5227de1d66f8"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2142.167073][   T17] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 2142.257438][   T17] usb 5-1: Using ep0 maxpacket: 8
[ 2142.377284][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2142.388571][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2142.400032][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2142.413760][   T17] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2142.423817][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2142.435469][   T17] usb 5-1: config 0 descriptor??
[ 2142.917819][   T17] keytouch 0003:0926:3333.0095: fixing up Keytouch IEC report descriptor
[ 2142.934695][   T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0095/input/input153
[ 2143.015191][   T17] keytouch 0003:0926:3333.0095: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
15:24:10 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:10 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2143.124552][T28250] usb 5-1: USB disconnect, device number 30
[ 2143.389907][T27193] sg_write: 2 callbacks suppressed
[ 2143.390654][T27193] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2143.390654][T27193]    program syz-executor.5 not setting count and/or reply_len properly
15:24:11 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:11 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:11 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002810e8310a60715859e7701020301090283070204209007090484020d7891d90309210600480122af0809218100000122260909050f08200000208039110df42af58b5030b5d580c235c6f662ae25515eb6ee7cd8c4abcda9d73c044af6b6f2cf293359912df6b7b1a04b3fbcfed981182264b235da0636788e3a467ae22c00fa138addfebc3051a6901d2d34d62b629bed8150f27f8a6c01dc2af92a7e49b657bd68cda52eb5139522ab21c1b86d53ac7848f3a7011b231dba7c668963cd3c9d9f3ba0482be429516d1fdd80450c743fbe60464642db3c44a123c9560f00edd895cf013fa4c747b6eeaae4c7f44365186d4d11b78fe0e60544134883ae1f3b368a2a4990eb836cb97ed98d8dd4ed01f9e3da3a9bea9c0d860b9a155d5942a6206e6f272597def552e3d46a875d9c7dedde6590d2d3bfc29f3107952659bea8a240899620fc0ab1ca6bfff7a0296330c91e00926be779b72c8d2ec8bc09050300ff036e8006a323d1a12292a6eac4e022a9565e7b2d3a1d2441bc6817b9baa61bdc6bbbc91ea36f920d03308cabcc89320f6b559e38f181e3ea492658501ed900dbc5689705b5e00501162ae24f42bf2aa82ee10320edaea0ecb7c7a569202d53f40c6400b4d9a985cc6c1116b5ba358221aa89ed61762ee65f25bd262ab0d0e6fa7ca9095437d88603545308cddbfcaf7e26d72c93e3d541ec21d0e36bbe236f1dd194722ce9912609050a0820000900810725010203470009050200200000062055081eeb1bd08e2c4adf91a51e54a64124c21862f2ca04001e1ab02788101e46b44bd20a734735c95d42af46f74b91413b8b536966f4bc2882eb61bb060ad3172347102d852ee1ff18277a52339209bb1f49a6001f09050a00400008200307250102de05005e24db4e2fb1d3677122dd073c16ea76b3ee9db51cd2d25074868ad65c103f8a60d247873c5a6e33adcc32bd0b20c6350d83c11fea3dbfda477547b5cade436a64ceed995d3caf3a9f76cee14a9ed5c794c068269fa20a10525f673efa0809050610400015400109050f04feffffff02de3e293a81777d6ad29ddf2eaf8089cfde0eb315251a8b81d9a7d2f323368022ef863073d6b6ef8a6d1d2205264ecbfea9572b327f6b434378a24255a6da70dc94508f78c8bd18ca4db0ade3cf5f3be81086cb777c3bbd251afa24e569e7aabe6fbd15fe7703227e68f19552f7972478b92925b7139848d91c5227de1d66f8"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:11 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2143.975169][T27222] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2143.975169][T27222]    program syz-executor.5 not setting count and/or reply_len properly
15:24:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2144.062538][T27224] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2144.062538][T27224]    program syz-executor.2 not setting count and/or reply_len properly
[ 2144.157849][   T17] usb 5-1: new high-speed USB device number 31 using dummy_hcd
15:24:11 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2144.257449][   T17] usb 5-1: Using ep0 maxpacket: 8
[ 2144.309763][T27233] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2144.309763][T27233]    program syz-executor.5 not setting count and/or reply_len properly
[ 2144.400498][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2144.421477][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
15:24:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2144.446845][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2144.477192][   T17] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2144.526070][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2144.541823][T27237] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2144.541823][T27237]    program syz-executor.2 not setting count and/or reply_len properly
[ 2144.571540][   T17] usb 5-1: config 0 descriptor??
15:24:12 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2144.703296][T27242] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2144.703296][T27242]    program syz-executor.5 not setting count and/or reply_len properly
[ 2144.893906][T27245] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2144.893906][T27245]    program syz-executor.2 not setting count and/or reply_len properly
[ 2145.059998][   T17] keytouch 0003:0926:3333.0096: fixing up Keytouch IEC report descriptor
[ 2145.070436][   T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0096/input/input154
[ 2145.175855][   T17] keytouch 0003:0926:3333.0096: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2145.264090][T28250] usb 5-1: USB disconnect, device number 31
15:24:13 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:13 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2146.386287][T27292] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2146.386287][T27292]    program syz-executor.2 not setting count and/or reply_len properly
[ 2146.434616][T27290] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2146.434616][T27290]    program syz-executor.5 not setting count and/or reply_len properly
15:24:14 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:14 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002810e8310a60715859e7701020301090283070204209007090484020d7891d90309210600480122af0809218100000122260909050f08200000208039110df42af58b5030b5d580c235c6f662ae25515eb6ee7cd8c4abcda9d73c044af6b6f2cf293359912df6b7b1a04b3fbcfed981182264b235da0636788e3a467ae22c00fa138addfebc3051a6901d2d34d62b629bed8150f27f8a6c01dc2af92a7e49b657bd68cda52eb5139522ab21c1b86d53ac7848f3a7011b231dba7c668963cd3c9d9f3ba0482be429516d1fdd80450c743fbe60464642db3c44a123c9560f00edd895cf013fa4c747b6eeaae4c7f44365186d4d11b78fe0e60544134883ae1f3b368a2a4990eb836cb97ed98d8dd4ed01f9e3da3a9bea9c0d860b9a155d5942a6206e6f272597def552e3d46a875d9c7dedde6590d2d3bfc29f3107952659bea8a240899620fc0ab1ca6bfff7a0296330c91e00926be779b72c8d2ec8bc09050300ff036e8006a323d1a12292a6eac4e022a9565e7b2d3a1d2441bc6817b9baa61bdc6bbbc91ea36f920d03308cabcc89320f6b559e38f181e3ea492658501ed900dbc5689705b5e00501162ae24f42bf2aa82ee10320edaea0ecb7c7a569202d53f40c6400b4d9a985cc6c1116b5ba358221aa89ed61762ee65f25bd262ab0d0e6fa7ca9095437d88603545308cddbfcaf7e26d72c93e3d541ec21d0e36bbe236f1dd194722ce9912609050a0820000900810725010203470009050200200000062055081eeb1bd08e2c4adf91a51e54a64124c21862f2ca04001e1ab02788101e46b44bd20a734735c95d42af46f74b91413b8b536966f4bc2882eb61bb060ad3172347102d852ee1ff18277a52339209bb1f49a6001f09050a00400008200307250102de05005e24db4e2fb1d3677122dd073c16ea76b3ee9db51cd2d25074868ad65c103f8a60d247873c5a6e33adcc32bd0b20c6350d83c11fea3dbfda477547b5cade436a64ceed995d3caf3a9f76cee14a9ed5c794c068269fa20a10525f673efa0809050610400015400109050f04feffffff02de3e293a81777d6ad29ddf2eaf8089cfde0eb315251a8b81d9a7d2f323368022ef863073d6b6ef8a6d1d2205264ecbfea9572b327f6b434378a24255a6da70dc94508f78c8bd18ca4db0ade3cf5f3be81086cb777c3bbd251afa24e569e7aabe6fbd15fe7703227e68f19552f7972478b92925b7139848d91c5227de1d66f8"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2146.958609][T27299] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2146.958609][T27299]    program syz-executor.5 not setting count and/or reply_len properly
15:24:14 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2147.197071][   T17] usb 5-1: new high-speed USB device number 32 using dummy_hcd
15:24:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2147.309970][   T17] usb 5-1: Using ep0 maxpacket: 8
15:24:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2147.430629][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2147.475983][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2147.499699][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
15:24:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2147.524278][   T17] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2147.534683][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2147.545082][   T17] usb 5-1: config 0 descriptor??
[ 2148.027633][   T17] keytouch 0003:0926:3333.0097: fixing up Keytouch IEC report descriptor
[ 2148.041412][   T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0097/input/input155
[ 2148.125776][   T17] keytouch 0003:0926:3333.0097: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2148.234594][T22337] usb 5-1: USB disconnect, device number 32
15:24:16 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2149.323028][T27378] sg_write: 5 callbacks suppressed
[ 2149.329035][T27378] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2149.329035][T27378]    program syz-executor.2 not setting count and/or reply_len properly
15:24:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:17 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:17 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:17 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2150.011538][T27387] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2150.011538][T27387]    program syz-executor.5 not setting count and/or reply_len properly
15:24:17 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:17 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:17 executing program 5:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0x6, 0x24, 0x7, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffb, 0x3f, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff9, 0x5, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRES64, @ANYBLOB="d891a673c099a5730b5b76551a10eba263ca24f883bc5de415ca9c9a627952161cbf5d222d74d0517b315615a4a2a643cc3e16fb2f402c2b655a12f409c8869257", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x81, 0xed, 0x1a, 0x40, 0x471, 0x303, 0xb446, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x36, 0xae}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x81, 0xed, 0x1a, 0x40, 0x471, 0x303, 0xb446, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x36, 0xae}}]}}]}}, 0x0)
fchdir(0xffffffffffffffff)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x81, 0xed, 0x1a, 0x40, 0x471, 0x303, 0xb446, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x36, 0xae}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

[ 2150.243748][T27398] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2150.243748][T27398]    program syz-executor.2 not setting count and/or reply_len properly
15:24:17 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2150.287092][T22337] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 2150.387742][T22337] usb 5-1: Using ep0 maxpacket: 8
[ 2150.389583][T27409] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2150.389583][T27409]    program syz-executor.2 not setting count and/or reply_len properly
15:24:17 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2150.479565][T28250] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 2150.507524][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2150.527079][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2150.536293][T27414] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2150.536293][T27414]    program syz-executor.2 not setting count and/or reply_len properly
[ 2150.536888][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2150.536920][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
15:24:18 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2150.537061][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2150.639373][T22337] usb 5-1: config 0 descriptor??
[ 2150.672606][T27419] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2150.672606][T27419]    program syz-executor.2 not setting count and/or reply_len properly
[ 2150.707754][T28250] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2150.877142][T28250] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2150.888014][T28250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2150.896185][T28250] usb 6-1: Product: syz
[ 2150.900685][T28250] usb 6-1: Manufacturer: syz
[ 2150.905372][T28250] usb 6-1: SerialNumber: syz
[ 2151.117839][T22337] keytouch 0003:0926:3333.0098: fixing up Keytouch IEC report descriptor
[ 2151.135957][T22337] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0098/input/input156
[ 2151.225576][T22337] keytouch 0003:0926:3333.0098: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2151.325831][T10684] usb 5-1: USB disconnect, device number 33
[ 2151.822551][T27403] udc-core: couldn't find an available UDC or it's busy
[ 2151.829731][T27403] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2151.860673][T27403] udc-core: couldn't find an available UDC or it's busy
[ 2151.870552][T27403] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2151.897387][T27403] udc-core: couldn't find an available UDC or it's busy
[ 2151.904376][T27403] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2152.217142][T28250] cdc_ncm 6-1:1.0: bind() failure
[ 2152.237160][T28250] cdc_ncm: probe of 6-1:1.1 failed with error -71
[ 2152.257109][T28250] cdc_mbim: probe of 6-1:1.1 failed with error -71
15:24:19 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:19 executing program 2:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:19 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2152.277138][T28250] usbtest: probe of 6-1:1.1 failed with error -71
[ 2152.286082][T28250] usb 6-1: USB disconnect, device number 8
[ 2152.363573][T27472] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2152.363573][T27472]    program syz-executor.2 not setting count and/or reply_len properly
[ 2152.667090][T22337] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 2152.757388][T22337] usb 5-1: Using ep0 maxpacket: 8
[ 2152.877132][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2152.890318][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2152.901165][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2152.916716][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2152.926472][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2152.940148][T22337] usb 5-1: config 0 descriptor??
15:24:20 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:20 executing program 2:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2153.073156][T27489] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2153.073156][T27489]    program syz-executor.2 not setting count and/or reply_len properly
15:24:20 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:20 executing program 2:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2153.225276][T27488] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2153.225276][T27488]    program syz-executor.5 not setting count and/or reply_len properly
15:24:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2153.329983][T27495] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2153.329983][T27495]    program syz-executor.2 not setting count and/or reply_len properly
15:24:20 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2153.407833][T22337] keytouch 0003:0926:3333.0099: fixing up Keytouch IEC report descriptor
[ 2153.440358][T22337] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0099/input/input157
15:24:21 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2153.534457][T22337] keytouch 0003:0926:3333.0099: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
15:24:21 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2153.632963][T22337] usb 5-1: USB disconnect, device number 34
15:24:22 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:22 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2155.429173][T27556] sg_write: 3 callbacks suppressed
[ 2155.429220][T27556] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2155.429220][T27556]    program syz-executor.2 not setting count and/or reply_len properly
[ 2155.518677][T27553] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2155.518677][T27553]    program syz-executor.5 not setting count and/or reply_len properly
15:24:23 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:23 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(0xffffffffffffffff, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r1, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r1, &(0x7f00000000c0), 0x0)

15:24:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2156.101092][T27566] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2156.101092][T27566]    program syz-executor.2 not setting count and/or reply_len properly
15:24:23 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2156.347102][ T4135] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 2156.413276][T27576] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2156.413276][T27576]    program syz-executor.2 not setting count and/or reply_len properly
[ 2156.468490][ T4135] usb 5-1: Using ep0 maxpacket: 8
15:24:24 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
socket(0x22, 0x0, 0x0)
setreuid(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2156.607582][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2156.640285][ T4135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2156.694946][ T4135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2156.722718][ T4135] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
15:24:24 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2156.747345][ T4135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2156.765019][ T4135] usb 5-1: config 0 descriptor??
[ 2156.773833][T27583] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2156.773833][T27583]    program syz-executor.5 not setting count and/or reply_len properly
[ 2157.237836][ T4135] keytouch 0003:0926:3333.009A: fixing up Keytouch IEC report descriptor
[ 2157.255503][ T4135] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.009A/input/input158
[ 2157.344416][ T4135] keytouch 0003:0926:3333.009A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2157.459524][T28250] usb 5-1: USB disconnect, device number 35
15:24:25 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:25 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(0xffffffffffffffff, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r1, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r1, &(0x7f00000000c0), 0x0)

15:24:25 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2158.561177][T27641] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2158.561177][T27641]    program syz-executor.5 not setting count and/or reply_len properly
[ 2158.747099][T22337] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 2158.847406][T22337] usb 5-1: Using ep0 maxpacket: 8
[ 2158.967490][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2158.978797][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2158.989699][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2159.003288][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2159.012913][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2159.024258][T22337] usb 5-1: config 0 descriptor??
15:24:26 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:26 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x35c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x31c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "b2fa9780a20a1485096792d50cf85f548d93a60598415c4f00e3f4b20f95e5b45bf10b7a88a6015d5402421e8323204079bf339af1898c1a1b22f21afcc8824adc68ab0ee4f06e7bef83c7789202ad77b48e9f36d657b79b794e222e25e28e2248cbc19ad622c9ad0dd0e1a82072be81836f6ad807974829f735e9592328cf4540f86b20749a18d238bfab2a77657d853192d029ba13e75c08394ec575e936daeed49015ead356"}, @NL80211_BAND_2GHZ={0xbf, 0x0, "ae6c5656225c1ca045ad11b92f5c755054d70edfd7d870aff018270762415b34feff4152ab3b71ce2219f662542409e03c551c4d6e3c7011c75b9b1ffcea38d53bcf1f79d1e7d12cca363b7cdb0350d57015ba614ab094bf89cc8e0db7dee1eb62feb39869b48307d2dc2112414828b32bfa6be97eddd08c7c24a3c2ce7c2ff095742606c1c503954d624eb8709e43d7bb11e95a478a902f5cd2c7bd1377959d6dea36fdbaae196759f6519b3184cf6f7283356d8bdf5aa73de601"}, @NL80211_BAND_5GHZ={0x50, 0x1, "7129d6ba375a2529cc33c37274f6fcd40328703c30647a5db51841800b322acca889d30851d644cdb4681e34379f60fe8693c527f86b94703e5d4d3c16809d74b3cb4de2553c42fd4949fc44"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "0ed275868b4e54da4bb0066d98916d33e12e6a3a00ec3dc016ce9d8cfb20c8d661f023ff10ece09642d4528e25b466cac56ee0aa277af3c82acf5b9fddb231c305151df56c89dcddba0d4c47843c3c2a38add4fcef1ba9890ab740c024b75924783206999e5fcba43201e476e1458c0d4cce2649db1ffab1adc9cb84aa55a46d6f463e77ec6c02c18def92380b6a22e8bbfdbc1a8b66a42993d2c0dc5020159c31943a50247cdfffb92e0691c7cfc710c81391789b038de6e549fe5f071701cc1be135bf01278721350591f7191d157de8a3d721ee0678d13b339a07faac1684f27e1636c7b349a4ece5acc9a10e763a"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "0bb8ac706a3c622b96fc970e7c2c5f0baa561addec90c6cec2ef6078ab7c1ed4774b10350a299668d7ae2c4d4edfd519bf767fc1f914f178a5fa693219dd13f748e8d0909ac8775c8f549e"}, @NL80211_BAND_5GHZ={0x15, 0x1, "33c1cb7f164e490888e56232bd3a199b96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r5 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2159.312753][T27655] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2159.312753][T27655]    program syz-executor.2 not setting count and/or reply_len properly
15:24:26 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:26 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:26 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2159.503680][T22337] keytouch 0003:0926:3333.009B: fixing up Keytouch IEC report descriptor
[ 2159.514537][T22337] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.009B/input/input159
[ 2159.614094][T22337] keytouch 0003:0926:3333.009B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2159.620702][T27670] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2159.620702][T27670]    program syz-executor.2 not setting count and/or reply_len properly
[ 2159.719598][T22337] usb 5-1: USB disconnect, device number 36
15:24:27 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2160.069287][T27708] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2160.069287][T27708]    program syz-executor.2 not setting count and/or reply_len properly
15:24:27 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:27 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002810e8310a60715859e7701020301090283070204209007090484020d7891d90309210600480122af0809218100000122260909050f08200000208039110df42af58b5030b5d580c235c6f662ae25515eb6ee7cd8c4abcda9d73c044af6b6f2cf293359912df6b7b1a04b3fbcfed981182264b235da0636788e3a467ae22c00fa138addfebc3051a6901d2d34d62b629bed8150f27f8a6c01dc2af92a7e49b657bd68cda52eb5139522ab21c1b86d53ac7848f3a7011b231dba7c668963cd3c9d9f3ba0482be429516d1fdd80450c743fbe60464642db3c44a123c9560f00edd895cf013fa4c747b6eeaae4c7f44365186d4d11b78fe0e60544134883ae1f3b368a2a4990eb836cb97ed98d8dd4ed01f9e3da3a9bea9c0d860b9a155d5942a6206e6f272597def552e3d46a875d9c7dedde6590d2d3bfc29f3107952659bea8a240899620fc0ab1ca6bfff7a0296330c91e00926be779b72c8d2ec8bc09050300ff036e8006a323d1a12292a6eac4e022a9565e7b2d3a1d2441bc6817b9baa61bdc6bbbc91ea36f920d03308cabcc89320f6b559e38f181e3ea492658501ed900dbc5689705b5e00501162ae24f42bf2aa82ee10320edaea0ecb7c7a569202d53f40c6400b4d9a985cc6c1116b5ba358221aa89ed61762ee65f25bd262ab0d0e6fa7ca9095437d88603545308cddbfcaf7e26d72c93e3d541ec21d0e36bbe236f1dd194722ce9912609050a0820000900810725010203470009050200200000062055081eeb1bd08e2c4adf91a51e54a64124c21862f2ca04001e1ab02788101e46b44bd20a734735c95d42af46f74b91413b8b536966f4bc2882eb61bb060ad3172347102d852ee1ff18277a52339209bb1f49a6001f09050a00400008200307250102de05005e24db4e2fb1d3677122dd073c16ea76b3ee9db51cd2d25074868ad65c103f8a60d247873c5a6e33adcc32bd0b20c6350d83c11fea3dbfda477547b5cade436a64ceed995d3caf3a9f76cee14a9ed5c794c068269fa20a10525f673efa0809050610400015400109050f04feffffff02de3e293a81777d6ad29ddf2eaf8089cfde0eb315251a8b81d9a7d2f323368022ef863073d6b6ef8a6d1d2205264ecbfea9572b327f6b434378a24255a6da70dc94508f78c8bd18ca4db0ade3cf5f3be81086cb777c3bbd251afa24e569e7aabe6fbd15fe7703227e68f19552f7972478b92925b7139848d91c5227de1d66f8"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(0xffffffffffffffff, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r1, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r1, &(0x7f00000000c0), 0x0)

[ 2160.312469][T27710] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2160.312469][T27710]    program syz-executor.2 not setting count and/or reply_len properly
15:24:27 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2160.618553][T27721] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2160.618553][T27721]    program syz-executor.2 not setting count and/or reply_len properly
[ 2160.667195][T16129] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 2160.790233][T16129] usb 5-1: Using ep0 maxpacket: 8
[ 2160.918540][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2160.931483][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2160.942962][T16129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2160.956093][T16129] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2160.965296][T16129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2160.974505][T16129] usb 5-1: config 0 descriptor??
15:24:29 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:29 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2161.457786][T16129] keytouch 0003:0926:3333.009C: fixing up Keytouch IEC report descriptor
[ 2161.499866][T16129] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.009C/input/input160
[ 2161.513229][T27732] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2161.513229][T27732]    program syz-executor.2 not setting count and/or reply_len properly
[ 2161.599226][T16129] keytouch 0003:0926:3333.009C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2161.663931][ T4135] usb 5-1: USB disconnect, device number 37
15:24:29 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:29 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:29 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2162.234591][T27774] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2162.234591][T27774]    program syz-executor.2 not setting count and/or reply_len properly
15:24:30 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:30 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2162.497103][T16129] usb 5-1: new high-speed USB device number 38 using dummy_hcd
15:24:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2162.587410][T16129] usb 5-1: Using ep0 maxpacket: 8
[ 2162.707572][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2162.741955][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2162.765802][T16129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
15:24:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2162.807111][T16129] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2162.819966][T16129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2162.829996][T16129] usb 5-1: config 0 descriptor??
[ 2162.991239][T27805] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2162.991239][T27805]    program syz-executor.2 not setting count and/or reply_len properly
15:24:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2163.236994][T27811] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2163.236994][T27811]    program syz-executor.2 not setting count and/or reply_len properly
15:24:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2163.307686][T16129] keytouch 0003:0926:3333.009D: fixing up Keytouch IEC report descriptor
[ 2163.339936][T16129] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.009D/input/input161
[ 2163.429204][T16129] keytouch 0003:0926:3333.009D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2163.512278][ T4135] usb 5-1: USB disconnect, device number 38
15:24:32 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:32 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2164.652022][T27859] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2164.652022][T27859]    program syz-executor.2 not setting count and/or reply_len properly
15:24:32 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:32 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:32 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:33 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:33 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:33 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:33 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2165.514005][T22337] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 2165.608100][T22337] usb 5-1: Using ep0 maxpacket: 8
15:24:33 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:33 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2165.737942][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2165.768053][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2165.814211][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2165.871388][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2165.901956][T27897] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2165.901956][T27897]    program syz-executor.2 not setting count and/or reply_len properly
[ 2165.920156][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2165.930005][T22337] usb 5-1: config 0 descriptor??
15:24:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2166.200407][T27909] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2166.200407][T27909]    program syz-executor.2 not setting count and/or reply_len properly
[ 2166.407814][T22337] keytouch 0003:0926:3333.009E: fixing up Keytouch IEC report descriptor
[ 2166.418100][T22337] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.009E/input/input162
[ 2166.504362][T22337] keytouch 0003:0926:3333.009E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2166.619975][T22337] usb 5-1: USB disconnect, device number 39
15:24:34 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:34 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:34 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2167.345732][T27958] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2167.345732][T27958]    program syz-executor.2 not setting count and/or reply_len properly
[ 2167.527165][   T17] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 2167.561479][T27960] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2167.561479][T27960]    program syz-executor.2 not setting count and/or reply_len properly
15:24:35 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2167.627995][   T17] usb 5-1: Using ep0 maxpacket: 8
[ 2167.758599][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2167.791387][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2167.805030][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2167.819495][   T17] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2167.829585][T27967] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2167.829585][T27967]    program syz-executor.2 not setting count and/or reply_len properly
[ 2167.830187][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2167.858380][   T17] usb 5-1: config 0 descriptor??
15:24:35 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2168.317812][   T17] keytouch 0003:0926:3333.009F: fixing up Keytouch IEC report descriptor
[ 2168.338696][   T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.009F/input/input163
[ 2168.423538][   T17] keytouch 0003:0926:3333.009F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2168.540595][   T17] usb 5-1: USB disconnect, device number 40
15:24:36 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:36 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:36 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:36 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2168.925263][T28018] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2168.925263][T28018]    program syz-executor.2 not setting count and/or reply_len properly
15:24:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r4 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:36 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2169.224212][T28034] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2169.224212][T28034]    program syz-executor.2 not setting count and/or reply_len properly
15:24:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2169.409681][T28250] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 2169.509842][T28250] usb 5-1: Using ep0 maxpacket: 8
15:24:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2169.549354][T28046] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2169.549354][T28046]    program syz-executor.2 not setting count and/or reply_len properly
[ 2169.628342][T28250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2169.661663][T28250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2169.712085][T28250] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
15:24:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2169.752894][T28250] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2169.765393][T28250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2169.775443][T28250] usb 5-1: config 0 descriptor??
[ 2169.952219][T28054] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2169.952219][T28054]    program syz-executor.2 not setting count and/or reply_len properly
15:24:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2170.202336][T28061] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2170.202336][T28061]    program syz-executor.2 not setting count and/or reply_len properly
15:24:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2170.257860][T28250] keytouch 0003:0926:3333.00A0: fixing up Keytouch IEC report descriptor
[ 2170.300124][T28250] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00A0/input/input164
[ 2170.389701][T28250] keytouch 0003:0926:3333.00A0: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2170.481791][T28250] usb 5-1: USB disconnect, device number 41
15:24:39 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:39 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:39 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:39 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:39 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:39 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2171.976958][T28109] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2171.976958][T28109]    program syz-executor.2 not setting count and/or reply_len properly
15:24:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2172.049619][T16129] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 2172.157716][T16129] usb 5-1: Using ep0 maxpacket: 8
15:24:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2172.287139][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2172.298707][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2172.310550][T16129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2172.324564][T16129] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2172.340683][T16129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2172.351846][T16129] usb 5-1: config 0 descriptor??
[ 2172.443753][T28134] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2172.443753][T28134]    program syz-executor.2 not setting count and/or reply_len properly
15:24:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2172.661485][T28141] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2172.661485][T28141]    program syz-executor.2 not setting count and/or reply_len properly
15:24:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2172.838337][T16129] keytouch 0003:0926:3333.00A1: fixing up Keytouch IEC report descriptor
[ 2172.861822][T16129] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00A1/input/input165
[ 2172.920372][T28143] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2172.920372][T28143]    program syz-executor.2 not setting count and/or reply_len properly
15:24:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2172.991949][T16129] keytouch 0003:0926:3333.00A1: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2173.052185][T10684] usb 5-1: USB disconnect, device number 42
15:24:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2173.492447][T28186] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2173.492447][T28186]    program syz-executor.2 not setting count and/or reply_len properly
15:24:41 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:41 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2173.762096][T28189] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2173.762096][T28189]    program syz-executor.2 not setting count and/or reply_len properly
[ 2173.937129][T22337] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 2174.037168][T22337] usb 5-1: Using ep0 maxpacket: 8
[ 2174.157470][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2174.168763][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2174.179751][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2174.193271][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2174.203118][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2174.214850][T22337] usb 5-1: config 0 descriptor??
[ 2174.717794][T22337] keytouch 0003:0926:3333.00A2: fixing up Keytouch IEC report descriptor
[ 2174.736711][T22337] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00A2/input/input166
[ 2174.820556][T22337] keytouch 0003:0926:3333.00A2: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
15:24:42 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2174.937280][T10684] usb 5-1: USB disconnect, device number 43
15:24:42 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:42 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:42 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:42 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:42 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:42 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:42 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:42 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:42 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:43 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:43 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2175.570221][T28269] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2175.570221][T28269]    program syz-executor.2 not setting count and/or reply_len properly
15:24:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2175.869741][T16129] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 2175.990651][T16129] usb 5-1: Using ep0 maxpacket: 8
[ 2176.107145][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2176.118485][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2176.129430][T16129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2176.143204][T16129] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2176.152976][T16129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2176.162843][T16129] usb 5-1: config 0 descriptor??
[ 2176.719843][T16129] usbhid 5-1:0.0: can't add hid device: -71
[ 2176.725818][T16129] usbhid: probe of 5-1:0.0 failed with error -71
[ 2176.733758][T16129] usb 5-1: USB disconnect, device number 44
15:24:45 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:45 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:45 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:45 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2178.507157][T16129] usb 5-1: new high-speed USB device number 45 using dummy_hcd
15:24:46 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2178.610005][T28316] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2178.610005][T28316]    program syz-executor.2 not setting count and/or reply_len properly
[ 2178.638739][T16129] usb 5-1: Using ep0 maxpacket: 8
15:24:46 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2178.759923][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2178.792520][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2178.803313][T16129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2178.855146][T16129] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2178.879182][T16129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2178.888426][T16129] usb 5-1: config 0 descriptor??
[ 2178.942474][T28323] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2178.942474][T28323]    program syz-executor.2 not setting count and/or reply_len properly
15:24:46 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2179.159535][T28330] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2179.159535][T28330]    program syz-executor.2 not setting count and/or reply_len properly
15:24:46 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:46 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2179.427147][T16129] usbhid 5-1:0.0: can't add hid device: -71
[ 2179.433163][T16129] usbhid: probe of 5-1:0.0 failed with error -71
[ 2179.457960][T16129] usb 5-1: USB disconnect, device number 45
15:24:47 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2179.822646][T28351] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2179.822646][T28351]    program syz-executor.2 not setting count and/or reply_len properly
15:24:48 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:48 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000840)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000022000000220024f1d28edc06000000000000002c16ee2cd0a22a9a1ab4f4af6cec65094c9ab2776f1379766e1b9bf71523a7d95c3d57af148054390f6d6fbb43930269c82f8d8fc2ec46d995798db89b65135d66483fc562b9f15c26df55b6a6c4001c9729f25572c44c916202802f6653a89dc5b2e6d60b313b44607aad3fc4bf6f01d2e7325ba73c96d609ada2889df24b1d711342f405ee8badec36beaa20545613d2276d02591a5b06774b154b77aa29ed5bc6370c8b7d27f570"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:48 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:48 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2181.472226][T28363] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2181.472226][T28363]    program syz-executor.2 not setting count and/or reply_len properly
15:24:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:49 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x33)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

[ 2181.599963][T22337] usb 5-1: new high-speed USB device number 46 using dummy_hcd
15:24:49 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x33)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

[ 2181.720626][T22337] usb 5-1: Using ep0 maxpacket: 8
15:24:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:49 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x33)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

15:24:49 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2181.860145][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2181.877601][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2181.896167][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2181.949923][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
15:24:49 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2181.992424][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2182.009496][T22337] usb 5-1: config 0 descriptor??
[ 2182.061099][T28400] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2182.061099][T28400]    program syz-executor.2 not setting count and/or reply_len properly
[ 2182.557196][T22337] usbhid 5-1:0.0: can't add hid device: -71
[ 2182.563322][T22337] usbhid: probe of 5-1:0.0 failed with error -71
[ 2182.578266][T22337] usb 5-1: USB disconnect, device number 46
15:24:51 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:51 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:51 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:24:51 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:52 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:52 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:52 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2184.522804][T28415] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2184.522804][T28415]    program syz-executor.2 not setting count and/or reply_len properly
15:24:52 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:52 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2184.637447][T10684] usb 5-1: new high-speed USB device number 47 using dummy_hcd
15:24:52 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2184.747423][T10684] usb 5-1: Using ep0 maxpacket: 8
[ 2184.867551][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2184.885542][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2184.897023][T10684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2184.913835][T10684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2184.916586][T28441] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2184.916586][T28441]    program syz-executor.2 not setting count and/or reply_len properly
[ 2184.927314][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2184.957565][T10684] usb 5-1: config 0 descriptor??
15:24:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2185.222222][T28451] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2185.222222][T28451]    program syz-executor.2 not setting count and/or reply_len properly
15:24:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2185.486888][T28455] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2185.486888][T28455]    program syz-executor.2 not setting count and/or reply_len properly
[ 2185.499917][T10684] usbhid 5-1:0.0: can't add hid device: -71
[ 2185.523366][T10684] usbhid: probe of 5-1:0.0 failed with error -71
[ 2185.533023][T10684] usb 5-1: USB disconnect, device number 47
15:24:54 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:54 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:54 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2187.571589][T28475] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2187.571589][T28475]    program syz-executor.2 not setting count and/or reply_len properly
15:24:55 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:55 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:55 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2187.697137][T22337] usb 5-1: new high-speed USB device number 48 using dummy_hcd
15:24:55 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2187.797486][T22337] usb 5-1: Using ep0 maxpacket: 8
15:24:55 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:55 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2187.927477][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2187.945662][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
15:24:55 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2187.969080][T22337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2187.983513][T22337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2187.994262][T22337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2188.013255][T22337] usb 5-1: config 0 descriptor??
[ 2188.174404][T28506] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2188.174404][T28506]    program syz-executor.2 not setting count and/or reply_len properly
[ 2188.557156][T22337] usbhid 5-1:0.0: can't add hid device: -71
[ 2188.563379][T22337] usbhid: probe of 5-1:0.0 failed with error -71
[ 2188.571723][T22337] usb 5-1: USB disconnect, device number 48
15:24:57 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:57 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:57 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:24:57 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2190.638113][T28538] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2190.638113][T28538]    program syz-executor.2 not setting count and/or reply_len properly
15:24:58 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:58 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:24:58 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2190.757114][T16129] usb 5-1: new high-speed USB device number 49 using dummy_hcd
15:24:58 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2190.861279][T16129] usb 5-1: Using ep0 maxpacket: 8
15:24:58 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2190.977567][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2190.989264][T16129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2191.000461][T16129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2191.014256][T16129] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2191.024024][T16129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2191.034263][T16129] usb 5-1: config 0 descriptor??
[ 2191.183104][T28554] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2191.183104][T28554]    program syz-executor.2 not setting count and/or reply_len properly
15:24:58 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2191.397595][T28562] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2191.397595][T28562]    program syz-executor.2 not setting count and/or reply_len properly
15:24:58 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2191.570764][T16129] usbhid 5-1:0.0: can't add hid device: -71
[ 2191.579217][T16129] usbhid: probe of 5-1:0.0 failed with error -71
[ 2191.616083][T16129] usb 5-1: USB disconnect, device number 49
[ 2191.670502][T28566] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2191.670502][T28566]    program syz-executor.2 not setting count and/or reply_len properly
15:24:59 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2191.884558][T28578] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2191.884558][T28578]    program syz-executor.2 not setting count and/or reply_len properly
15:25:01 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:01 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:25:01 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2193.718768][T28591] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2193.718768][T28591]    program syz-executor.2 not setting count and/or reply_len properly
15:25:01 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:01 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:01 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2193.829312][T10684] usb 5-1: new high-speed USB device number 50 using dummy_hcd
15:25:01 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2193.928285][T10684] usb 5-1: Using ep0 maxpacket: 8
15:25:01 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2194.058011][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2194.082837][T28610] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2194.082837][T28610]    program syz-executor.2 not setting count and/or reply_len properly
15:25:01 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8a, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b"}}], 0x1c)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:01 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2194.100826][T10684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2194.113078][T10684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2194.129298][T10684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
15:25:01 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2194.152317][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2194.172718][T10684] usb 5-1: config 0 descriptor??
15:25:01 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2194.581452][T28632] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2194.581452][T28632]    program syz-executor.2 not setting count and/or reply_len properly
[ 2194.737134][T10684] usbhid 5-1:0.0: can't add hid device: -71
[ 2194.743153][T10684] usbhid: probe of 5-1:0.0 failed with error -71
[ 2194.758018][T10684] usb 5-1: USB disconnect, device number 50
15:25:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:25:04 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:04 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

[ 2196.745494][T28656] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in;
[ 2196.745494][T28656]    program syz-executor.2 not setting count and/or reply_len properly
15:25:04 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:04 executing program 1:
gettid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

15:25:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2196.890049][T27550] usb 5-1: new high-speed USB device number 51 using dummy_hcd
15:25:04 executing program 1:
gettid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2196.951516][T28666] ptrace attach of "/root/syz-executor.1"[28665] was attempted by "/root/syz-executor.1"[28666]
[ 2196.989813][T27550] usb 5-1: Using ep0 maxpacket: 8
15:25:04 executing program 1:
gettid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2196.996351][T28669] ptrace attach of "/root/syz-executor.1"[28668] was attempted by "/root/syz-executor.1"[28669]
15:25:04 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2197.038953][T28673] ptrace attach of "/root/syz-executor.1"[28672] was attempted by "/root/syz-executor.1"[28673]
[ 2197.094044][T28676] ptrace attach of "/root/syz-executor.1"[28675] was attempted by "/root/syz-executor.1"[28676]
[ 2197.107722][T27550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2197.131931][T27550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2197.145349][T27550] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2197.159081][T27550] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[ 2197.177581][T27550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
15:25:04 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:25:04 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2197.196420][T27550] usb 5-1: config 0 descriptor??
15:25:04 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2197.271776][T28683] ptrace attach of "/root/syz-executor.1"[28680] was attempted by "/root/syz-executor.1"[28683]
[ 2197.747146][T27550] usbhid 5-1:0.0: can't add hid device: -71
[ 2197.753172][T27550] usbhid: probe of 5-1:0.0 failed with error -71
[ 2197.764548][T27550] usb 5-1: USB disconnect, device number 51
15:25:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:25:07 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:07 executing program 3:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x86, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:07 executing program 1:
gettid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

15:25:07 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x35)
syz_usb_connect(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xa, 0x15, &(0x7f0000000040)="2707e4f3a2144940d697c379628724de54403938dc")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100000000000826093333000000000001090224000100000000090400000903000000092100000001222200090581030000d00000f977e425460162533edf340d6cbf79e9dce061007e6572"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x31, 0x600)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0))
read$hidraw(r1, &(0x7f0000000c40)=""/79, 0x4f)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000cc0)='/dev/hidraw#\x00', 0x0, 0x0)
r2 = syz_open_dev$hidraw(0x0, 0x0, 0x9142)
write$hidraw(r2, &(0x7f0000000000)="fb2879cf4be552c2a6fb26d946157afb3bcadfb01e699f02499c4287097b7ba60608492f7a315e18eef834322898ab45b281c559e410873a89", 0x39)
write$hidraw(r2, &(0x7f00000000c0), 0x0)

15:25:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}}, 0x4040)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

15:25:07 executing program 1:
gettid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2199.920470][T28724] ptrace attach of "/root/syz-executor.1"[28721] was attempted by "/root/syz-executor.1"[28724]
15:25:07 executing program 1:
gettid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2199.978123][T28728] ptrace attach of "/root/syz-executor.1"[28727] was attempted by "/root/syz-executor.1"[28728]
[ 2200.030715][T28732] ptrace attach of "/root/syz-executor.1"[28731] was attempted by "/root/syz-executor.1"[28732]
[ 2200.157286][T22337] usb 5-1: new high-speed USB device number 52 using dummy_hcd
15:25:07 executing program 5:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6023}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c5", 0x0}, 0x40)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:07 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8c, &(0x7f00000003c0)="94a4b04e68b59d0e2060498e3b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b135b5806ef58d7cee1761c1ed930c1a7be0ec6d9d7f8ee14d167fd6e40d0b1e64c6f19367f420083cf0cdc39f3cc1e564cd16516d23e1837eb1bbac825b994c03d614b0fec03fe09ea6fa9bf211b379544587059cddba748f026baf1c1620498a493eb88cfc246a938400b6d5a"}}], 0x1c)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x67}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x33)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

15:25:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x93}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="318ff99ed55c556b8b1806be39d65c5f1ae1fed07e72e803ade73f327f41f4c0b81e8632358525c4c527936fd0a909b2cd6777436139322ff81e4542342e84345c9f04772181b67a06211d027c213cad38013f9422748dd69ba4f5c7baef9bb62c2d217c93a306f13a963636a0d67022a5"])
accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
socket(0x22, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2001, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000300)=0x4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0xc021, 0x1})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2)

[ 2200.257657][T22337] usb 5-1: Using ep0 maxpacket: 8
[ 2200.325966][T28740] ==================================================================
[ 2200.334135][T28740] BUG: KCSAN: data-race in do_wait / ptrace_check_attach
[ 2200.341276][T28740] 
[ 2200.343645][T28740] write to 0xffff88812520b050 of 8 bytes by task 28739 on cpu 0:
[ 2200.351400][T28740]  do_wait+0x1f7/0x4c0
[ 2200.355507][T28740]  kernel_wait4+0x146/0x230
[ 2200.360024][T28740]  __do_sys_wait4+0xea/0x100
[ 2200.364628][T28740]  __x64_sys_wait4+0x59/0x70
[ 2200.369234][T28740]  do_syscall_64+0xc7/0x3b0
[ 2200.373750][T28740]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2200.378411][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11
[ 2200.379731][T28740] 
[ 2200.379748][T28740] read to 0xffff88812520b050 of 8 bytes by task 28740 on cpu 1:
[ 2200.379778][T28740]  ptrace_check_attach+0xa3/0x260
[ 2200.379803][T28740]  __x64_sys_ptrace+0x102/0x270
[ 2200.410764][T28740]  do_syscall_64+0xc7/0x3b0
[ 2200.415294][T28740]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2200.421191][T28740] 
[ 2200.421429][T22337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2200.423522][T28740] Reported by Kernel Concurrency Sanitizer on:
[ 2200.423553][T28740] CPU: 1 PID: 28740 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0
[ 2200.423622][T28740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2200.458217][T28740] ==================================================================
[ 2200.466291][T28740] Kernel panic - not syncing: panic_on_warn set ...
[ 2200.472920][T28740] CPU: 1 PID: 28740 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0
[ 2200.481599][T28740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2200.491720][T28740] Call Trace:
[ 2200.495133][T28740]  dump_stack+0x11d/0x187
[ 2200.499510][T28740]  panic+0x210/0x640
[ 2200.503487][T28740]  ? vprintk_func+0x89/0x13a
[ 2200.508102][T28740]  kcsan_report.cold+0xc/0x1a
[ 2200.512828][T28740]  kcsan_setup_watchpoint+0x3fb/0x440
[ 2200.518234][T28740]  ptrace_check_attach+0xa3/0x260
[ 2200.524178][T28740]  __x64_sys_ptrace+0x102/0x270
[ 2200.529069][T28740]  do_syscall_64+0xc7/0x3b0
[ 2200.533594][T28740]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2200.539505][T28740] RIP: 0033:0x45c829
[ 2200.543439][T28740] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2200.563146][T28740] RSP: 002b:00007f0bcd91ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[ 2200.571577][T28740] RAX: ffffffffffffffda RBX: 00000000004fa660 RCX: 000000000045c829
[ 2200.579904][T28740] RDX: 0000000000000000 RSI: 0000000000000f33 RDI: 0000000000000007
[ 2200.587995][T28740] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2200.595990][T28740] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 2200.603981][T28740] R13: 000000000000086a R14: 00000000004cb279 R15: 00007f0bcd91b6d4
[ 2201.712391][T28740] Shutting down cpus with NMI
[ 2201.718398][T28740] Kernel Offset: disabled
[ 2201.722727][T28740] Rebooting in 86400 seconds..