[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2020/07/04 15:22:00 fuzzer started 2020/07/04 15:22:00 dialing manager at 10.128.0.26:45977 2020/07/04 15:22:01 syscalls: 3123 2020/07/04 15:22:01 code coverage: enabled 2020/07/04 15:22:01 comparison tracing: enabled 2020/07/04 15:22:01 extra coverage: enabled 2020/07/04 15:22:01 setuid sandbox: enabled 2020/07/04 15:22:01 namespace sandbox: enabled 2020/07/04 15:22:01 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/04 15:22:01 fault injection: enabled 2020/07/04 15:22:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/04 15:22:01 net packet injection: enabled 2020/07/04 15:22:01 net device setup: enabled 2020/07/04 15:22:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/04 15:22:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/04 15:22:01 USB emulation: enabled 15:24:24 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240), 0x2305e2b7) pipe(&(0x7f0000000240)={0xffffffffffffffff}) dup3(r1, r0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syzkaller login: [ 198.242598][ T6823] IPVS: ftp: loaded support on port[0] = 21 15:24:24 executing program 1: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x2) r2 = dup2(r1, r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf32(r2, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) [ 198.381393][ T6823] chnl_net:caif_netlink_parms(): no params data found [ 198.487756][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.495677][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.506721][ T6823] device bridge_slave_0 entered promiscuous mode [ 198.518519][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.525718][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.534581][ T6823] device bridge_slave_1 entered promiscuous mode [ 198.563315][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.576046][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.603155][ T6823] team0: Port device team_slave_0 added [ 198.613211][ T6823] team0: Port device team_slave_1 added [ 198.637131][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.644193][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.672483][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.686912][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.692046][ T6961] IPVS: ftp: loaded support on port[0] = 21 [ 198.693963][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.726705][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 15:24:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x141404, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001000000", @ANYRES32=r3, @ANYBLOB="000000000c0002000000c20800001000"], 0x28}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="b66a93e0c792", 0x6, 0x40040, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) [ 198.821464][ T6823] device hsr_slave_0 entered promiscuous mode [ 198.896718][ T6823] device hsr_slave_1 entered promiscuous mode 15:24:25 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "688dd9060000000021000000000000005e0200"}) [ 199.059291][ T6999] IPVS: ftp: loaded support on port[0] = 21 [ 199.285309][ T7090] IPVS: ftp: loaded support on port[0] = 21 [ 199.330733][ T6961] chnl_net:caif_netlink_parms(): no params data found 15:24:25 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005000900f00000000a00000000000000fe88000000000200070040000000000100000000000000000200010000000000000000fd0000000005000500000000000a"], 0x98}}, 0x0) [ 199.429454][ T6823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.542845][ T6823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.634565][ T6823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.709537][ T6823] netdevsim netdevsim0 netdevsim3: renamed from eth3 15:24:26 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001200", 0x14, 0x33, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 199.817632][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.825350][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.837609][ T7267] IPVS: ftp: loaded support on port[0] = 21 [ 199.859527][ T6961] device bridge_slave_0 entered promiscuous mode [ 199.870607][ T6999] chnl_net:caif_netlink_parms(): no params data found [ 199.941552][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.949831][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.958389][ T6961] device bridge_slave_1 entered promiscuous mode [ 200.060880][ T7090] chnl_net:caif_netlink_parms(): no params data found [ 200.140010][ T6961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.163813][ T6961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.175290][ T7375] IPVS: ftp: loaded support on port[0] = 21 [ 200.245799][ T6961] team0: Port device team_slave_0 added [ 200.289620][ T6961] team0: Port device team_slave_1 added [ 200.323020][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.330507][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.340224][ T6999] device bridge_slave_0 entered promiscuous mode [ 200.412030][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.420058][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.429675][ T6999] device bridge_slave_1 entered promiscuous mode [ 200.438011][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.445084][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.454736][ T7090] device bridge_slave_0 entered promiscuous mode [ 200.465555][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.474248][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.483414][ T7090] device bridge_slave_1 entered promiscuous mode [ 200.501538][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.512747][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.545106][ T6961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.590246][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 200.601181][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.608473][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.635793][ T6961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.658111][ T6999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.673794][ T6999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.684948][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.771764][ T6961] device hsr_slave_0 entered promiscuous mode [ 200.816663][ T6961] device hsr_slave_1 entered promiscuous mode [ 200.856437][ T6961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.864753][ T6961] Cannot create hsr debugfs directory [ 200.877732][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.938721][ T6999] team0: Port device team_slave_0 added [ 200.972905][ T7090] team0: Port device team_slave_0 added [ 200.980132][ T6999] team0: Port device team_slave_1 added [ 201.018357][ T7090] team0: Port device team_slave_1 added [ 201.058772][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.065878][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.075289][ T7267] device bridge_slave_0 entered promiscuous mode [ 201.099871][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.134880][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.150799][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.160308][ T7267] device bridge_slave_1 entered promiscuous mode [ 201.168766][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.177581][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.209972][ T7090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.223404][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.231112][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.259107][ T7090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.275902][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.284371][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.313373][ T6999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.329122][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.336962][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.374385][ T6999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.416752][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.426065][ T7375] chnl_net:caif_netlink_parms(): no params data found [ 201.489176][ T7090] device hsr_slave_0 entered promiscuous mode [ 201.526966][ T7090] device hsr_slave_1 entered promiscuous mode [ 201.561681][ T7090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.570709][ T7090] Cannot create hsr debugfs directory [ 201.593279][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.628206][ T7267] team0: Port device team_slave_0 added [ 201.638156][ T7267] team0: Port device team_slave_1 added [ 201.679389][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.688950][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.749769][ T6999] device hsr_slave_0 entered promiscuous mode [ 201.806776][ T6999] device hsr_slave_1 entered promiscuous mode [ 201.846388][ T6999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.854492][ T6999] Cannot create hsr debugfs directory [ 201.892625][ T6823] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.904787][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.912074][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.939878][ T7267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.996039][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.005063][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.015516][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.022926][ T7167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.034911][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.046526][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.056325][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.064134][ T7167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.073655][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.083332][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.115793][ T7267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.166119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.252870][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.267534][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.290878][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.301687][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.312317][ T7375] device bridge_slave_0 entered promiscuous mode [ 202.343288][ T6961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.459666][ T7267] device hsr_slave_0 entered promiscuous mode [ 202.526804][ T7267] device hsr_slave_1 entered promiscuous mode [ 202.586541][ T7267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.586581][ T7267] Cannot create hsr debugfs directory [ 202.602117][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.602154][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.602910][ T7375] device bridge_slave_1 entered promiscuous mode [ 202.657460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.671823][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.680870][ T6961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 202.739486][ T6961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.847767][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.855777][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.865272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.876046][ T6961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 202.953210][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.974523][ T6823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.985256][ T6823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.025936][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.044949][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.053539][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.063555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.073289][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.083472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.134539][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.143298][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.170588][ T7375] team0: Port device team_slave_0 added [ 203.185634][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.197515][ T6999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.244173][ T7375] team0: Port device team_slave_1 added [ 203.281124][ T6999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.362654][ T6999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.393066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.404085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.415430][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.423204][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.453437][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.478712][ T6999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.521791][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.529484][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.556679][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.584441][ T7090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.669006][ T7090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.760007][ T7375] device hsr_slave_0 entered promiscuous mode [ 203.816711][ T7375] device hsr_slave_1 entered promiscuous mode [ 203.856340][ T7375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.863923][ T7375] Cannot create hsr debugfs directory [ 203.872005][ T7090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.922984][ T7090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.988234][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.000355][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.026015][ T6961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.038969][ T6823] device veth0_vlan entered promiscuous mode [ 204.053812][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.062287][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.081237][ T7267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.152829][ T7267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.206088][ T6823] device veth1_vlan entered promiscuous mode [ 204.230307][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.239954][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.252020][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.261367][ T7267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.331365][ T6961] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.363480][ T7267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.445207][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.454377][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.464291][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.473323][ T2514] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.480439][ T2514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.489618][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.499364][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.509479][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.516720][ T2514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.524740][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.568070][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.577393][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.648252][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.657902][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.667578][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.677619][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.687211][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.697170][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.707422][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.732100][ T6823] device veth0_macvtap entered promiscuous mode [ 204.783331][ T6823] device veth1_macvtap entered promiscuous mode [ 204.807070][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.819992][ T7375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.869822][ T7375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.928984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.937508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.945546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.955814][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.985444][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.002410][ T7375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.061973][ T7375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.120339][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.127955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.139061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.149044][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.158748][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.172523][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.215569][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.226898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.246059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.261821][ T6999] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.287548][ T7090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.295492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.305233][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.314082][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.324247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.351885][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.362486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.372594][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.382251][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.389486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.397834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.407159][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.415754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.422881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.430810][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.438451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.520868][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.533622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.542184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.552991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.562287][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.572556][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.581139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.588279][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.654991][ T7090] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.680662][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.690933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.701657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.711499][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.719080][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.727811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.735634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.744453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.753701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.762929][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.879071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.889619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.901850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.921679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.941669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.962937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.972846][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.980014][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 15:24:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 205.993162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.008274][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.017933][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.025206][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.036659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.050687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.061825][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.073790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.082957][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.158355][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.159078][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.159691][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.160162][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.160604][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.161330][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.162453][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.163015][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.163741][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.164339][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.164804][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.165271][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.165739][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.182619][ T7267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.183966][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.187057][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.204859][ T6961] device veth0_vlan entered promiscuous mode 15:24:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 206.214831][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.215541][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.216007][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.216613][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.217343][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.217864][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.218336][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.232344][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.232774][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.233350][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.233795][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.234328][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.256845][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.256984][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.257094][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.257614][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.260659][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.313670][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.324685][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.325570][ T6961] device veth1_vlan entered promiscuous mode [ 206.347703][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.348323][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.348884][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.349421][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.402248][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.402412][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.402504][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.402653][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.402748][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.403237][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.404018][ T2514] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.404060][ T2514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.404392][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.404886][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.405189][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.405220][ T2514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.405531][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.413415][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.784230][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.798997][ T7090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.821472][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.822031][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.822681][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.823248][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.824592][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.825258][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.825931][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.829408][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.851481][ T6961] device veth0_macvtap entered promiscuous mode [ 206.864072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 206.864657][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.865095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.865512][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.868412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.924185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.924792][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 15:24:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 206.925245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.925713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.926517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.927090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.928041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.928569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.929619][ T6961] device veth1_macvtap entered promiscuous mode [ 206.950844][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.978109][ T6999] device veth0_vlan entered promiscuous mode [ 207.001504][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.002160][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.002681][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.003313][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.003686][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.005199][ T7090] device veth0_vlan entered promiscuous mode [ 207.013840][ T7090] device veth1_vlan entered promiscuous mode [ 207.017897][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 207.017933][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.019903][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.026009][ T6999] device veth1_vlan entered promiscuous mode [ 207.307852][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.322806][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.332415][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.343157][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.343759][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.346647][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 207.346654][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.347839][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.383984][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.384558][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.465225][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.511889][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 15:24:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 207.521763][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.544652][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.559265][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.600779][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.624592][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.627984][ T7090] device veth0_macvtap entered promiscuous mode [ 207.631642][ T7090] device veth1_macvtap entered promiscuous mode [ 207.642979][ T6999] device veth0_macvtap entered promiscuous mode [ 207.732032][ T7267] device veth0_vlan entered promiscuous mode [ 207.779201][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.779948][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.780475][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.780957][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 15:24:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 207.781403][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.781866][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.798509][ T6999] device veth1_macvtap entered promiscuous mode 15:24:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 207.989941][ T7267] device veth1_vlan entered promiscuous mode [ 208.009276][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 15:24:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 208.033349][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.055386][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.077872][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.115590][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.141204][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.160766][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.183401][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 15:24:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x3, @private2, 0x1ff}, {0xa, 0x4e20, 0xfff, @dev={0xfe, 0x80, [], 0x3b}, 0xffff8001}, 0xffff, [0x5, 0x101, 0x101, 0x3, 0x5, 0x1, 0x3, 0x5]}, 0x5c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 208.206618][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.238107][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.279809][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.289851][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.303674][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.318246][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.332741][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.344704][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.357666][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.370499][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.383941][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.405609][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.432011][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.449095][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.462140][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.477518][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.488905][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.524325][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.533648][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.549026][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.560671][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.571485][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.582589][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.603424][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.614335][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.625130][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.636485][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.646905][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.658341][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.671755][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.680862][ T7267] device veth0_macvtap entered promiscuous mode [ 208.699398][ T7267] device veth1_macvtap entered promiscuous mode [ 208.716505][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.725367][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.735021][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.744427][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.754213][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.839429][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.850107][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.860025][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.871766][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.883435][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.894291][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.904293][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.915606][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.930144][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.938352][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.950946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.959989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.972591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.987408][ T7375] device veth0_vlan entered promiscuous mode [ 209.000397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.008625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.048887][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.063694][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.076238][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.088453][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.098567][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.109260][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.119635][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.130717][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.142076][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.267932][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.283427][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.297953][ T7375] device veth1_vlan entered promiscuous mode [ 209.493911][ C1] hrtimer: interrupt took 31958 ns [ 209.547668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.555910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.623992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.661760][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.696752][ T7375] device veth0_macvtap entered promiscuous mode [ 209.769175][ T7375] device veth1_macvtap entered promiscuous mode [ 209.825202][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.851652][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.863361][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.875825][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.887666][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.899143][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.909870][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.935623][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.974804][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.994020][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.019935][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.037139][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.051059][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.065671][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.077642][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.088442][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.103333][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.119335][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.134619][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.147645][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.163267][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.220747][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.237025][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.251885][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.267699][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.277752][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.287891][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:24:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x141404, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001000000", @ANYRES32=r3, @ANYBLOB="000000000c0002000000c20800001000"], 0x28}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="b66a93e0c792", 0x6, 0x40040, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 15:24:36 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:36 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x2c) socket$key(0xf, 0x3, 0x2) openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) pipe(&(0x7f0000000d00)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000700000019af0000000000000000fe6ab692bd225df03d957cce8ed25c2cffcc7e26ca0f3ce1556009b473dd3c66e2a4320fff354d11321d628f1e0300c4bd1fd7106c92b03bd7423495221716", @ANYRES32=0x0, @ANYBLOB="4757070000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) [ 210.545508][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 15:24:37 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2800, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = dup3(r1, r0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x8ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB]) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000200)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x7f, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000280)="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", 0x1000, 0x80000001}], 0x0, &(0x7f0000000240)='\xbcQ\xe7>\xf7') exit(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x1, 0x0) 15:24:37 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {&(0x7f0000000880)="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", 0x309, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) umount2(&(0x7f0000000500)='./file0\x00', 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1d, 0x0, @dev}, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x640000, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000540)="54cdab15b4fd4db72a67408404b99748cfc83c7e4c7141ecd59fc7365c9280879d20f9a30338740cc40d9c02e35cb19cbbc130a9c39672b6c4fa17bb4ef9f6") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2000000, 0x4000010, r5, 0x82000000) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) dup(r0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x400, 0x0) 15:24:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(0x0) r0 = socket(0x0, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1000, 0x12042) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000200)=0x84200c2) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0xfffffffffffeffff, 0x6a, 0x697f, 0x3}) preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) 15:24:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 210.841517][ T29] audit: type=1800 audit(1593876277.152:2): pid=8191 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15750 res=0 15:24:37 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRESOCT=r1, @ANYRES64, @ANYRESDEC=r4, @ANYRESHEX=r1, @ANYRES16=r3], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x1f5080, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) socket(0x0, 0x0, 0x0) 15:24:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x141404, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001000000", @ANYRES32=r3, @ANYBLOB="000000000c0002000000c20800001000"], 0x28}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="b66a93e0c792", 0x6, 0x40040, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 15:24:37 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000000c0)={0x7, 0x1, 0xfff9, 0x8, 0x8}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_UNLOCK(r8, 0x4008642b, &(0x7f0000000100)={r9, 0x2c}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) exit_group(0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 210.867076][ T8194] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 210.918929][ T8193] (syz-executor.5,8193,1):ocfs2_parse_options:1467 ERROR: Unrecognized mount option "¼Qç>÷" or missing value [ 210.918991][ T8193] (syz-executor.5,8193,1):ocfs2_fill_super:1190 ERROR: status = -22 [ 210.921304][ T8191] Process accounting resumed [ 210.972636][ T8191] minix_free_inode: bit 1 already cleared [ 211.198741][ T8194] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 211.285783][ T8191] Process accounting resumed 15:24:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:37 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {&(0x7f0000000880)="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", 0x309, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) umount2(&(0x7f0000000500)='./file0\x00', 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1d, 0x0, @dev}, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x640000, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000540)="54cdab15b4fd4db72a67408404b99748cfc83c7e4c7141ecd59fc7365c9280879d20f9a30338740cc40d9c02e35cb19cbbc130a9c39672b6c4fa17bb4ef9f6") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2000000, 0x4000010, r5, 0x82000000) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) dup(r0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x400, 0x0) 15:24:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x300506, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000fdff86dd60b4090000000000fe8020aa00a800fbffe0000002ff020000220000b0d0479600000f2001883090f805c2"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x76, &(0x7f0000000080)={r4}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, &(0x7f00000000c0)=0x4) 15:24:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000300)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00000000001d0000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x580a, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x74, 0x0, 0x3, r6}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 15:24:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x141404, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001000000", @ANYRES32=r3, @ANYBLOB="000000000c0002000000c20800001000"], 0x28}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="b66a93e0c792", 0x6, 0x40040, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) [ 211.636490][ T8267] (syz-executor.5,8267,0):ocfs2_parse_options:1467 ERROR: Unrecognized mount option "¼Qç>÷" or missing value 15:24:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x5a, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x4040010, &(0x7f0000030ff0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0x1, '!'}, &(0x7f0000000000)=0x3e2) 15:24:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000300)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00000000001d0000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x580a, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x74, 0x0, 0x3, r6}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 211.636509][ T8267] (syz-executor.5,8267,0):ocfs2_fill_super:1190 ERROR: status = -22 [ 211.642360][ T7090] minix_free_inode: bit 1 already cleared [ 211.829058][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 211.838443][ T29] audit: type=1800 audit(1593876278.172:3): pid=8283 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15770 res=0 [ 211.865495][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 211.933335][ T8279] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 212.063017][ T8279] Process accounting resumed [ 212.088113][ T8279] minix_free_inode: bit 1 already cleared 15:24:38 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f00000000c0)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendto$inet(r0, &(0x7f0000000140)="ed09a9b73e78bd16f916ff83b68bc9dde2d56bd86e64e077ab08d06f228c4d2e4ee2d4f9799535969cc8ce07e6a64c6a26c7e61b791d4864a866056459c2f5c700", 0x41, 0x8001, 0x0, 0x0) [ 212.791098][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 212.814328][ T8305] device bridge_slave_1 left promiscuous mode [ 212.825177][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.901076][ T8305] device bridge_slave_0 left promiscuous mode [ 212.919928][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state 15:24:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000000c0)={0xa6, "8a5811e2a57380af55f6097ab31a1f27e12854f9c489b73a003b52a39c988fcea939e7809d5c80ca2be42eab87032b1cc75c7b3079fcdfdb060ac89a4b899bf348499807f007af60510fac36e4993d855f9b431183475f1ef9b27ccb3f51a3f9411632a02fcf9ee08174f0d63727437605bc94da541460bb924bf37ef2d3478e239b461b01be621c1f5942725df508e2d423f8ddb048404551c9eeaf18bde3748b608b8e3663"}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 15:24:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10242, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f00000000c0), &(0x7f0000000340)=0x18) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000003, &(0x7f00000005c0)=0x169, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0xfffffffa) syz_open_dev$vcsn(0x0, 0x3, 0x101002) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200187ec, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000100)=0x6ca, 0x14) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x40000000) r2 = creat(0x0, 0x90) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x1000001bd) 15:24:39 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c00020008002d0002"], 0x3c}}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x3, 0x0) 15:24:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000300)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00000000001d0000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x580a, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x74, 0x0, 0x3, r6}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 15:24:40 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001c000729d50014750000000007070000", @ANYRES32, @ANYBLOB="0a0f25000a000200aa"], 0x42e}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 213.743832][ T8339] netlink: 'syz-executor.3': attribute type 45 has an invalid length. [ 213.858808][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:24:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@norock='norock'}]}) 15:24:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 214.174668][ T8361] ISOFS: Unable to identify CD-ROM format. 15:24:40 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001c000729d50014750000000007070000", @ANYRES32, @ANYBLOB="0a0f25000a000200aa"], 0x42e}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 214.271017][ T8339] netlink: 'syz-executor.3': attribute type 45 has an invalid length. 15:24:40 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x10001, 0x9916a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8000000000000, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x2a8) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xf824b000) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x4, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x2) dup(0xffffffffffffffff) restart_syscall() mkdir(&(0x7f0000000040)='./file1\x00', 0x100) setxattr$system_posix_acl(0x0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000020006", @ANYRES32=0x0, @ANYBLOB="040005000000999400"/24], 0x2c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x9c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'workdir'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x484}, 0x40000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4ac00) ioctl$GIO_UNIMAP(r2, 0x4b66, 0x0) 15:24:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x437) syz_open_dev$ndb(0x0, 0x0, 0x86c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000000)={'ipvlan1\x00', 0x100}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 15:24:40 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r1, &(0x7f0000000040), 0x0, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) splice(r0, 0x0, r4, 0x0, 0xffe, 0x0) 15:24:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x7, 0x1ff, {"c8427e65988d9ce22b63f133e6f7a377"}, 0x1, 0x1, 0x9}}}, 0x90) r9 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r9, r12, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000180)="b8390e8ed00f35baf80c66b8aeccef8266efbafc0cb8a800efa5baf80c66b80ea8ca8066efbafc0ced260f01c30f0866f65e00baf80c66b860b0368d66efbafc0cecba4300b012ee", 0x48}], 0x1, 0x9, &(0x7f0000000200)=[@flags={0x3, 0x204}, @vmwrite={0x8, 0x0, 0x14, 0x0, 0x3, 0x0, 0x1, 0x0, 0x80}], 0x2) r13 = socket(0x10, 0x3, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r13, r14, 0x0, 0x80000001) 15:24:40 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x221) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x100500, r3, 0x19}) mknodat(0xffffffffffffffff, 0x0, 0x1, 0xb5f3) 15:24:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:41 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="410f38cbb00000000043c1c207420f01ef0f23c80f21f8350000c0000f23f866450f23deb8010000000f01c1b9800000c0b803000000ba000000000f30c4615571f300c7442400cf000000c744240214180000c7442406000000000f01142466ba2100ec640f30", 0x67}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x100000, 0x1000, &(0x7f0000013000/0x1000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 15:24:41 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:41 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x10001, 0x9916a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8000000000000, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x2a8) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xf824b000) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x4, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x2) dup(0xffffffffffffffff) restart_syscall() mkdir(&(0x7f0000000040)='./file1\x00', 0x100) setxattr$system_posix_acl(0x0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000020006", @ANYRES32=0x0, @ANYBLOB="040005000000999400"/24], 0x2c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x9c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'workdir'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x484}, 0x40000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4ac00) ioctl$GIO_UNIMAP(r2, 0x4b66, 0x0) 15:24:41 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 214.692312][ T1528] block nbd3: Receive control failed (result -107) [ 214.706511][ T2794] block nbd3: Dead connection, failed to find a fallback [ 214.706631][ T2794] block nbd3: shutting down sockets [ 214.707203][ T2794] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.707311][ T2794] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.707499][ T2794] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.707511][ T2794] Buffer I/O error on dev nbd3, logical block 1, async page read [ 214.707621][ T2794] blk_update_request: I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.707633][ T2794] Buffer I/O error on dev nbd3, logical block 2, async page read [ 214.707740][ T2794] blk_update_request: I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.707752][ T2794] Buffer I/O error on dev nbd3, logical block 3, async page read [ 214.708174][ T2794] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.708187][ T2794] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.708336][ T2794] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.708347][ T2794] Buffer I/O error on dev nbd3, logical block 1, async page read [ 214.708445][ T2794] blk_update_request: I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.708456][ T2794] Buffer I/O error on dev nbd3, logical block 2, async page read [ 214.708551][ T2794] blk_update_request: I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.708563][ T2794] Buffer I/O error on dev nbd3, logical block 3, async page read [ 214.708681][ T2794] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.708693][ T2794] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.708787][ T2794] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.708798][ T2794] Buffer I/O error on dev nbd3, logical block 1, async page read [ 214.710957][ T8383] ldm_validate_partition_table(): Disk read failed. [ 214.712410][ T8383] Dev nbd3: unable to read RDB block 0 [ 214.713955][ T8383] nbd3: unable to read partition table [ 214.813825][ T8381] overlayfs: workdir and upperdir must reside under the same mount [ 214.892768][ T8404] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 15:24:41 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) close(0xffffffffffffffff) 15:24:41 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 214.911721][ T8396] overlayfs: workdir and upperdir must reside under the same mount [ 214.993730][ T8412] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 215.169366][ T8412] kvm: emulating exchange as write [ 215.384975][ T8418] overlayfs: workdir and upperdir must reside under the same mount 15:24:42 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x76, &(0x7f0000000080)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={r7, 0x101}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0xc}], 0x1c) sendmmsg$alg(r0, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="3456aa7c43fdfc9400270e10982d97e8c091a14dc7b080b250d3cadb547568ab6aa2d7766013cc1384ca6dcab54808d1917a312e77adabafd32103055e0b67c110d494454942e0a7ec87", 0x4a}, {&(0x7f00000000c0)="e834f2572b5cb4470896db448b2c7450e4e2464af728fc13db66e2face98137d11b127112843dbc5f244cc88c8b9f54c36458c", 0x33}, {&(0x7f0000000100)="2453479a976d411912f45ab27639044886416fe148ff17b146aa81302d3dd813039f28c5dc502914f40861a389c9042ed5cec49b0c5cc530d3b2a1eb691fd6292cdbc9571533081f1fdc6c6218d0f9f530", 0x51}, {&(0x7f00000001c0)="76723f1a93c5b749833d0b557f98a1132804d92c27bc67381da80b52868cabbf413b371dab24814854e0147a7fdf2b7d2a37192119ed96250888777c5b7375eb9cb09a428376763b80c507e0475037916275841c0ef4738e9e127b56fd606aad4a18eba2209d0e049be3d2f08d9375e8340a54954f9aaa9ce59fada5fab3963bb2962d8d6a4ddc4b661545455c2996fcadc6c2feecd0dcab7e765653d45b20e53567", 0xa2}], 0x4, 0x0, 0x0, 0x24044040}, {0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x48810}, {0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="b17a7e42636cd28e3b922c934a3090a70a5af2ea21e73df23778fd415e3bb5c1b629a9eca77bcb469477da96b46c41cb54a94aa6a93031de4bb1dd5cc197507862d30de8bed0fbf4ac13e60104c34889a5de3257b5ca50ae5f0e82a00543fe36d65179e558a6502228a28e6d53a77bb511d96f41d259c8a075de94ca221af9c6260018573cb22cd693001f995a5f64ed6e15c55ae892080a6094e1dd4cf9eaf55686b68e0605741d9223b75dee912f887800f75dcff5d13c4a29e8f7b02b3cdaa43d2697e5c50bf7b6930c0caa484c80909e5261388715204dcdb4e727336affd5d3e2354339a605b64bcd863b69b35d9e28f49f112c054bf0d71861fa37baebf9f057e041238d5a17c7cfe02523c786f325ca6225a9b7cab638a508f92d2b5f401dd8049b49f96535123def852bc47d7aab76df3134315598b9ca22304cd982e4669da458206a3626d1f24d3e0996672aa97e8e19ec0ed308afb20ec6e113729d9ae793fa3f9455dc34dc463c12a0c467a9041ad0c2c6264b557e57c469db84d430b6dca3eb2ac295a598146d998c39e1b9c6d0a1bff0372c1298c1ad83633e1a96d22d93063b145ce6218d9c8e35211202aa37d65be589971103e2da18c849a991ee8e83d87d49b8a59d5ee34cdcd61c28b39dd3668a13d8fee4439e0cbdd09c9e92c6efd79991774b2d1e94724c55a2f571f039df1c79f543df426e6f7308f3edc39f3cf6ccb2f1ea8baf9cadcee779633d342ca738d39f73f165dcd2e98984e0f5a70ea3200d1d8a93c6ed2f95348c2d59401927ce16bb0ea2f7cfc2c6e8130e55e2d5a990c323b7d35bf094b81ca6dc73cfda87da7dbefe603bcf38d148e1a8ece2fbec7a4a663543fd3f57881dcc9084087b3731cbcdd9753a82f2d356ee1095ac969c095b9e25ec33c305342f2e1fd65f0cd5c9757373025aacbe12ef0ceea285a19cb49c4b12149d84f50c091c4ced87f7e4b49a22de8727d09bc50b738ce703de277d0e2c267f578956ced92318d2c0e84c78f2274c70bf78dc1302d73580f04fff3d1d13f7983ea203fa2ce662f97b59f8e1f92558297a187e67a2dc588478f5aefcae9dada0ced39ef8eb08ea4b93940e3316dbdae23bdad98872249ffb23f9389fef66ab809bae28537927d7422e2e24c46ddbd172bbf9572f6a076e629d7abf2c84628894dd608320641008ae660fdaf4809a3c19ce92ab7fb10cfebdb5f268e2f2458dde855e97bfc46dac0a118cb2b631820b3d3d2b6ab6c93ba5942051749d66de0bc8fb66466f4e0264f0c7e0c7f1a11468471d809d881896ccc42f7f760bef4766c0406342253c988a7cbc71b070bd4cfe20db7e9867a9a303dfe7c68b3991cffe25c439705f2cb578a7b8c5a44ec863aa7d44c065daa30ad9f575ab120e0e98c061de590415f4bb9d0621b040376930acb945c2064114c2b88f8c81950c3ee047e5c6084da07aa587905bd3da3794c0a18f7be79be7a17df678ce6b1157ebbc7938c588b6afa59bd83cce89844b77ee4aef1ea86cf9f018b99e3205c8b53bb909f0062d45add160785e9c7c963922c842cb034cd48b1352d4a7eb5ddb8de66b26ebb67c6192f9154a33ea5c2b3b816537f2ba57482044a5635319b4acc0d4bc15d12b6dc09e43f794e6ad481f8b5875800298bd2c2e835d5747c570718a1458e8c337b138b92ff50a9b9eb75af4caeea7a19079348a07e4856d77a8ecfad6f28ffb5f3207b53439280c5a1ff857076a4439a7b60dc74d3d4b243d54cfffeced4fde414af49508c2e138014b748881819a1a0d9c6bf322e25e22a7be64dc827b45493e3bce105d60af408770362f2e1d686eb661ce5914078d8a6e8350e963ba40f819d2b5750aba4fb6611be4047f382d38b0a29bb887da1bc98ccec7a25f6f86899221a398e0521135f82ae7c2db93e283088595e88a2ae4f0544b7845d7cf68109ea244c094fd9e673cf990f169c04d62c68f04d3b798116d2c22fc1ba12de6d2a1e3abc2481be791823d78199ba62ed1cb839c2aa5b15a31606d74a4ede1095d631cdd913f8b0cbe56a065f2255172b756e231eac62db3bf8d07994c3a57cd2cff2738f9f8b3ef96f92a5f1d7ce230cd26c9e9d0f1dace495dcfbc5e3512333f9fee255bc9b22d12050545701455356c5edfd30d2bd48611b8785764cfe841db7d4fc2a78cad5f1a94572e2229809c20c8d6a378b46140970712aac7fe2d422ca727c1fa0e8caf455012d1184c0e3884b87fac597fe4afc5627329f29c3f990b92b5b7907424e03c79cd0530d20b29cc4b9963b75a98e29eb68d3625a32279a88c5626108e11bb40c42e820d05785fe4f83a89e63d8a766dd34e517cade2f813ea7c3fa96e90d5e0f7b16d7409ec1d057b0ddd9bda02ba19974bf2b3d3a49635fe11316e8a1e10f6aef7a7976c2fad0daa37a7f0e41432f71b312e4b5d4b3c2833b7752aff10619d1cb9421ab2714a888448487c9e5c07094ba5ea34da92b45c3ae7672cc785c07b917d5a15d3b514cbfdcb1da9b921f9f382768f5ac8fc196c1e97990202356f25c8126c21537789d255b2dac98c121ad7c380510515b87cfb52cf8cd7b1dc6d9ab6ff6ab1314366e9e2b4ee0e3759b0ec9a1f12be069ced7acfad14b51b611cb110d6fbaa733759a7a8fda9da73d24788fadea987ac1755670719a9c01809d8690eecbd65430b912f095aaf3a171b9b29c31418e6c7467079b6adaf94a18c41d788b752d0b5db1ba9b58635c6848a5962aebe53cde38f75af271ea5bdeeec37b3437f0dce47b5289fba93f9bb996f0f6442273c7e66d5404bafeff73bee827c6ef1ac23970babae02b8378b2dc3117e8ebf18d5e4489944eb6b2f0a909885ee8a46c4bf86da09647fdfd7120ddd21b720e8062248f7dd1277e7db5d5c34c6df4f93e868b5ab3bb46f4f4f815f30b5f4fd2c615fa67820a489fa8eacd37d7ca91301239ecee74586a3c53ba07db18026cb6a735d9fc3648305d70810b8c1656cb5f2df8f26143b094c59a2ba3f89a272d52a673bcb92b513d7f66aa53687d2eddce02900d30848371d3eaa915e2258a1e07cb8b3bc9285373857cb55bdc6c661ec3c952d64f500ca29f863072f785151a34ab1aaee0f4fe6ad5f6d16aaeb65c6d22fb3ef26d90d5cc1498ad60056d08aed417aa5b0f0c05eb5f5e0a488cc54afd393c43442f7c6ba388539d534c664f04fbc4229d17a04bf987ff7e1fabe99f1753f2c8cded0659ebff949cbe492539f86d53978922b703e629110459d2ced186517909d8f77a4ebbdaf8fcc417167befb81c133c601e863e727c57a806f915210b76f7c1218c2a828d1420b4a308585f4b8ec5779619ba2c08b2d67680371fbb849c4883155d83081d1f4b1cad9bb58ee2c813a58232da827e3f3a4bc75f9c73ae796888e421c87688ad1343248a1a9b05d322e158c85448aedca82433b8ff357dfe66ae500f96f1aed45d98d1776b3fb0c4f533401e27a99d70c1822909503627a465c1d2669f68fab0847897d33edc1b1d93b9c3e2e7463dbf34bee0a2f3999dafee0e8bc82f06710a41abba3687e73e8ababfb88683f71e635ce77c1073c79070f12dfac96ad751fb5bd658417fb9f3493fa706e4615c5dd9f07b9d1ca06e205e207c048530ff9f68bcbdf0c3b515a8c540e0465b7f09baca7cabac4edd6afa7a5593f72afea1c1fb3f33d92ee1f11298c53c5ab5cae1458dbd3a3d01e0fccb978733182c51b81979d3a458abb92e4be6b0c800f6850185c2e51e690b80aecd79436e593d79cf8776452d47269f7f49c473d01aee6a581f736a5b2aff1b4abd3fc00155b122909c68d4733c3615a5dca3d862d4a83ff4722fdfd9bf3832ca5db9b75676f0a2fd33b914ca2c5026a2dc9b511efd33941edf9513ece5c6a0fcdeab1ac43e4764cb20d6d516d47ab0fb5528ebb726ef3ba47336562e1820554bb081610a1fb529138d4ed6446c913aa872ab1fe222e93440ce2355fa9ca4bea2a5224b9d37dca085e4fb49f5d895bb8475daa93f881a60905d99a139833bc0fe51fc19605ca1ff075d482db901fb43c93f1d176d44331476a1300adb1d783635e3eb56b242a491ba75d23c066f66fa5e405320a9ea2c128ad92dd3a6733a320a9745bfb8424fb25ffa72870c34d4eb38cae0a5b37cdf7bfc4bdf1e5c265c47aae63195956c3560f77c40281d53734e66d982b7562b1fdd2b4362df54ba5bf19a422536fdb057a04d03bd4c8d7564b72582715f49994183212c6df4ec19c8d3d52c45244530c5ba2cbbf2e848770061b6cff18c738c92900397d8fb08cfd3a03ef9cbc74bb6cdd0ea88d0cf37a573500600a5b4a118375ec6845ed10f5dccc7525cd87cf248c2522f0152abfdcdcb80c9b048ec0f801f22ee3519ba2aa8dc3f593463d924f7a710e19aaf456b600b22ff790cbbd1e6d0a90d6aaa3f99d985b2d44a204b0236af0a6661fd16632c9d22298f13826da6a3f0ff94665dc9130fd52aac70df252f2b2ba1f385dbc47a285feadfd8360603c1496d1a672e334b024fd5b310749cde7b813de77b12f77b084d6a43bb6df04b2726b675297a551f44600a0e50b5df828cd7f6a517173800637a4d80f2ed37e43569260ff8dba588f613749ed5efb88703110a97719b4c02b9381da990253f239b2dd990264e0337924b1ee68002e224af233c6c7c4c374ed5797cd2c22eabe3f6b2430a68ba8e6fd84dbdbfc80c3ba1cb34928fa918fd5f846f93edbde77a25ece121c4153f91b47eb85f74db0d2a46e4ea53c50a208e9559d78472101b0014335b9417e0cd5d8bc546e370da06cb971ff4364c30fe9c2b043e258f5a027dfb6affd899c7e7a317eb4fd75bcab0ba4a5739e5faee6c366ede944af545b0573f8fbb793ba4bf5f003b26a1d6f94882a7f2c8a6b53820302e9edb7ef2ca8dc8cff2e2227df256206fb14e3145aa6db094ece19c88b13fe9cc1992b06d2f0a900b9507a11478bd8a62326e118340ab2f77a69553a896f5008a642ede5544896c8802ff6ce9b5cdb1984a641e5f4f25816494929a19b833917675f924a1ade62df201da76af4bd0f693407fcb9209bfdf038433c60056e62fe3170dc02f1f11958d24ec6100748522b623698be901f3184fd009ad14ac5db69216258850f14e99bce6f8722cc012e0524588c150495bc1cde51dd474e71872d0ebcb5789358b2f02f5e688851d304c58f2568afe0c4c5b404d99f12b35c5b56e98b5001037ca30d96d356effa50905029e27c8aede7aa7fe5071461881002f6a233aafae92cb3f6351002350e4d1f9b5e16315af4ddcc477da69541f845582cd91eacd54d808146495dc8602d68a42f991343f313c4429cb27370b26f03d27b2c21d4df9b946bef0c113afcac6ca3012ca49e1fed9d167d81940e6e7fcbd48c9e5a4a7d9cd3f70a89b4b07c3941d52e5e6800775577d68bad9f88f8db683d15a1d8df0be8f41a4146cba43cedbfc6f26069b9c961ec798a8ae3f83d29bc087dbfe31031c0e4126b36da9a9c362af8548ed351c0853d37348e01354fe78f751c5dbb26b837ee53fc88038283d3f65785b1e998b2f85712cea378866219e1a8fc0c8964438e5866248217f5e166ad77a3426f829db1d621125c3c0fa692033ae5eda22a9d8c9de8eeb59f48936e5ee9be4a106ab89b56e524f67874c644f810d0de406f26fb1cbc83f67a2f32c07376d7e0d6936980592426b9e7bc7646f1ce9218dec3984e18383b976a072afd65f4d62e963f437324bfea1b967c8e7faf6f8cee", 0x1000}, {&(0x7f0000001300)="c8ca2a15aca3bbed94e2d1cfa0826fa42477dd46d9a27d3b8f38de96c78a6ed267ff778fdb27b1cf84b40f603c83f114169beb94ab9c052eab3ec86d354e4f0d11f7b5faba81b1939a05d68d2300c8052418fb5bb45f7c3620704260b4201e6b9ee81d5751356b2a0cf7f9aa245975475435de8c3fc46387f235f589f58dec8aa312afe51d69888eab6c0d0b32a447f563bfdc64251de940a7411699059af492b19a71ef81e45fdba8c1085e3e7ab72e3349b9c73f92e79605f68bf77b0089fe104e4614835e00c69949", 0xca}], 0x2, 0x0, 0x0, 0x24004000}, {0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001440)="6230d797e52466bbfa0fd7b7c7d641f8749469b080f9981d42accc8f3a005b9709d891286f261bf4fa1ecb8bdb9e4acda3203e88a89511a8bb41e5b432ed0faaed4d57bc25a5bd26a4a102aba4346777aa0b7e8297aa9b2a024cda20d357303b", 0x60}, {&(0x7f00000014c0)="8da8828af8a5e598b29a4f3ff411d36e3dab2874368ec8ef315e6e9274e86e7e64d81c23841065dbb677f59ea1c9b49873e37573caf7d92e4793490d9a8204655e3b6e772558e4005147b82855f3ae574d761d9c3ac815a7b24ab3e9ccee43d607d9", 0x62}, {&(0x7f0000001540)="3fbfb91f6b9f96a46d575b7ad0e9cf00f1b7", 0x12}, {&(0x7f0000002780)="1edd661a653205081e2842cac216ba8c5d7b3de114b28255231cea8c09c01aa84246ca285b8a7ea852e553585277f39006c00ccfe5ce896d06b669ba01bc2f9a9e32f54d69e84dbd8a423b4b116c6fe41084eb6f290d13473aa52c060800000000e4ecbd96bc1f4072a3de9c72be501813bf9fadec8bd428e594779e216edb0628a033a517fdd8d4f58969ca8fc5aab1f5a5778183fefbd0c15b7f735d8701f8feb3e0374b845119c8282c4937de3b8441195529c1e324b82d13e43e352d79a0c65f7ca64c4453f68aec34c2f74ff178480179a6af", 0xd5}, {&(0x7f0000001600)="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", 0x1000}], 0x5, 0x0, 0x0, 0x8000010}], 0x4, 0x20000041) 15:24:42 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x3ff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x321802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffffffffffff2e) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) fsmount(r12, 0x0, 0xb8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r9, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4000, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) 15:24:42 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000180)='./bus\x00', 0x458900, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfffffffc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendfile(r0, r1, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:24:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:42 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 215.927154][ T8445] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 15:24:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x76, &(0x7f0000000080)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r7, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={r8, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000180)=0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x11) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet(0xa, 0x3, 0x3) r12 = dup2(r10, r11) dup2(r9, r12) syz_kvm_setup_cpu$x86(r12, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 215.967876][ T29] audit: type=1804 audit(1593876282.302:4): pid=8448 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir538453685/syzkaller.JPDl8C/8/bus" dev="sda1" ino=15799 res=1 [ 215.974888][ T29] audit: type=1800 audit(1593876282.302:5): pid=8448 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15799 res=0 [ 215.982833][ T29] audit: type=1804 audit(1593876282.312:6): pid=8448 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir538453685/syzkaller.JPDl8C/8/bus" dev="sda1" ino=15799 res=1 15:24:42 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200201, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000040)) write(r1, &(0x7f00000001c0), 0xfffffef3) 15:24:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$binderN(0x0, 0x0, 0x0) 15:24:42 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000200)={0x10000000, 0x0, 0x2a}) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000002e0007031dfffd946fa201000100000000000000000000e50c1be3a2f7fffe7e280000005e00ffaa1c0009b3ebea966cf0554edc7de8ddeb133c2bff0100000000000015f8ffff30", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1004}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000040)=""/14, 0xe}], 0x6, 0x0, 0x2000000}}], 0x400000000000146, 0x42, 0x0) [ 216.053896][ T8445] device bond1 entered promiscuous mode [ 216.054132][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:24:42 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={0x0, 0x80, 0x1000}, 0x0, &(0x7f00000002c0)="afa956f99fd5ca40a2a1515e0d4bba7d88a39d6919ef447e8984c7e0cd4407af0aed3a82dc305722365fc3188e138c41acd2c584ddd617254db80f19a6dae9d7585a00bb7a94c78069051dbbbb88ebde2a6e5b6b75df1a0ce8c65323f27c5b4c2f9a3177e57ddb7135da90f1784d0bf29366e0f2c970aea6115c47b75127e0ef", &(0x7f0000000540)=""/4096) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x58, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x58}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x1) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140)="73844ae89d", 0x5}]) [ 216.058912][ T8450] device bridge1 entered promiscuous mode [ 216.073645][ T8450] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 15:24:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000000)={0x80000000, &(0x7f0000000180)="f35f0d2037e6cf81db02f88354e9cc1efeaff200d57a7850523e5e430d3ce4f4317e2221124e61c9c87f2f854fba85d1c0967826b5a9c7c988918745d1f22791071ab31dd678eaf25f8e369209675bf0c01fd3c6e9ee3a2535e3611198a5a68f8d201cdf6ec9a663f6fbb4bb24e0bb5c50a033a31306daf8bdb8b80b4d1d41f30f69d873e88ec9bad78f4b7f9de042e24fb85bcca77eb2190ce2d96b85294db28acfa6aaa948da0a"}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 216.089790][ T29] audit: type=1804 audit(1593876282.422:7): pid=8448 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir538453685/syzkaller.JPDl8C/8/bus" dev="sda1" ino=15799 res=1 15:24:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '\x00'}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d600100026000080", 0x14}], 0x1}, 0x0) [ 216.089859][ T29] audit: type=1800 audit(1593876282.422:8): pid=8448 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15799 res=0 15:24:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x850) 15:24:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, r3, 0x400, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}}, 0x0) [ 216.091636][ T29] audit: type=1804 audit(1593876282.422:9): pid=8482 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir538453685/syzkaller.JPDl8C/8/bus" dev="sda1" ino=15799 res=1 15:24:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '\x00'}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d600100026000080", 0x14}], 0x1}, 0x0) 15:24:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=""/38, 0x26, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8, 0x10}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x20}, 0x10, r2}, 0x78) [ 216.110583][ T8450] bond2 (uninitialized): Released all slaves [ 216.470601][ T8515] block nbd2: NBD_DISCONNECT [ 216.492248][ T8515] block nbd2: NBD_DISCONNECT 15:24:43 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) fsetxattr$security_capability(r1, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x9, 0x1}]}, 0xc, 0x3) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x1ee) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, 0x0, 0x1ee) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xffffffffffffff3b, 0x0) 15:24:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000000109040000000000000000000000002400018000018008000100ffffffff08000200ac1414000c000280050001000000000014001640000000000000000000000000000000003c0002802c00018014000300fc0200c7f2dbac5295d69e0c3272c030f10000000000000000000000000014000400ff010000000000000000000000000c17c6809a627166010000000000080007400000000000"], 0x90}}, 0xc004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000100)) 15:24:43 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '\x00'}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d600100026000080", 0x14}], 0x1}, 0x0) 15:24:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8280}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x2010, r0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62317ab93aa9468b75732c776f726b6469723d2e2f66696c65312c75707065696c653000"]) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bind(r2, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="ca1349f37802e55f50b009c2bac2a5f8e5dfa17ebb95162c40e7fba9bf816bec105b6fb9208f972e4f850e0b126eb4cf4857aaae19ac5ced6e880dc41d74072cb0336237e693fad104f9c53c3837f1467f07ffc397b1cf35826d1d1553cddc52552af87276d4512b7f11f19617cf17cf5312e0525d33b27269c6a7e127ad78e8ddae98dbb0a63c24db262b45912e422edffba9f048f0a65c38c31232245fd9e1a9703388c44c77972f0534c1eef28eb45b00d234", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x28) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') setxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000400ffff5927cfb65e7465ad0000100000000015000020"], 0x24, 0x0) 15:24:43 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="059bc1471782b1cfbdb3130da4cfe56d2ccba57b7981f402732cdd61b0c9ad8be790594cca45a1d36888187c7bf8d98ca21f75fd05d75a798c2d4be5c5587bd957f42a0d731cfffb8016aabb89000000000bfa907faa8e5fac4a6c273154e0589f7fca40e5b0b34ff6c9d0ad6a37f1829f0c863382b1935e6d5ff37ece"], 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x0) [ 217.143099][ T8556] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.143162][ T8556] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.177621][ T8559] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.177634][ T8559] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:24:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) exit_group(0x0) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 15:24:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '\x00'}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d600100026000080", 0x14}], 0x1}, 0x0) 15:24:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:43 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="059bc1471782b1cfbdb3130da4cfe56d2ccba57b7981f402732cdd61b0c9ad8be790594cca45a1d36888187c7bf8d98ca21f75fd05d75a798c2d4be5c5587bd957f42a0d731cfffb8016aabb89000000000bfa907faa8e5fac4a6c273154e0589f7fca40e5b0b34ff6c9d0ad6a37f1829f0c863382b1935e6d5ff37ece"], 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x0) 15:24:43 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) preadv(r1, &(0x7f00000017c0), 0x0, 0xf35b) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x30, r1, 0x100000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setpipe(r0, 0x407, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r5, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x2) 15:24:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) exit_group(0x0) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 15:24:44 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/48, 0x30, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x23) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="fd20000015", 0x2e, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0xffffffffffffff52) 15:24:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 15:24:44 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000280)) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:44 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x7a05, 0x1700) 15:24:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:44 executing program 1: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x2800000000000000) 15:24:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x4}, 0x16, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) creat(0x0, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x1ee) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r3}) write$9p(r1, &(0x7f0000001400)=';', 0x20001401) 15:24:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x4}, 0x16, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) creat(0x0, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x1ee) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r3}) write$9p(r1, &(0x7f0000001400)=';', 0x20001401) 15:24:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000000280)='./control\x00', 0x0) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r3, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffc]}, 0x0, 0x8) fcntl$setsig(r2, 0xa, 0x11) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa0000b64) open(&(0x7f0000000040)='./control\x00', 0x400042, 0x0) [ 219.001912][ T29] audit: type=1800 audit(1593876285.333:10): pid=8619 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=15809 res=0 15:24:47 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) preadv(r1, &(0x7f00000017c0), 0x0, 0xf35b) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x30, r1, 0x100000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setpipe(r0, 0x407, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r5, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x2) 15:24:47 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:47 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x300, 0x70bd28, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x1, 0xff, 0x3, 0xfe, 0x0, 0x800}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20000000) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80800) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f00000003c0), &(0x7f0000000400)=0xc) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000004c0)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x38}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924923aa, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r7}, 0xc) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r7}, 0xc) sendfile(r8, r0, &(0x7f0000000480)=0x7, 0x9) 15:24:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)='~', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) 15:24:47 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x0, [], [{0x3000, 0x0, 0x1, 0x5, 0x7a, 0xd97f}, {0x6, 0x4, 0x1, 0xfffffffffffffffa, 0x6, 0x9}], [[], [], [], []]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x493ab36e644d0a1c}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x43}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x40095) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0xab, 0x7, 0xc0, "d390170749d14ab37bd66ca1b2984ff0", "4a4d3a351b43a634c2d32789568836168081c567139931c5e998e9dacf81266e0281eb17a30bc6508061251e6383d538c05e0a46fb81dc611fd673f5b575ff8fe006b501f3e6b4ff1e69cac17c3b58a61f668a7c8f0080d5384eca3a7d13561158b90e143db909504ac6ffc9e14d1d0ed41bf985f5908fdbe1a77f2e8c3eca144dd5380797305234d8d36a68b074f6795e8f8cd99289"}, 0xab, 0x3) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3}, 0x2af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 221.151290][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:24:47 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x20000885}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r10, 0x100, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000040)={@empty, r9}, 0x14) 15:24:47 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:47 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x402080, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4009) write$binfmt_script(r0, &(0x7f00000006c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000000801010000000000000000000000000900010073797a310000000005000300060000000c00048008000900150e0590060002", @ANYRESOCT=r1], 0x3c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000003) 15:24:47 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000090d6143ba94a5c7b3a9bc4d45f64b95b7eb2e6bf31eab896f9f4a6be70877a89870c4c14fed7ae97fe98330e0613c496e2085f49117a056684e45cd12992507c7a00ab217f782db8e321372f8ee36581a5848c21839f9b0fdbc86faa4028802ac6f7cdb9aa28a93b7092300cd1163a31734f17d3d3428eed56a11f3d4ae090466006a229b6bd7e02dd2780393f1943e36c72bc6ac7c1eeab3c79062568c98a7a8c494c3803797dac0b3768b4816568d12403568e7056fe02eaa97e7e001d956c21e4227274b189bee03392bc01f73c8c0cca4", @ANYRESOCT, @ANYBLOB="0400000000000000703e561cd70f08000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x4000) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)={[{@nfs_export_off='nfs_export=off'}, {@metacopy_off='metacopy=off'}], [{@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}, {@euid_lt={'euid<'}}]}) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pkey_free(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="d0b2619b068e6e8b1eba6b8594688491f151b4f3f785ac466593febc1b79", 0x1e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000) finit_module(0xffffffffffffffff, 0x0, 0x2) [ 221.177416][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:24:47 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 221.191709][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.191878][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.487729][ T29] audit: type=1804 audit(1593876287.823:11): pid=8772 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir299908683/syzkaller.8GHGql/14/cgroup.controllers" dev="sda1" ino=15833 res=1 [ 221.515852][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:24:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 221.530948][ T8773] overlayfs: unrecognized mount option "appraise_type=imasig" or missing value [ 221.540643][ T8768] overlayfs: conflicting lowerdir path [ 221.660271][ T8773] overlayfs: unrecognized mount option "appraise_type=imasig" or missing value [ 221.680690][ T8768] overlayfs: workdir and upperdir must reside under the same mount [ 221.748639][ T8772] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 221.824613][ T8772] File: /root/syzkaller-testdir299908683/syzkaller.8GHGql/14/cgroup.controllers PID: 8772 Comm: syz-executor.4 15:24:48 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) preadv(r1, &(0x7f00000017c0), 0x0, 0xf35b) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x30, r1, 0x100000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setpipe(r0, 0x407, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r5, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x2) 15:24:48 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:48 executing program 1: socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100)=0x1f, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 15:24:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2ced, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000200)) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) getcwd(&(0x7f0000000240)=""/170, 0xaa) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) 15:24:48 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:48 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x414000) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fddbdf2501000000000500370000000000050035000000000008003a000600000008003400ffffffff05002900d09500004b8df192d90e60e80b6324f1cae7e1ff381025305f42"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x209) 15:24:48 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:48 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:48 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:49 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 222.640601][ T7840] usb 5-1: new high-speed USB device number 2 using dummy_hcd 15:24:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x80000000) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="8000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, 0x0, 0x1ee) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace$setsig(0x4203, r4, 0x5, &(0x7f0000000180)={0x39, 0x2, 0xce26}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="8000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0}) 15:24:49 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 223.017877][ T7840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.017952][ T7840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.017972][ T7840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.018001][ T7840] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 223.018016][ T7840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.023345][ T7840] usb 5-1: config 0 descriptor?? [ 223.074452][ T2514] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 223.424576][ T2514] usb 3-1: Using ep0 maxpacket: 16 15:24:49 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 15:24:49 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:49 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 223.498934][ T7840] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 223.555684][ T7840] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 223.702322][ T8098] usb 5-1: USB disconnect, device number 2 [ 223.734854][ T2514] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 223.734878][ T2514] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 223.734893][ T2514] usb 3-1: Manufacturer: syz [ 223.734907][ T2514] usb 3-1: SerialNumber: syz [ 223.736438][ T2514] usb 3-1: config 0 descriptor?? [ 223.796095][ T2514] i2c-tiny-usb 3-1:0.0: version 63.ce found at bus 003 address 002 [ 224.205965][ T8842] udc-core: couldn't find an available UDC or it's busy [ 224.212992][ T8842] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 224.232089][ T8842] udc-core: couldn't find an available UDC or it's busy [ 224.240273][ T8842] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 224.274546][ T2514] (null): failure reading functionality [ 224.297436][ T2514] i2c i2c-0: failure reading functionality [ 224.311643][ T2514] i2c i2c-0: connected i2c-tiny-usb device [ 224.320783][ T2514] usb 3-1: USB disconnect, device number 2 [ 224.506067][ T8098] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 224.874319][ T8098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.885569][ T8098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.898351][ T8098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.912659][ T8098] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 224.922751][ T8098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.932706][ T8098] usb 5-1: config 0 descriptor?? [ 225.024333][ T7840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 225.225834][ T8098] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 225.241351][ T8098] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 225.266836][ T7840] usb 3-1: Using ep0 maxpacket: 16 15:24:51 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x2c) socket$key(0xf, 0x3, 0x2) openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) pipe(&(0x7f0000000d00)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) socket(0x1, 0x803, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 15:24:51 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:51 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x9c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}]}}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xffffffffffff4079}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48800) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 15:24:51 executing program 5: fanotify_init(0x1, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) 15:24:51 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 225.345335][ T5] usb 5-1: USB disconnect, device number 3 [ 225.477109][ T8934] IPVS: ftp: loaded support on port[0] = 21 15:24:51 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:52 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x2008001) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), 0x4) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x1ee) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 225.604285][ T8948] Can't find ip_set type ha˜ˆ(x.§ort 15:24:52 executing program 2: clone(0x2000000026000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) inotify_init1(0x800) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000100)={0x2, 0xad8, 0x8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x19, 0x4, 0x4, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x10006}, 0x40) r5 = memfd_create(&(0x7f0000000300)='/s\x00\xe6\x8f\x93c\xb6\xc3\xbc\xc2\x00\x0f(\xf73\xedX\r\xcb\xd5\xd6,\xf8\xa6\x01>\x8b2\xf8\xf7p\f\x82\xcb\xbf\xf8`\x8a\xa8\xd40\x96\xd9\xae\x84\xea\x01\xffo\xc2\x83b\xf5\x8b\xb0\x16\x8e\xf4\x90c\xbc\xbb\x9b\xd4\x86\x97\x04j\t\xf9\xd0\xcf4\x1a\x99\xe7\xfc\x1b\xa8X\x12\xd4M\xa1\x8bzN\xa7\xf2mA\xdbJ\xed_c\xde\x83^\x1dlx\xbd\xfb\x05[\xff\x96p\xd9\xd2nP\x19\xb6#\xe0\x9c\x16\x87\xb5+\x14\"W\xac\a\x06e\x92FR\xdd\xca\xed\xc1\xfb\'}\x92\x13\xb0\xa0\xf8\xc6\f\x17\x8e\x80\x00\x00\x00\x00\x00\x00\x00\xad{\xdeHW0\"t:\x1a\xe8\x95T\x84JReHM\xeb\xda\x9e\xb3+\xf4\xb0\tPO5\r\x16\x98\xbe\xe8W\x0e\x82\xaa9-e\xd9\x98\xf5\xc0\xe2', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x110, 0x5, &(0x7f0000000080)=[0x1], 0x2) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r5, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') 15:24:52 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:52 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 225.824191][ T7840] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 225.833360][ T7840] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 225.858270][ T7840] usb 3-1: Manufacturer: syz [ 225.878845][ T7840] usb 3-1: config 0 descriptor?? 15:24:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r6 = dup2(r5, r5) r7 = dup3(r6, r4, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0xfff}, 0x16, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 225.938234][ T8934] IPVS: ftp: loaded support on port[0] = 21 [ 226.059750][ T7840] usb 3-1: can't set config #0, error -71 [ 226.060838][ T7840] usb 3-1: USB disconnect, device number 3 15:24:52 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x9c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}]}}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xffffffffffff4079}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48800) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 15:24:52 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/18, &(0x7f0000000180)=0x12) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@null, @bcast, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000035000511d25a80648c63940d0424fc60040006400a0003000200000037153e370400018004000300d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x759}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6af8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xcd7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3dfd}]}, 0x54}}, 0x40000) 15:24:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 226.467915][ T9028] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.496359][ T9028] openvswitch: netlink: Either Ethernet header or EtherType is required. 15:24:52 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000180)=0x80, 0x80800) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c800}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="25bca274769e620a2734fa0095e0612687ecb86a548802a90234000000000000ce2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) r7 = getgid() write$FUSE_DIRENTPLUS(r5, &(0x7f0000000480)={0xb0, 0x0, 0x6, [{{0x6, 0x3, 0x2, 0x783, 0x81, 0xffffffff, {0x3, 0xfe, 0x3, 0x6, 0x81, 0x1ff, 0x8001, 0xaa, 0x7, 0x3ff, 0x8001, r6, r7, 0x1f, 0x81}}, {0x5, 0xf14, 0x8, 0x8, 'geneve0\x00'}}]}, 0xb0) fcntl$dupfd(r1, 0x0, r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x2}, 0x6}) [ 226.524896][ T8675] tipc: TX() has been purged, node left! 15:24:53 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 226.542872][ T9033] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.542903][ T9033] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 226.582178][ T29] audit: type=1804 audit(1593876292.914:12): pid=8982 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir538453685/syzkaller.JPDl8C/19/bus" dev="sda1" ino=15851 res=1 15:24:53 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x10004, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101202, 0x0) sendmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@canfd={{0x4, 0x0, 0x1}, 0x1c, 0x0, 0x0, 0x0, "8a4e44b5f185c62a8cbf4fc11f1b3245c59f82966518e3e6f86f9b56fa644bcf2b683db5c3198430ae71282b856ac8156f7fd92542873b4c0d2b066745d4163e"}, 0x48}}, 0x20000810) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="75707065726469713d2e2f66696c65312cff6f7765726469723d2e2f6275732c776f766b6469723d2e2f66696c65302c00"]) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 226.654942][ T8675] tipc: TX() has been purged, node left! [ 226.761749][ T9042] EXT4-fs (loop2): quotafile must be on filesystem root [ 226.867422][ T9053] EXT4-fs (loop2): quotafile must be on filesystem root [ 227.082651][ T29] audit: type=1804 audit(1593876293.414:13): pid=9059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir538453685/syzkaller.JPDl8C/19/bus" dev="sda1" ino=15851 res=1 15:24:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 227.189554][ T29] audit: type=1804 audit(1593876293.464:14): pid=9060 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir538453685/syzkaller.JPDl8C/19/bus" dev="sda1" ino=15851 res=1 [ 227.250205][ T9063] overlayfs: unrecognized mount option "upperdiq=./file1" or missing value [ 227.304883][ T29] audit: type=1800 audit(1593876293.464:15): pid=9059 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15851 res=0 15:24:53 executing program 4: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000500)='./file0\x00', 0x141142, 0x100) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r3}) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800444c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb3c, r6, 0x1, 0x70bd28, 0x0, {}, [@NL80211_ATTR_PROBE_RESP={0x3a2, 0x91, "687b964a12926940160ec7d14ef1a94cc5230c3852a885a59bebcc113ff3f3a3ea845d8a27fbe4c86f435c8ea5846be261cd55fb27cfb39eb9c0b89e76e1cf793c622bde4a56749833be070c37959042b0a0847c987fcf9465a90ad14331530dab2fe17c048550589a095165b0b48a84e71b5fb4bb6fbea273b7966bd030ed76894e0966a4f5fb7ce6ce03b7eecc330664ad128ffc4bb3f0df6134f325e5ea541fb59b43fc8f6fdc3d6ac4e47f1a4cdcf5622d7c53819ef86472f120dcf06c804830d2d3474109fa99d4808dd677e050ec2f409ca39dde8dda2834b3d108aa20da8bc782937edf02f55873cd624d5b00f0f93531aeb4cf1c4181ff49b4eefd9bcd659bd20219f3529e4acd2b2bcee55de03a6e6335fc527df5b213f2c4993b9222f8f953990fdddead9fb21cc7c5dd751c9f92deafa16041d1216ba6a4c28d8fcb5c42a9f603bc279158482feaf8af57412844a4e0a3bcfdd7103a1587bb2f4c6bbdbcf3ca2e7da2bf4b5007e307e3da35f9533eca9629b64a0d0798c3e94670f9e3b5cc81ae973b39351ce1072e39c925feb5c3e37e6b5ef2408c57f574fe6929573095009e45aff8dd90ceff45547a4037fb04e6daa17b36c459c9771ba66bd0afc38015d8ee032ce4be8d921d80ac4527e5ec8a6149924778a58053367f62430dec1bc1111ed90cfbd65271e2e992a2ddfa2d3d426b29c3c045d3c98ea6f9092436a1ccbe2521b52813395c0a918d11172bfbae4e9772fcd98753cd9694f5b075923834cd18e2d8eb7cb829f4145d0993566aaad6f2062f23840122ae5067b9ee0dbca5c48a4a7cd9dccb9000a5f0b2966d14c187bfa2da3aa426bbc79417d2d77257364ae4d30b9fe189063007f46f78f50e9b4fd4188d8c5d8ffad7aace5e93847b3aae5e98faa79cac1c2fcba83d4fdedd9b344d50fbf1d493c2d7a7762b50dc001958179e1dfa4cc4ec86b6af09add4c915cf33aa5803aed3ff5253ffaa21b3008a37323b858829097e01a08e872f637ff0d47a62bac2508fbe809309fa4f8e8ae285dd30614a30934d863ce30f569de9667401fd3b40effb375c3709473e21f6bdad1ea89388a4c4ed166b9c5c36a08a226bb78994a749f02ac88ad9bde4eb723db74931477c665dcaaee68124f01236d5135bf20a0d9f4ec0d414efe9d016e9e889d9e75fa2f1e64e7eae4161ee1fbc7174e1cbcb7c2390ba8e9b73554e696f2eb5da5eeca866cff4a0257451413aa85389c7d9851e91a62242c329ed69cb8f1e792d81b840a82454d74dc76df171331c9af030ba654d406faa"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_IE={0x48f, 0x2a, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "4c46b9e415cafdea5eef7e6430c96aa6756490486486f1038c97f454ca23c9ea9793d7f26e5045782b785638d27495f58ac910e0fce0fb64ce21bd3d0ab3dd84e07e782f9e953f2364af2f92b18a458e981a4d3e515d3b31ee2dff023160e657edcc67c84f8c719b9af0db5b99ff0369f7399a840155f41459150987a243cf5ae419c86410a4c2d22c68a96d0132de2bff60750851ffe6"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_RIC={0x21a, 0xb2, "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"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4008044) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r7, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r7, r2, 0x0, 0xa198) 15:24:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x121100) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000000c0)={{0x2b, @empty, 0x4e24, 0x1, 'sed\x00', 0x29, 0x80, 0x49}, {@remote, 0x4e20, 0x2000, 0x10001, 0x7a3}}, 0x44) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150b99a283ff07b8008000000000000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 227.314640][ T29] audit: type=1804 audit(1593876293.574:16): pid=9037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir538453685/syzkaller.JPDl8C/19/bus" dev="sda1" ino=15851 res=1 [ 227.327775][ T9066] overlayfs: unrecognized mount option "upperdiq=./file1" or missing value 15:24:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 227.581832][ T9073] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:54 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 227.630567][ T9072] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 15:24:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000001c0)) r3 = socket$inet(0x10, 0x2000000003, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) r5 = dup2(0xffffffffffffffff, r4) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800444c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb3c, r6, 0x1, 0x70bd28, 0x0, {}, [@NL80211_ATTR_PROBE_RESP={0x3a2, 0x91, "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"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_IE={0x48f, 0x2a, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "4c46b9e415cafdea5eef7e6430c96aa6756490486486f1038c97f454ca23c9ea9793d7f26e5045782b785638d27495f58ac910e0fce0fb64ce21bd3d0ab3dd84e07e782f9e953f2364af2f92b18a458e981a4d3e515d3b31ee2dff023160e657edcc67c84f8c719b9af0db5b99ff0369f7399a840155f41459150987a243cf5ae419c86410a4c2d22c68a96d0132de2bff60750851ffe6"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_RIC={0x21a, 0xb2, "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"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24000094) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="230000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 227.694990][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 227.723606][ T29] audit: type=1804 audit(1593876294.054:17): pid=9076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir299908683/syzkaller.8GHGql/18/file0/file0" dev="loop4" ino=4 res=1 [ 227.821294][ T29] audit: type=1804 audit(1593876294.084:18): pid=9073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir299908683/syzkaller.8GHGql/18/file0/file0" dev="loop4" ino=4 res=1 [ 227.821954][ T29] audit: type=1804 audit(1593876294.114:19): pid=9073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir299908683/syzkaller.8GHGql/18/file0/file0" dev="loop4" ino=4 res=1 [ 227.828650][ T9072] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 227.828685][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.213003][ T29] audit: type=1804 audit(1593876294.544:20): pid=9076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir299908683/syzkaller.8GHGql/18/file0/file0" dev="loop4" ino=4 res=1 [ 228.222185][ T29] audit: type=1804 audit(1593876294.554:21): pid=9076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir299908683/syzkaller.8GHGql/18/file0/file0" dev="loop4" ino=4 res=1 [ 228.279886][ T524] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:55 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x9c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}]}}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xffffffffffff4079}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48800) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 15:24:55 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x6688, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e7a455df254f105a47fd74861740002", 0x17}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, 0x0, 0x1ee) fsetxattr$security_capability(r3, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x8001, 0x2}, {0x7ac, 0x10001}]}, 0x14, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x41) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r5) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0xfff, 0x9d82}, {0x1, 0x3f}], r5}, 0x18, 0x0) 15:24:55 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:55 executing program 4: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000500)='./file0\x00', 0x141142, 0x100) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r3}) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800444c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb3c, r6, 0x1, 0x70bd28, 0x0, {}, [@NL80211_ATTR_PROBE_RESP={0x3a2, 0x91, "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"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_IE={0x48f, 0x2a, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "4c46b9e415cafdea5eef7e6430c96aa6756490486486f1038c97f454ca23c9ea9793d7f26e5045782b785638d27495f58ac910e0fce0fb64ce21bd3d0ab3dd84e07e782f9e953f2364af2f92b18a458e981a4d3e515d3b31ee2dff023160e657edcc67c84f8c719b9af0db5b99ff0369f7399a840155f41459150987a243cf5ae419c86410a4c2d22c68a96d0132de2bff60750851ffe6"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_RIC={0x21a, 0xb2, "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"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4008044) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r7, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r7, r2, 0x0, 0xa198) 15:24:55 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="850000006d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669ffa4aaca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55545a34effa077faa55c59e88254f54077f799bf1683537a8ea0244535b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60406e6d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494da484ebad0407d9440b69ad9f19ab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd4b09012175484135f0e519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed564c0a2fcb6da006b5d0fe4886a9edee77f6986319f85dd06a24c37e588959f34d2c5f649b85e5b0baada5f1aad49da960f10ddd86e2d1638f90b79c7f8526a137163716ba8219392d65582b33e7dfd27e69d71a19da16f2c3e683176d47c2599d03008c05c8ce9edd1ef5cc236934ac483b8bf80794ecb7ac85ce453c14d29dab6dcf1855a1ab3d7c2ee8d43e479f3a17a4ac213bfa477f3da41564aac25192cb10e4e4dfc5cfbdef1d4cea17286ec8f6db16dc62b8ca086734223cf718c6bb21eae7eca3cb1baa3105a33cfc2cd90adf3720d13cd114695fea0cd05735a16d3c4e101ac6713c630445402b02e35e48f049b44631062d465506ceec6947c78fd2bb24c288d719668a712d529d9d0ba7b0db4cca204c6fae33f60c01559eafbed82203bf45781e3681c0ec1d041e18dde1ae9033946a7acf61d1c3bd1c988aabea18a402a93e156bcf4a4043bfe7575a977b0e0a76647f949edd8e86b58702e5edc98405db78242b542ab94182db71a0d5a0354ceb4399aa35ecfed552652f93f621bfeb4d355a92403fed9c8b9ffe4aebe9a805daecfb937ad1d8dedcbb65c00ce59a30d2f96eaeff998df2d171866a647ab31c2155e68d8b06aee4c51b14261bdc76a9e389939a4e8a400a75cf210d9486561905fabc950c1ae74e33a914ce3cb1d55b3f0c5630cf7a0446000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) [ 229.638218][ T9106] FAT-fs (loop5): invalid media value (0x00) [ 229.644887][ T9107] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:56 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 229.658659][ T9106] FAT-fs (loop5): Can't find a valid FAT filesystem [ 229.727962][ T9114] IPVS: ftp: loaded support on port[0] = 21 [ 230.036396][ T9106] FAT-fs (loop5): invalid media value (0x00) [ 230.036408][ T9106] FAT-fs (loop5): Can't find a valid FAT filesystem 15:24:56 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:56 executing program 5: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000500)='./file0\x00', 0x141142, 0x100) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r3}) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800444c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb3c, r6, 0x1, 0x70bd28, 0x0, {}, [@NL80211_ATTR_PROBE_RESP={0x3a2, 0x91, "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"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_IE={0x48f, 0x2a, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "4c46b9e415cafdea5eef7e6430c96aa6756490486486f1038c97f454ca23c9ea9793d7f26e5045782b785638d27495f58ac910e0fce0fb64ce21bd3d0ab3dd84e07e782f9e953f2364af2f92b18a458e981a4d3e515d3b31ee2dff023160e657edcc67c84f8c719b9af0db5b99ff0369f7399a840155f41459150987a243cf5ae419c86410a4c2d22c68a96d0132de2bff60750851ffe6"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_RIC={0x21a, 0xb2, "7f86d3d747dd7ab0acd9f21c629b4a503b85e3b4f474ac2ca05d12e6a2114f7f17ecf8e76b6f1dc7b106755005acbdc38940872a3e062677a3651eeea44aa8b1e79440be15ffbf24ab34fe54531aa1b2aa69bfd8f7a15e0547b763c3a706cf7aa36adf71e4120e9bdaa58ea815657334ff1e59630f5a741dc89b7745bc67892ced07576045a0aa8c5dde220f2ed5faeabff4b7f70a754a7003014a8f781264041663838b827dce3c116359042869490dba10e4c7ac83e3280955bc81cc0663409a9254d9c3bcd35ce7592d829bf08e64576afb3bef619c1d73f24e75571bebbbfd3ea8effe583089e3f5e8037f4b1efc8790dfb9cd2e82e3a09abb82655bced2e1ca1c94c1ced06c86103c8f93dbc612a58ebf74ae83e2ec5737c365608a49a221f65f92fc42488ba03edd92b3cd26ca59c518ab174c8f8a95693eb4517048b5a923b191cec09360ae1c27df06d921f84627c179b487a9ebccf9eca073f99434e3407d61bd9e664be3d33b17121fa4d330b607b5820ba2ee4db1557a87d702e49fa63d4c3243c80983040e3bbbb2073c7a718ec2bdc0e985d811f0f3e81a91c56c438df8ee23340bb76c857c7e068dc9a14e13740ab0faf05832f0f57a88b7d23e60cdcd876074d9fd96588e0c89f4c4ab158d4a3e4489045c4d2ff83d49b982f4a69a0323552d086313e017d5a5518d197159f72991e4a1374e189ec35fc96a30290d72fb14bf2ee2a03275c809d44a491e721cdce0"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4008044) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r7, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r7, r2, 0x0, 0xa198) 15:24:56 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:56 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:56 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000500)='./file0\x00', 0x141142, 0x100) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r3}) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800444c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb3c, r6, 0x1, 0x70bd28, 0x0, {}, [@NL80211_ATTR_PROBE_RESP={0x3a2, 0x91, "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"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_IE={0x48f, 0x2a, "418bd67740434207d05e28556ded511ce094813b4b20b6b662116ee36e5334dc0daa74d001a3d076d4864a90aaecfdba9349112a8e110cd348f4ed67ede1601030aa66b7cce3fd532c54b29ca8a475ba75f577b7659890ec7b969696f3dfb5809b4b1cad8b814917bec628d63874fb34658995d5eae47a6f766b6ba0c502d7bb9a379fccbd43d4756510805da53c42cbd2a53f06b57aae17f8a6e46d099631de41159a712d7194ba5ca0fa37194d6adc86208901c011c82b0688a8618e91e116058610439962d43cedccaaff7f5338056a85b18c1c7d789a2cf54ce723e5393c1dbe6dafe84f1a971a7cd80ba56c6a672f666e750ae4af2cca20ec01cabdb28dacbefbf813100a016dbb577dfe899e0e41948b8198f444cd3e0399addd97f6cf1e8022086aafa0a68add7329a6bee3f25ca1b36f1f902eb2fcb2b6abdada804a40cf2d20802cfa724849f228a7dcdd976c68b3aef5eedaba004bfc46254c6963d0e091d4ed0622b25732202b3d3dcfe0482525da9176f487ce07f76f529fd1c6e24c0bbac6fd1b4f82d15e76ae6450978fae27899cd32dbdff3ef7df009623904980e7a1f5d5371f8cd972b0ea2d27eb6cdd88f0c096e1c27036ffe7df7f1c5f7cab95db43fbb91bb4ce612e801f370458c8b0fdac65f1f3b51b4e634028778ddcb74c1f7d8eb195341d25064d7026a8e7dc55712fe124fbef775b814fc62bf5da5e4f0ce5fea153011f109b5ada9131a97fdf67beb4ae0293dfaf4d26091b78f26e1d847ef872db802c7fe339fd85e994901993456694ce2d9a910b004b16a1eaa65aba1e31023800e08226997c0087962f3568606cc9821f6c44cdf3b6cb1e2343dff4f238f5ab1929a06a33776949f8521cddf4a3bc84c4c6168e7f7219dd8abdf5277e62edc80d1898a25c50596510f3769acbd2d0634470394b570e748142f665f36c9a265911b1dba08476519886c1384d3985c2b2b52370668fa0adc237888a13720aae9f88980c375bdbb482e9128180c0bd6a3087206f273057dbd13cf8946d4180db57033579f39f82f44a331cbe029a2ca5a93c198b2e9d7f4e67be814e83e3c49b809ce9ae75ceb9a2b116635f0f1eae2aa8dbaa819e2c3bf096b8b9c279ca93f09ccf3ede2fa05f0e86fea4fa3a02f7929fd1cc14a2c8733aa2a8014002e260feaf4b06a537776bb34607581b649ece5dcc58ece24de34c0aad46912848796b6d373d76e9425692c50cb3aec478e9370534aeb3d67e012a4788c91a5b878d944a476238f0bd4d6265757e3d2d14b7ac15e97ac3c4727ddc9a99343d14f7c6c54519ad3698e12835a6e0e9f6a45be1465527a40ef801eceeda2179189525545b3819e5d54eaea35f80f6e85c621c8a66917ca780085fd62ca196cef4cd477ddb0ded02e5961e8b81ef6a80638131416e3dda96fb15798ac3133dcb1bbdb3d8d14b3283aec9755cc46abb4446720e1ac4870cb69bd18df5eb181f5dab3fa20bd8cade763dd902be6340485e68b66fdfbb86a6b81da11e5718edea3e4ac378c8b38dc7bcf6d36213ee1b217ffe7370e3065bed26a687f4fea2618da4566501633f215fec69883c27757eb32d26f9e7fc286d0116edc3104b720bb77bd13343715b1286612d96"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "4c46b9e415cafdea5eef7e6430c96aa6756490486486f1038c97f454ca23c9ea9793d7f26e5045782b785638d27495f58ac910e0fce0fb64ce21bd3d0ab3dd84e07e782f9e953f2364af2f92b18a458e981a4d3e515d3b31ee2dff023160e657edcc67c84f8c719b9af0db5b99ff0369f7399a840155f41459150987a243cf5ae419c86410a4c2d22c68a96d0132de2bff60750851ffe6"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_RIC={0x21a, 0xb2, "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"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4008044) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r7, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r7, r2, 0x0, 0xa198) 15:24:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="c9"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:24:56 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:57 executing program 4: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000500)='./file0\x00', 0x141142, 0x100) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r3}) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800444c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb3c, r6, 0x1, 0x70bd28, 0x0, {}, [@NL80211_ATTR_PROBE_RESP={0x3a2, 0x91, "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"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_IE={0x48f, 0x2a, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "4c46b9e415cafdea5eef7e6430c96aa6756490486486f1038c97f454ca23c9ea9793d7f26e5045782b785638d27495f58ac910e0fce0fb64ce21bd3d0ab3dd84e07e782f9e953f2364af2f92b18a458e981a4d3e515d3b31ee2dff023160e657edcc67c84f8c719b9af0db5b99ff0369f7399a840155f41459150987a243cf5ae419c86410a4c2d22c68a96d0132de2bff60750851ffe6"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_RIC={0x21a, 0xb2, "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"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4008044) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r7, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r7, r2, 0x0, 0xa198) [ 230.424773][ T9161] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 230.443414][ T8675] tipc: TX() has been purged, node left! [ 230.571282][ T9166] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 230.679587][ T524] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:57 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:57 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32, @ANYBLOB="080002"], 0x20}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000001c0)={[{0x400, 0x9, 0x8, 0x2, 0x1, 0xbe, 0x6, 0x7f, 0x1, 0x6, 0x2, 0x3}, {0xfff, 0x7, 0x1, 0x6, 0x3f, 0x4, 0x20, 0xf7, 0xff, 0x40, 0x81, 0xfe, 0x5}, {0x3, 0xbd, 0x4a, 0x61, 0x6, 0x1, 0x7, 0x7, 0x2, 0x0, 0x9, 0xe5, 0x8}], 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x41) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 230.971440][ T9184] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:57 executing program 3: r0 = socket(0x0, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 231.021082][ T304] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 231.243009][ T9195] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 231.417145][ T9203] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 15:24:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000000c0)={0x915, 0x80, 0x3e1, 0x8000, 0x0, [0x9000, 0x8, 0x10001, 0x6], [0x9, 0x1000, 0xfffffff7, 0x5], [0x1, 0x9, 0xe000000, 0x3], [0xfff00000000000, 0x80, 0x9]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0xfffffffffffffedb) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)="7c04618c793509a75929bbd0388d2a8a1ecb04b884657e57f51d6052b4d5905b2d3cedd726ddc05daf805c6f94b5eca448e2566c22df52cd24aaa79de471506804cb33c965856620e01198d767461556f2203fc7080c972f7c33293cb205b2f70776403c9145129ecca5cf9acf2ca5aaec23b2e518a2", 0x200000b6}], 0x1) setsockopt$inet_tcp_int(r7, 0x6, 0x3, &(0x7f0000000000), 0x4) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) gettid() 15:24:57 executing program 3: r0 = socket(0x0, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x2) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000000c0)={@initdev, @local, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002400060edf2500000000000000000000b5ac8bdbac77765ae6aac67425826120e852c209f1a71288b25c5f6d8f21ec024dd6f9f985ed81e2170e6a5c2fc59e8cace773d349079b164e8f8821a805e948", @ANYRES32=r11, @ANYBLOB="0f00070003000400e0fff1ff0600050007c00000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8004) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r3, 0xf000) 15:24:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r11) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='#}}\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x4002, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@version_u='version=9p2000.u'}, {@cachetag={'cachetag'}}, {@mmap='mmap'}, {@cache_none='cache=none'}, {@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@version_u='version=9p2000.u'}], [{@context={'context', 0x3d, 'root'}}, {@euid_gt={'euid>', r9}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x15}}, {@fsname={'fsname', 0x3d, '-7+}'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_eq={'euid', 0x3d, r11}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000080)={0xa, {0x8, 0x27, 0x6}}, 0xa) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3804000800000000000000637c98a4001be315939be6bc75e1d90de1a3b8da58747d9cab3f7c00348f9ca5f571e36c8f67c2d90816edd36ba4553504c0b6137a240545844fa302fe91061baec7ca71e360", @ANYRES16=r13, @ANYBLOB="000828bd7000fcdbdf250f0000000c00490000ac0f000dac0f000500a3000000000008000c000800000008004a000aac0f00080035000000000084035a8088000200150002007f72c697ffce3ef9fe156c67c4054d6ed1000000170001006e0c2c73fc4065379b6fd18e3c92acd9687bd00051000200bde3c8bcc2c48bf1f185d30f27db34522d35e99b6a85b07528f700aa5a1c67fc9304c0e362d5f7e63ae8375b451ff04d73d3aa4ae407005648a4e7b7038f1f9aea6aa36ce4e8afee05d6f96b8d0000000c00030006000100d0c00000240002001d000200d9e9a4d6c5ea566f3db8cd688e0d7e54b9ad287a06b57814d800000074000300140003000900040002000200060006000800000010002100284325eb04787702df517baa0500040002000000050004000200000016000100c69abc4cb780cfae86fecfd8e029278d46ce0000140003000600020008000900ab980100040006000500040001000000060002009c9e0000880003004c000200a4bbaf0ba9e9249369328cd9897ae662353f339f4c1914927d35ecfded6e836ba848d27c9eb6be2ac28a292327c6402737249c60fc6060c739792fc9b6c0c28e9cea298d557332c714000300ff030800030004005c0a09007f0000081b000100f532d93b38c1699ac5339a004e3540eba8eb085ac150d00005000400020000001c0001000500040002000000050004000000000005000400020000008400010005000400010000000b000100b62724910bf3d2004e000200cb2ac40ea39a4153b7ebd174a459073c02b04022a775e170673718227571aef4331aace99fbd890c552b70349eb9c47711ad29e0d704cbb85a26e369efae40cb00000500040000000000130001004c19437d4b6483dce10a8efde9fcaf002c010100140003000100800004000800f8ff090000000008210001001a2c380cfdbc79f325d232fb6ca5a97bb1a5cf352a833f5890f26f921500000019000100270e04a7eafe0e324f024e3582264e37076db76e370000001400030000fe0200ff0fffff02000d1eff0703000f0002001dce4aa31750bc2a1a51a70042000200ef04bcc3c6dd0028c07b8b1a5b76e37627aa68a84266fd5e3b9e355aaf71f9eb554e0a0f3656d9926f8862c4c69a17205913a957bd06f3bc00c0e3e61afb000017000100a5d65ca18011657704156532aac481859a698a0014000300d8000300000007003f00210c2000ff003e000200fe4c25f49e8f85cf935b34df23ab7a5b8ff7b81f2a811d47e3c4dc42a3ba3ba580d14f6007ac17526f42eabbb1081faf4a657d5c01cace723bf400001f000f002f22884b56ee70fe1ce7ae2d6de86d4bb3ae6d6e669103f39a7a660008000300"/994, @ANYRES32=r2, @ANYBLOB="4c00a6800a0000008eb43ba4ab6500000a000000aaaaaaaaaa2800000a0000000380c200000200000a00000000000000000000000a0000000180c200000300000a000000aaaaaaaaaabb00008d3d178837e45f5b2d93481c42b71f417bbe9b7cdd5cee7d44930905a75d8d775ab5f46b99f1ee6e51cb64caf54cecfa59c57d7cc26c7bda5fa2ede7fe9e"], 0x438}, 0x1, 0x0, 0x0, 0x81}, 0xc0) getsockopt$sock_buf(r10, 0x1, 0x3d, &(0x7f0000000040)=""/1, &(0x7f0000000500)=0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001cb45e31b10001000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000108000800", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) [ 231.613169][ T304] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0x401}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000000)=0x302c) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$sock_ifreq(r3, 0x891e, &(0x7f0000000100)={'vlan0\x00', @ifru_data=&(0x7f0000000040)="d0578cc4413751f29c55d2cd6f8a7b710f31f1012eea88efc5de97838fe92b23"}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) [ 231.631628][ T304] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:58 executing program 3: r0 = socket(0x0, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:58 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000340)={0x77359400}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10001}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400e040}, 0x0) 15:24:58 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x40, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) r1 = getpgrp(0x0) setpriority(0x0, r1, 0x10ffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x48}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0071, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x3f, 0xe000) ioctl$RTC_AIE_OFF(r5, 0x7002) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, 0x0) 15:24:58 executing program 3: r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x40100, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x32}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000040)) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f00000000c0)) 15:24:58 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='cgroup.stat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r6, 0xc91add0bf88807dd, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) r7 = gettid() r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x40) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r8, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x311040) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42004084}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xf4, r6, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc000}, 0xc848) 15:24:58 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 15:24:58 executing program 3: r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 232.347212][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 232.347224][ T29] audit: type=1800 audit(1593876298.685:31): pid=9253 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15773 res=0 15:24:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:24:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='cgroup.stat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r6, 0xc91add0bf88807dd, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) r7 = gettid() r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x40) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r8, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x311040) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42004084}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xf4, r6, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc000}, 0xc848) 15:24:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000180)=""/35) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x50000, 0x4000) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r7, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) ustat(0x1000, &(0x7f00000001c0)) write(r7, 0x0, 0x0) 15:24:59 executing program 3: r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:24:59 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x28}}], 0x400000000000116, 0x0, &(0x7f0000000000)={0x77359400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace$cont(0x1f, r4, 0x7f, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) [ 232.867119][ T9286] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 233.796567][ T9242] debugfs: Directory '9242-6' with parent 'kvm' already present! 15:25:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x8) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:00 executing program 3: r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:00 executing program 1: socket$kcm(0x10, 0xa, 0x0) 15:25:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/1140], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 15:25:00 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:00 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x400, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000000c0)="0f01b4070066b9a50b000066b80600000066ba000000000f3065f3af0f090f01c8362e0f71d7072626f30fc772b366b9800000c00f326635010000000f30c40266b9590900000f32", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000140)={r6, 0x5}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x76, &(0x7f0000000080)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7, 0x5}, 0x8) 15:25:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x40102, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x1ee) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x1ee) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYRESDEC], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x17) 15:25:00 executing program 3: r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:00 executing program 4: r0 = memfd_create(&(0x7f0000000900)='#\'%nodev\x00\x7f\xe5\xd0ql\x86\xcd\xe6\x14\x93\xb0\x7f_,y<', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x40824) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa84820, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) [ 234.642791][ T7167] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.003209][ T7167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.041323][ T7167] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 235.101197][ T7167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.174514][ T7167] usb 6-1: config 0 descriptor?? 15:25:02 executing program 3: r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 235.619897][ T9348] EXT4-fs (sda1): Unrecognized mount option "//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////" or missing value 15:25:02 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r4, &(0x7f0000000500)={@void, @void, @mpls={[], @ipv6=@tcp={0x0, 0x6, '\x00', 0x14, 0x6c, 0x0, @private2={0xfc, 0x2, [], 0x2}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x3c) 15:25:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 235.693755][ T7167] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 235.739026][ T7167] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0003/input/input5 [ 235.765516][ T9362] IPVS: ftp: loaded support on port[0] = 21 [ 235.785347][ T7167] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 236.118038][ T8169] usb 6-1: USB disconnect, device number 2 [ 236.225465][ T9362] IPVS: ftp: loaded support on port[0] = 21 [ 236.512656][ T304] tipc: TX() has been purged, node left! [ 236.904174][ T7167] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 237.263053][ T7167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.279647][ T7167] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 237.291299][ T7167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.311188][ T7167] usb 6-1: config 0 descriptor?? 15:25:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x8) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:03 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:03 executing program 4: r0 = memfd_create(&(0x7f0000000900)='#\'%nodev\x00\x7f\xe5\xd0ql\x86\xcd\xe6\x14\x93\xb0\x7f_,y<', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x40824) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa84820, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 15:25:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x7, 0xfff, {}, {0x0}, 0x81, 0x9}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@empty, 0x4e24, 0x6, 0x4e21, 0x8, 0x0, 0x20, 0x20, 0x2c, 0x0, r8}, {0x8, 0x0, 0x6, 0x2, 0x101, 0x9, 0x2, 0x6}, {0x3, 0x55b, 0x1, 0x7fffffff}, 0xfff, 0x6e6bb4, 0x1, 0x1, 0x3, 0x3}, {{@in6=@local, 0x4d4}, 0xa, @in6=@mcast2, 0x34ff, 0x2, 0x0, 0x0, 0x4, 0x8001, 0x3}}, 0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs$namespace(r9, &(0x7f0000000040)='ns/pid\x00') 15:25:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="1af74975ffffffff00000000097363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x4c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}]}]}]}}]}, 0x4c}}, 0x0) 15:25:04 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x2, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:25:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x3}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 237.643128][ T7167] usbhid 6-1:0.0: can't add hid device: -71 [ 237.643242][ T7167] usbhid: probe of 6-1:0.0 failed with error -71 [ 237.644921][ T7167] usb 6-1: USB disconnect, device number 3 15:25:04 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 237.666856][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.698429][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.721788][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.722028][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.740434][ T9485] EXT4-fs (sda1): re-mounted. Opts: [ 237.920360][ T9500] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 238.060629][ T9511] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 238.092393][ T7167] usb 6-1: new high-speed USB device number 4 using dummy_hcd 15:25:04 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:04 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 238.495478][ T7167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.534124][ T7167] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.562309][ T7167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.577742][ T7167] usb 6-1: config 0 descriptor?? [ 239.063659][ T7167] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 239.089416][ T7167] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0004/input/input6 [ 239.151143][ T7167] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 239.566729][ T8159] usb 6-1: USB disconnect, device number 4 [ 239.673322][ T304] tipc: TX() has been purged, node left! 15:25:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x8) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x40, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000001c0)=0x32, 0x118) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x800, 0x180) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x11138e7, 0xfffffffffffffffd}}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 15:25:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15:25:06 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b0304000000004555a763c15ceda0bb3576ed3ae7", @ANYRESDEC], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x1a0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 15:25:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:06 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:06 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:06 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:06 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2202, 0x0) openat(r4, &(0x7f00000000c0)='./bus\x00', 0x8ac1, 0x1b0) sendfile(r1, r0, 0x0, 0x209) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xffffffff}, 0xfffffffffffffec9) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000140)={r9, 0x401, 0x401, 0x3ff}, 0x10) 15:25:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 240.532137][ T5] usb 6-1: new high-speed USB device number 5 using dummy_hcd 15:25:06 executing program 2: keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="753d8b6a71756f74612c00"]) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./bus\x00', 0x1, 0x2, &(0x7f0000000280)=[{&(0x7f00000000c0)="7e1867496305c5d52669baffdf93c66f6d2d6f91780cc2c84264ddd2ee43e0ff0e4f167631511de15cb7a4b251499cfd0e06cb94b7ca8f00027b50be3092b778d9c78e90f62e29cbd9f19a0a2e5dc8099a26b0928f801f8577b99c46c747fd6cef6993ac3e0a0290ef8c79c7d8", 0x6d, 0x1}, {&(0x7f0000000180)="68e6867ca1474fc29032dc7fae9827ef6f3c1882b885ec2f9ee51f52f7aeeeaf270bb05646129ed91166887c976d252e3afa0f96a463350afaa8b11474665b2b1d3441a38cf1d6bc0d59e873275b9a2fdb0e53e9cc79169c5a6f6ddc357a75253d525a78fca57bbafa9892d1fbd2f792673e4d3f2917b67c4823d1031e7441faa1fc55d3cd0dadd24a714858874c7b0b3de3b3b3c8f9ffaa040c506428d9ad6fb7941092e1885e49f9fa477b60f39e34e4852c6869be599f22f27fd59adb1d475fbe139713595e19270000000000000000000000a8a500"/224, 0xe0, 0x4}], 0x140003, &(0x7f00000002c0)={[{@dots='dots'}], [{@dont_hash='dont_hash'}]}) [ 240.741836][ T9621] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "u=‹jquota" [ 240.912407][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.932072][ T9621] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue [ 240.964371][ T5] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 241.023366][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.076596][ T5] usb 6-1: config 0 descriptor?? [ 241.573142][ T5] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 241.601106][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0005/input/input7 [ 241.628071][ T5] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 242.056821][ T8098] usb 6-1: USB disconnect, device number 5 15:25:08 executing program 4: ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4a8080, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x1, @mcast1}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e22, 0x80000001, @private1={0xfc, 0x1, [], 0x1}, 0x6}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @private0, 0x8000}], 0xb4) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$eventfd(r3, &(0x7f0000000100), 0x8) 15:25:08 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:08 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x8) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getpid() mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff, 'veth0\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0x2, 0xa}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@multicast1, @multicast1, 0xffffff00, 0xffffff00, 'bond_slave_1\x00', 'gre0\x00', {0xff}, {}, 0x1, 0x0, 0x30}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3], 0x5}, {0xffffffffffffffff, [0x0, 0x3, 0x0, 0x2, 0x6, 0x2], 0x2, 0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCNRDECOBS(r4, 0x89e2) 15:25:09 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:09 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:09 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0), 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) 15:25:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) 15:25:09 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0), 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 243.422395][ T7167] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 243.430876][ T9683] BFS-fs: bfs_fill_super(): Inode 0x0000000a corrupted on loop4 [ 243.450985][ T9702] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 243.450985][ T9702] program syz-executor.1 not setting count and/or reply_len properly [ 243.490246][ T9702] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.502385][ T9702] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 243.520960][ T9697] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:25:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000040)=""/35) 15:25:10 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0), 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:10 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) [ 243.812880][ T7167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.854285][ T7167] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 243.880304][ T7167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.894408][ T7167] usb 6-1: config 0 descriptor?? [ 244.029050][ T9702] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 244.029050][ T9702] program syz-executor.1 not setting count and/or reply_len properly [ 244.069381][ T9702] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.118275][ T9702] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 244.402813][ T7167] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 244.419974][ T7167] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0006/input/input8 [ 244.468918][ T7167] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 244.834823][ T7167] usb 6-1: USB disconnect, device number 6 15:25:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x8) 15:25:11 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:11 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000040)=""/35) 15:25:11 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 15:25:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000000b060101000000000000fdffffff01ff060001000600f2ff9b0007801800018050000240dd0000faff000000000000b0a4ce1c0006000440ffff0020000000000000011facff7faa1400170076657468975f766c61d8289ebc2f4357941b36b754b71ae7226e000004000000050006198800000014001700767863e16e3100040000001b000000000908120000007a32000000000c001bff7f03f968000080000c001408e623db000000000000000000002a3d1cbf3d0900020000000000000000000000000000cfd6b128e2daec3a3caf212b49f58a584d780b922db0547dd9dbb518c162b1961a"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xbc1bf02) splice(r2, 0x0, r4, 0x0, 0x47fde, 0x0) 15:25:11 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 15:25:12 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 245.722253][ T2514] usb 6-1: new high-speed USB device number 7 using dummy_hcd 15:25:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30}) [ 245.903456][ T9793] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 245.903456][ T9793] program syz-executor.1 not setting count and/or reply_len properly [ 245.905645][ T9793] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:25:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30}) [ 245.988026][ T9793] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30}) [ 246.141739][ T2514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.154024][ T2514] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 246.165372][ T2514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.176596][ T2514] usb 6-1: config 0 descriptor?? [ 246.682722][ T2514] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 246.693896][ T2514] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0007/input/input9 [ 246.728972][ T2514] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 246.898325][ T3614] usb 6-1: USB disconnect, device number 7 15:25:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x8) 15:25:13 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:13 executing program 2 (fault-call:6 fault-nth:0): socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:13 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:13 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffff, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000280)="94accf7239ea14a94ad152848a0300641b004b9ea1f44d62411cd7789f7ee91cdd0d7143503d674292110700c45fbb48", 0x30, 0x5}, {&(0x7f00000002c0)="13a31d4b224ba4a7740f698b4826c36c902103d92cdb2ef8506354a9ad2fc03b46ecd73259e857dec42a1e1c9be183d5dc1721fdddf64165423064ca10dae9075a943be724e6e39f06ee1b7c9b9b02ab660abd3fab07e8564c821afebd5c8494cc0f6fafa0962cce39b5cbb9079cb4459cdef5adacead1084e1e6f0bfa33ced13da5f95ce72658a9a78bfbf69a", 0x8d, 0x6}, {&(0x7f0000000380)="b91203e58b5dfc916e10bb9f5efdda6fe908ec66783feb85642f692d8915e035cdee87603262a09366a2c71b763abc500de1ce3002a79c5f16fa282b1e514ca3dd5364a58d6886e1bacf2c5c98ffc67326bae5dca1d765f46e3cb775e5461fa78a7645cfea985f2b12a927365d72694d5abe5b", 0x73, 0x3}, {&(0x7f0000000400)="17a8f13a7a2921b8d8aa286accbbb0f66ac82736c268cf008397431e53021676c249d97a6f7a84718c4e265450a2b06ade63e473d353b2a5e8eab2bbec6d6c056fd4c5ce8859187400b8e0deb8536345d080a69db436d6b468932646b360798584dcd6393f384e46311fc914c51422c4782638c5be75e40bc284642c9622e4f37422177d8d385904fa725344e849cbde096e4b0c8fea4aacfe231714fd2963aca7aef7ce1f37a2d815f188e4c9ed9684ab1c384acb54366a9003cb28c770ad7b0eb13dd3", 0xc4, 0x7}, {&(0x7f0000000500)="bc10469f82c0caf9fdfa5c5def6f09404ed348a3562ff90f9fb14f33c14562b4607b114b9af656260ac8e70379780b3f6b34c78e2543d7fc8c659b04", 0x3c, 0x1000}, {&(0x7f0000000540)="a24f3d9d09ed620bcd82f4f9bd51458795cee32782600ac34ee5d860f5cca29460de27e7ebb2cbc1d9cee1375b516710240e7d39e87109926131350d38cf7f03938378e21aaaa4bd1b74c84a69007a27b161a2a976e01104acb9f67af0618f3ac1cbc8ae6b9921a624f64ae83060f5a69a553e5ac29b6b267005b5c9", 0x7c, 0x1000}], 0x81004, &(0x7f0000000780)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$hidraw(r3, &(0x7f0000000680)="c6a4b7122b1924ccb8aec8331a1e13c3ba0a2f102c74abfd3459b5386471108a9879fb68c03d1b022b8cf1510154e6adddc5db0f074bc3afc8673b0367a10599d55c218507a8cdd488da0298d18121acdee71133d0fa1e6de9c757fba9cd9043699225a43359408100aff0efebf3a54c85ff10548e2da1f79ef5fbe108433bb62af7a13e5c8227aa98bd94d1067e548cac5a0c8c944cab8e0651d3e344bb9ae5cd8e648b594add7e1198ef50fe9b19762e5e4ad76288f588059ee85ce3acd479c59bf270a950712d56fdcd0f9a4f79db3c35fb844fe777f4d3d91b9e80cbda23b916c7cc86c6660e", 0xe8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode}00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000100)=""/12, 0xfffffeaa}, {&(0x7f0000000140)=""/38, 0x26}], 0x3, 0x0) [ 247.500369][ T9874] FAULT_INJECTION: forcing a failure. [ 247.500369][ T9874] name failslab, interval 1, probability 0, space 0, times 1 [ 247.523866][ T9874] CPU: 0 PID: 9874 Comm: syz-executor.2 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 247.533729][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.543795][ T9874] Call Trace: [ 247.547104][ T9874] dump_stack+0x18f/0x20d [ 247.551452][ T9874] should_fail.cold+0x5/0x14 [ 247.556124][ T9874] ? tomoyo_realpath_from_path+0xc3/0x620 [ 247.561855][ T9874] ? tomoyo_realpath_from_path+0xc3/0x620 [ 247.567671][ T9874] should_failslab+0x5/0xf [ 247.572120][ T9874] __kmalloc+0x372/0x4d0 [ 247.576387][ T9874] tomoyo_realpath_from_path+0xc3/0x620 [ 247.581949][ T9874] ? tomoyo_profile+0x42/0x50 [ 247.586641][ T9874] tomoyo_path_number_perm+0x1cb/0x4d0 [ 247.592111][ T9874] ? tomoyo_path_number_perm+0x183/0x4d0 [ 247.597944][ T9874] ? tomoyo_execute_permission+0x470/0x470 [ 247.603764][ T9874] ? get_pid_task+0x116/0x200 [ 247.605469][ T9884] fuse: Unknown parameter 'rootmode}00000000000000000040000' [ 247.608541][ T9874] ? find_held_lock+0x2d/0x110 [ 247.608590][ T9874] ? __mutex_unlock_slowpath+0xe2/0x610 [ 247.608609][ T9874] ? lock_is_held_type+0xb0/0xe0 [ 247.631311][ T9874] ? __fget_files+0x294/0x400 [ 247.636003][ T9874] security_file_ioctl+0x50/0xb0 [ 247.640950][ T9874] ksys_ioctl+0x50/0x180 [ 247.645202][ T9874] __x64_sys_ioctl+0x6f/0xb0 [ 247.649907][ T9874] ? lockdep_hardirqs_on+0x6a/0xe0 [ 247.655034][ T9874] do_syscall_64+0x60/0xe0 [ 247.659547][ T9874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.665441][ T9874] RIP: 0033:0x45cb29 [ 247.669329][ T9874] Code: Bad RIP value. [ 247.673447][ T9874] RSP: 002b:00007f53841d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.682563][ T9874] RAX: ffffffffffffffda RBX: 00000000004e55e0 RCX: 000000000045cb29 [ 247.682572][ T9874] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000006 [ 247.682580][ T9874] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 247.682587][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 247.682595][ T9874] R13: 00000000000002fd R14: 00000000004c58a5 R15: 00007f53841da6d4 [ 247.697358][ T9874] ERROR: Out of memory at tomoyo_realpath_from_path. 15:25:14 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 247.756563][ T9877] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 247.756563][ T9877] program syz-executor.0 not setting count and/or reply_len properly [ 247.760215][ T9877] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.760812][ T9877] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 247.832694][ T3614] usb 6-1: new high-speed USB device number 8 using dummy_hcd 15:25:14 executing program 2 (fault-call:6 fault-nth:1): socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 247.880059][ T9879] fuse: Unknown parameter 'rootmode}00000000000000000040000' [ 247.992240][ T9893] FAULT_INJECTION: forcing a failure. [ 247.992240][ T9893] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 248.005471][ T9893] CPU: 1 PID: 9893 Comm: syz-executor.2 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 248.015272][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.025551][ T9893] Call Trace: [ 248.025579][ T9893] dump_stack+0x18f/0x20d [ 248.025598][ T9893] should_fail.cold+0x5/0x14 [ 248.025620][ T9893] __alloc_pages_nodemask+0x177/0x700 [ 248.025642][ T9893] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 248.025666][ T9893] ? mark_lock+0xbc/0x1710 [ 248.025688][ T9893] cache_grow_begin+0x89/0x440 [ 248.025704][ T9893] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 248.025723][ T9893] cache_alloc_refill+0x27b/0x340 [ 248.025737][ T9893] ? lockdep_hardirqs_off+0x66/0xa0 [ 248.025756][ T9893] ? tomoyo_realpath_from_path+0xc3/0x620 [ 248.025770][ T9893] __kmalloc+0x433/0x4d0 [ 248.025796][ T9893] tomoyo_realpath_from_path+0xc3/0x620 [ 248.025814][ T9893] ? tomoyo_profile+0x42/0x50 [ 248.025831][ T9893] tomoyo_path_number_perm+0x1cb/0x4d0 [ 248.025847][ T9893] ? tomoyo_path_number_perm+0x183/0x4d0 [ 248.025864][ T9893] ? tomoyo_execute_permission+0x470/0x470 [ 248.025881][ T9893] ? get_pid_task+0x116/0x200 [ 248.025901][ T9893] ? find_held_lock+0x2d/0x110 [ 248.025936][ T9893] ? __mutex_unlock_slowpath+0xe2/0x610 [ 248.025949][ T9893] ? lock_is_held_type+0xb0/0xe0 [ 248.025969][ T9893] ? __fget_files+0x294/0x400 [ 248.025989][ T9893] security_file_ioctl+0x50/0xb0 15:25:14 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 248.026005][ T9893] ksys_ioctl+0x50/0x180 [ 248.026023][ T9893] __x64_sys_ioctl+0x6f/0xb0 [ 248.026036][ T9893] ? lockdep_hardirqs_on+0x6a/0xe0 [ 248.026048][ T9893] do_syscall_64+0x60/0xe0 [ 248.026065][ T9893] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 248.026078][ T9893] RIP: 0033:0x45cb29 [ 248.026084][ T9893] Code: Bad RIP value. [ 248.026092][ T9893] RSP: 002b:00007f53841d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.026105][ T9893] RAX: ffffffffffffffda RBX: 00000000004e55e0 RCX: 000000000045cb29 [ 248.026113][ T9893] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000006 [ 248.026121][ T9893] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 248.026129][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 248.026137][ T9893] R13: 00000000000002fd R14: 00000000004c58a5 R15: 00007f53841da6d4 [ 248.205794][ T3614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.205825][ T3614] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.205840][ T3614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.209336][ T3614] usb 6-1: config 0 descriptor?? 15:25:14 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x1e, 0x15, 0x59, &(0x7f0000000000)="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"}) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d65, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000005c0)={0x6, @output={0x0, 0x1, {0x800, 0x153}, 0x4, 0xfff}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000480)={0x7, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r9, 0x40086425, &(0x7f00000004c0)={r10, 0x1}) 15:25:15 executing program 2 (fault-call:6 fault-nth:2): socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 248.696026][ T3614] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 248.717401][ T3614] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0008/input/input10 15:25:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020a0b7400f801", 0x17}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000040)) [ 248.768396][ T3614] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 248.862768][ T9927] FAULT_INJECTION: forcing a failure. [ 248.862768][ T9927] name failslab, interval 1, probability 0, space 0, times 0 [ 248.892416][ T9929] FAT-fs (loop0): bogus number of directory entries (2826) [ 248.909831][ T9927] CPU: 1 PID: 9927 Comm: syz-executor.2 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 248.911049][ T3614] usb 6-1: USB disconnect, device number 8 [ 248.922005][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.922012][ T9927] Call Trace: [ 248.922040][ T9927] dump_stack+0x18f/0x20d [ 248.922058][ T9927] should_fail.cold+0x5/0x14 [ 248.922073][ T9927] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 248.922089][ T9927] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 248.922105][ T9927] should_failslab+0x5/0xf [ 248.922118][ T9927] __kmalloc+0x372/0x4d0 [ 248.922133][ T9927] ? __d_path+0x160/0x160 [ 248.922148][ T9927] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 248.922164][ T9927] tomoyo_encode2.part.0+0xe9/0x3a0 [ 248.922180][ T9927] tomoyo_encode+0x28/0x50 [ 248.922192][ T9927] tomoyo_realpath_from_path+0x186/0x620 [ 248.922213][ T9927] tomoyo_path_number_perm+0x1cb/0x4d0 [ 248.929705][ T9929] FAT-fs (loop0): Can't find a valid FAT filesystem [ 248.938522][ T9927] ? tomoyo_path_number_perm+0x183/0x4d0 [ 248.938540][ T9927] ? tomoyo_execute_permission+0x470/0x470 [ 248.938572][ T9927] ? get_pid_task+0x116/0x200 [ 248.938594][ T9927] ? find_held_lock+0x2d/0x110 [ 248.938624][ T9927] ? __mutex_unlock_slowpath+0xe2/0x610 [ 248.938643][ T9927] ? lock_is_held_type+0xb0/0xe0 [ 248.938663][ T9927] ? __fget_files+0x294/0x400 [ 248.938683][ T9927] security_file_ioctl+0x50/0xb0 [ 248.938700][ T9927] ksys_ioctl+0x50/0x180 [ 248.938719][ T9927] __x64_sys_ioctl+0x6f/0xb0 [ 248.964580][ T9894] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 248.964580][ T9894] program syz-executor.4 not setting count and/or reply_len properly [ 248.966499][ T9927] ? lockdep_hardirqs_on+0x6a/0xe0 [ 248.966515][ T9927] do_syscall_64+0x60/0xe0 [ 248.966532][ T9927] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 248.966551][ T9927] RIP: 0033:0x45cb29 [ 248.989592][ T9894] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.993137][ T9927] Code: Bad RIP value. [ 248.993146][ T9927] RSP: 002b:00007f53841d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.993158][ T9927] RAX: ffffffffffffffda RBX: 00000000004e55e0 RCX: 000000000045cb29 [ 248.993164][ T9927] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000006 [ 248.993172][ T9927] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 248.993179][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 248.993186][ T9927] R13: 00000000000002fd R14: 00000000004c58a5 R15: 00007f53841da6d4 [ 249.190025][ T9927] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.197587][ T9894] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 249.234871][ T9929] FAT-fs (loop0): bogus number of directory entries (2826) [ 249.243106][ T9929] FAT-fs (loop0): Can't find a valid FAT filesystem 15:25:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x8) 15:25:15 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:15 executing program 2 (fault-call:6 fault-nth:3): socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:15 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020a0b7400f801", 0x17}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000040)) [ 249.536424][ T9960] FAT-fs (loop0): bogus number of directory entries (2826) [ 249.564581][ T9960] FAT-fs (loop0): Can't find a valid FAT filesystem 15:25:16 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20008000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x309}, 0x14}}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x40002, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000200)) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x404000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x1, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000100)={0x4000000, 0x2, 0x2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:25:16 executing program 0: syz_usb_connect(0x0, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x19, 0xae, 0x38, 0x40, 0x83a, 0xc512, 0xdae0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x20}}]}}, 0x0) [ 249.700699][ T9961] FAULT_INJECTION: forcing a failure. [ 249.700699][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 249.700760][ T9961] CPU: 0 PID: 9961 Comm: syz-executor.2 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 249.700773][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.700779][ T9961] Call Trace: [ 249.700804][ T9961] dump_stack+0x18f/0x20d [ 249.700829][ T9961] should_fail.cold+0x5/0x14 [ 249.700849][ T9961] ? bit_cursor+0x8a3/0x17d0 [ 249.700865][ T9961] should_failslab+0x5/0xf [ 249.700880][ T9961] __kmalloc+0x79/0x4d0 [ 249.700898][ T9961] bit_cursor+0x8a3/0x17d0 [ 249.700921][ T9961] ? kmalloc_array.constprop.0+0x20/0x20 [ 249.700949][ T9961] ? do_update_region+0x47c/0x630 [ 249.700968][ T9961] ? fb_get_color_depth+0x11a/0x240 [ 249.700984][ T9961] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 249.701003][ T9961] ? get_color+0x20e/0x410 [ 249.701029][ T9961] fbcon_cursor+0x537/0x660 [ 249.701044][ T9961] ? kmalloc_array.constprop.0+0x20/0x20 [ 249.701063][ T9961] ? fbcon_set_palette+0x3a8/0x490 [ 249.701079][ T9961] set_cursor+0x1d2/0x240 [ 249.701101][ T9961] redraw_screen+0x4b9/0x770 [ 249.701128][ T9961] ? vga16fb_update_fix+0x4a0/0x4a0 [ 249.701143][ T9961] ? vc_init+0x430/0x430 [ 249.701161][ T9961] ? fbcon_set_palette+0x3a8/0x490 [ 249.701178][ T9961] fbcon_modechanged+0x575/0x710 [ 249.701199][ T9961] fbcon_update_vcs+0x3a/0x50 [ 249.701212][ T9961] fb_set_var+0xae8/0xd60 [ 249.701228][ T9961] ? fb_blank+0x190/0x190 [ 249.701243][ T9961] ? lock_release+0x8d0/0x8d0 [ 249.701263][ T9961] ? lock_is_held_type+0xb0/0xe0 [ 249.701288][ T9961] ? do_fb_ioctl+0x2f2/0x6c0 [ 249.701326][ T9961] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 249.701341][ T9961] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 249.701355][ T9961] ? trace_hardirqs_on+0x5f/0x220 [ 249.701372][ T9961] do_fb_ioctl+0x33f/0x6c0 [ 249.701386][ T9961] ? fb_set_suspend+0x1a0/0x1a0 [ 249.701401][ T9961] ? tomoyo_execute_permission+0x470/0x470 [ 249.701415][ T9961] ? get_pid_task+0x116/0x200 [ 249.701433][ T9961] ? find_held_lock+0x2d/0x110 [ 249.701456][ T9961] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 249.701471][ T9961] ? do_vfs_ioctl+0x27d/0x1090 [ 249.701506][ T9961] ? __fget_files+0x294/0x400 [ 249.701530][ T9961] fb_ioctl+0xdd/0x130 [ 249.701545][ T9961] ? do_fb_ioctl+0x6c0/0x6c0 [ 249.701557][ T9961] ksys_ioctl+0x11a/0x180 [ 249.701577][ T9961] __x64_sys_ioctl+0x6f/0xb0 [ 249.701600][ T9961] ? lockdep_hardirqs_on+0x6a/0xe0 [ 249.701614][ T9961] do_syscall_64+0x60/0xe0 [ 249.701630][ T9961] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 249.701642][ T9961] RIP: 0033:0x45cb29 [ 249.701647][ T9961] Code: Bad RIP value. [ 249.701655][ T9961] RSP: 002b:00007f53841d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.701667][ T9961] RAX: ffffffffffffffda RBX: 00000000004e55e0 RCX: 000000000045cb29 [ 249.701676][ T9961] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000006 15:25:16 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 249.701684][ T9961] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 249.701692][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 249.701701][ T9961] R13: 00000000000002fd R14: 00000000004c58a5 R15: 00007f53841da6d4 [ 249.888604][ T3614] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 250.113392][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 250.246968][ T3614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.246999][ T3614] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.247015][ T3614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.248604][ T3614] usb 6-1: config 0 descriptor?? 15:25:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 250.525005][ T5] usb 1-1: config 0 has no interfaces? [ 250.525038][ T5] usb 1-1: New USB device found, idVendor=083a, idProduct=c512, bcdDevice=da.e0 [ 250.525055][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.526316][ T5] usb 1-1: config 0 descriptor?? [ 250.731906][ T3614] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 250.733957][ T3614] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0009/input/input11 [ 250.763372][ T3614] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 250.885769][ T8159] usb 1-1: USB disconnect, device number 2 [ 251.084934][ T9963] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 251.084934][ T9963] program syz-executor.4 not setting count and/or reply_len properly [ 251.094299][ T2514] usb 6-1: USB disconnect, device number 9 15:25:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 251.214192][ T9963] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:25:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 251.274338][ T9963] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:17 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:18 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4600, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:18 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 251.677581][ T8159] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 252.051534][ T8159] usb 1-1: config 0 has no interfaces? [ 252.061878][ T8159] usb 1-1: New USB device found, idVendor=083a, idProduct=c512, bcdDevice=da.e0 [ 252.080682][ T5] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 252.083304][ T8159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.114083][ T8159] usb 1-1: config 0 descriptor?? 15:25:18 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:18 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4603, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:18 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:18 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:18 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4604, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 252.370873][ T8159] usb 1-1: USB disconnect, device number 3 15:25:18 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 252.440920][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.467612][ T5] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 15:25:18 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4605, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 252.524634][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.562305][ T5] usb 6-1: config 0 descriptor?? 15:25:18 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 253.068734][ T5] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 253.092971][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000A/input/input12 [ 253.126182][ T5] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 253.179267][T10066] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 253.179267][T10066] program syz-executor.4 not setting count and/or reply_len properly [ 253.228208][T10066] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.247392][T10066] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 253.476509][ T2514] usb 6-1: USB disconnect, device number 10 15:25:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:20 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:20 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:20 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x3, 0x70, 0x6, 0x2, 0x7, 0x0, 0x0, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x2000, 0x100, 0x5, 0x7, 0x2, 0x19a29ab, 0x9}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 15:25:20 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:20 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:20 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4609, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:20 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x460f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:20 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 254.380589][ T3614] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 254.597167][T10143] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 254.597167][T10143] program syz-executor.4 not setting count and/or reply_len properly [ 254.631828][T10143] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.649152][T10143] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 254.766449][ T3614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.777650][ T3614] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 254.810363][ T3614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.819929][ T3614] usb 6-1: config 0 descriptor?? [ 255.311209][ T3614] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 255.334260][ T3614] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000B/input/input13 [ 255.365320][ T3614] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 255.717611][ T3614] usb 6-1: USB disconnect, device number 11 15:25:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:22 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:22 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:22 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:22 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:22 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4611, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4615, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4619, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:22 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 256.580251][ T17] usb 6-1: new high-speed USB device number 12 using dummy_hcd 15:25:23 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 256.828277][T10237] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 256.828277][T10237] program syz-executor.1 not setting count and/or reply_len properly [ 256.870901][T10237] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.891282][T10237] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 256.945286][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.966149][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.977063][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.994411][ T17] usb 6-1: config 0 descriptor?? [ 257.471334][ T17] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 257.482839][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000C/input/input14 [ 257.508383][ T17] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 257.886950][ T17] usb 6-1: USB disconnect, device number 12 15:25:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:24 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:24 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4650, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:24 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:24 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:24 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:24 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:24 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4c00, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4c01, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:25 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 258.760107][ T3614] usb 6-1: new high-speed USB device number 13 using dummy_hcd 15:25:25 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 259.119674][T10321] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 259.119674][T10321] program syz-executor.0 not setting count and/or reply_len properly [ 259.120017][ T3614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.169481][T10321] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.179989][ T3614] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.180007][ T3614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.198748][ T3614] usb 6-1: config 0 descriptor?? [ 259.205238][T10321] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 259.680871][ T3614] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 259.700650][ T3614] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000D/input/input15 [ 259.729595][ T3614] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 260.084988][ T3614] usb 6-1: USB disconnect, device number 13 15:25:26 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:26 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:26 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:26 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:27 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x5450, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:27 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x5451, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:27 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 261.019768][ T17] usb 6-1: new high-speed USB device number 14 using dummy_hcd 15:25:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x5460, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x5501, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 261.253994][T10409] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 261.253994][T10409] program syz-executor.4 not setting count and/or reply_len properly [ 261.403887][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.417660][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 261.427303][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.437848][ T17] usb 6-1: config 0 descriptor?? 15:25:27 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x5509, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 261.675208][T10457] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 261.675208][T10457] program syz-executor.4 not setting count and/or reply_len properly [ 261.741096][T10457] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.754766][T10457] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 261.931112][ T17] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 261.953806][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000E/input/input16 [ 261.984312][ T17] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 262.342218][ T17] usb 6-1: USB disconnect, device number 14 15:25:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x6364, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:29 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:29 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:29 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x890b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x8912, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x8914, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x8933, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 263.229534][ T2514] usb 6-1: new high-speed USB device number 15 using dummy_hcd 15:25:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x894b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:29 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 263.671988][T10510] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 263.671988][T10510] program syz-executor.0 not setting count and/or reply_len properly [ 263.740446][ T2514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.759397][ T2514] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.762164][T10510] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.768978][ T2514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.791210][ T2514] usb 6-1: config 0 descriptor?? [ 263.814080][T10510] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 264.270669][ T2514] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 264.281866][ T2514] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000F/input/input17 [ 264.309459][ T2514] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 264.686571][ T5] usb 6-1: USB disconnect, device number 15 15:25:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:31 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x8983, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:31 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:31 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:31 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x89e2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0xab08, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 265.550478][ T5] usb 6-1: new high-speed USB device number 16 using dummy_hcd 15:25:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x40042408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 265.692151][T10604] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 265.692151][T10604] program syz-executor.4 not setting count and/or reply_len properly 15:25:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x8983, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 265.737740][T10604] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:25:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x400454ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 265.780041][T10604] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:32 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 265.960566][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.972766][ T5] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.984192][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.995529][ T5] usb 6-1: config 0 descriptor?? [ 266.247638][T10636] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 266.247638][T10636] program syz-executor.0 not setting count and/or reply_len properly [ 266.291139][T10636] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.310622][T10636] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 266.480503][ T5] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 266.494600][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0010/input/input18 [ 266.524972][ T5] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 266.892733][ T2514] usb 6-1: USB disconnect, device number 16 15:25:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4004550a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:33 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:33 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:33 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x40085503, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x40186366, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 267.707789][T10696] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 267.707789][T10696] program syz-executor.4 not setting count and/or reply_len properly [ 267.736590][T10696] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.758250][T10696] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 267.796967][ T7167] usb 6-1: new high-speed USB device number 17 using dummy_hcd 15:25:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4020940d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x41015500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x80084803, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 268.179224][ T7167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.199172][ T7167] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.208517][ T7167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.240111][ T7167] usb 6-1: config 0 descriptor?? [ 268.710254][ T7167] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 268.721072][ T7167] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0011/input/input19 [ 268.748309][ T7167] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 269.115293][ T2514] usb 6-1: USB disconnect, device number 17 15:25:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:35 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:35 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:35 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x80085502, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:35 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x80086301, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x80089203, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x800c5011, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x8010550e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 270.068928][T10792] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 270.068928][T10792] program syz-executor.4 not setting count and/or reply_len properly [ 270.078762][ T8159] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 270.094452][T10792] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.108524][T10792] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x8048ae66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 270.504948][ T8159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.536854][ T8159] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.565744][ T8159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.575710][ T8159] usb 6-1: config 0 descriptor?? [ 271.062109][ T8159] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 271.081051][ T8159] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0012/input/input20 [ 271.108203][ T8159] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 271.462510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 [ 271.476760][ T17] usb 6-1: USB disconnect, device number 18 15:25:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000000000)={0x0, 0xfffb, 0x0, {}, {}, @rumble}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:38 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:38 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:38 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0xc0085504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 272.260380][T10887] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 272.260380][T10887] program syz-executor.1 not setting count and/or reply_len properly [ 272.318724][ T7167] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 272.337729][T10887] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:25:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0xc0684608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 272.363945][T10887] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 272.698986][ T7167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.711060][ T7167] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.729555][ T7167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.744116][ T7167] usb 6-1: config 0 descriptor?? [ 272.930355][T10912] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 272.930355][T10912] program syz-executor.0 not setting count and/or reply_len properly [ 272.969483][T10912] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.987843][T10912] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 273.230527][ T7167] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 273.243177][ T7167] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0013/input/input21 [ 273.267140][ T7167] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 273.638934][ T2514] usb 6-1: USB disconnect, device number 19 15:25:40 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:40 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:40 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:40 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:40 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 274.440156][T10972] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 274.440156][T10972] program syz-executor.1 not setting count and/or reply_len properly [ 274.443389][T10972] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.443994][T10972] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 274.509188][ T17] usb 6-1: new high-speed USB device number 20 using dummy_hcd 15:25:40 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:41 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 274.763996][T10994] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 274.763996][T10994] program syz-executor.4 not setting count and/or reply_len properly 15:25:41 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 274.765008][T10994] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.774037][T10994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:41 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 274.989336][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:25:41 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 275.037449][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.059274][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.077796][ T17] usb 6-1: config 0 descriptor?? 15:25:41 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:41 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 275.589347][ T17] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 275.590867][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0014/input/input22 [ 275.600094][ T17] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 276.000251][ T8159] usb 6-1: USB disconnect, device number 20 [ 276.101564][T11019] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 276.101564][T11019] program syz-executor.1 not setting count and/or reply_len properly [ 276.187746][T11019] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.232372][T11019] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:42 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:42 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:42 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:42 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:43 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 276.816491][T11071] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 276.816491][T11071] program syz-executor.4 not setting count and/or reply_len properly [ 276.826857][T11071] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.827483][T11071] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 276.918571][ T8159] usb 6-1: new high-speed USB device number 21 using dummy_hcd 15:25:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 277.308867][ T8159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:25:43 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:43 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 277.338341][ T8159] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 277.338358][ T8159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.339892][ T8159] usb 6-1: config 0 descriptor?? [ 277.809420][ T8159] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 277.811606][ T8159] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0015/input/input23 [ 277.836012][ T8159] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 277.943984][T11090] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 277.943984][T11090] program syz-executor.0 not setting count and/or reply_len properly [ 277.997211][T11090] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.036135][T11090] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 278.231049][ T8159] usb 6-1: USB disconnect, device number 21 15:25:45 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:45 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:45 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:25:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:45 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 15:25:45 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 15:25:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 279.117976][ T8159] usb 6-1: new high-speed USB device number 22 using dummy_hcd 15:25:45 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 15:25:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x50, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 279.493118][ T8159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.493152][ T8159] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.493170][ T8159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.494432][ T8159] usb 6-1: config 0 descriptor?? [ 279.723786][T11171] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 279.723786][T11171] program syz-executor.4 not setting count and/or reply_len properly [ 279.786978][T11171] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.814655][T11171] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:46 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:46 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) 15:25:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x1f0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:46 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:46 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) [ 279.979233][ T8159] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 279.981428][ T8159] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0016/input/input24 [ 279.994985][ T8159] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 280.393126][ T3614] usb 6-1: USB disconnect, device number 22 [ 280.608504][T11217] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 280.608504][T11217] program syz-executor.1 not setting count and/or reply_len properly [ 280.697506][T11217] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.731594][T11217] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:47 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) 15:25:47 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x280, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:47 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:47 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) 15:25:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:47 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) 15:25:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 281.317807][ T3614] usb 6-1: new high-speed USB device number 23 using dummy_hcd 15:25:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 281.613712][T11277] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 281.613712][T11277] program syz-executor.4 not setting count and/or reply_len properly [ 281.619022][T11277] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.623777][T11277] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 281.718044][ T3614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.718072][ T3614] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.718085][ T3614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.719602][ T3614] usb 6-1: config 0 descriptor?? [ 282.199179][ T3614] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 282.210366][ T3614] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0017/input/input25 [ 282.245910][ T3614] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 282.615782][ T3614] usb 6-1: USB disconnect, device number 23 [ 282.978504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 15:25:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x500, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:49 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:49 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:49 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 15:25:49 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) 15:25:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:49 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x600, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 283.507706][ T17] usb 6-1: new high-speed USB device number 24 using dummy_hcd 15:25:50 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 283.592843][T11384] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 283.592843][T11384] program syz-executor.1 not setting count and/or reply_len properly [ 283.593972][T11384] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.594363][T11384] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x700, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:50 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 283.867719][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.867748][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 15:25:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:50 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) [ 283.867764][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.868993][ T17] usb 6-1: config 0 descriptor?? 15:25:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 284.096872][T11398] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 284.096872][T11398] program syz-executor.1 not setting count and/or reply_len properly 15:25:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x3000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 284.348834][ T17] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 284.359945][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0018/input/input26 [ 284.418793][ T17] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 284.753582][ T17] usb 6-1: USB disconnect, device number 24 15:25:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x4000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:51 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:51 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:51 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x5000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x8002, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:51 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xf001, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xff00, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 285.657499][ T17] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 285.822310][T11468] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 285.822310][T11468] program syz-executor.1 not setting count and/or reply_len properly [ 286.048510][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.074234][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.085117][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.103597][ T17] usb 6-1: config 0 descriptor?? [ 286.847407][ T17] usbhid 6-1:0.0: can't add hid device: -71 [ 286.853456][ T17] usbhid: probe of 6-1:0.0 failed with error -71 [ 286.867030][ T17] usb 6-1: USB disconnect, device number 25 15:25:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:53 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xff01, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:53 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:53 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:53 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xff7f, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 15:25:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x40000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 15:25:54 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 287.667245][ T5] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 287.765421][T11524] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 287.765421][T11524] program syz-executor.4 not setting count and/or reply_len properly [ 287.804426][T11524] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.823268][T11524] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 288.047470][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.073515][ T5] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.089875][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.100457][ T5] usb 6-1: config 0 descriptor?? [ 288.827263][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 288.833440][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 288.846212][ T5] usb 6-1: USB disconnect, device number 26 15:25:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 15:25:55 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:55 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:55 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:56 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x5000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 289.623549][ T8098] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 289.934539][T11574] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 289.934539][T11574] program syz-executor.4 not setting count and/or reply_len properly [ 290.003670][ T8098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.003703][ T8098] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.003720][ T8098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.004972][ T8098] usb 6-1: config 0 descriptor?? [ 290.033204][T11574] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.034176][T11574] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 290.747110][ T8098] usbhid 6-1:0.0: can't add hid device: -71 [ 290.754054][ T8098] usbhid: probe of 6-1:0.0 failed with error -71 [ 290.768211][ T8098] usb 6-1: USB disconnect, device number 27 15:25:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 15:25:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:57 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:57 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x7000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10}) 15:25:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x8000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10}) 15:25:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x10000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10}) [ 291.557030][ T3614] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 291.731034][T11637] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 291.731034][T11637] program syz-executor.4 not setting count and/or reply_len properly [ 291.768972][T11637] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.781226][T11637] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.961704][ T3614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.973922][ T3614] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.984269][ T3614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.997894][ T3614] usb 6-1: config 0 descriptor?? [ 292.716976][ T3614] usbhid 6-1:0.0: can't add hid device: -71 [ 292.723324][ T3614] usbhid: probe of 6-1:0.0 failed with error -71 [ 292.732590][ T3614] usb 6-1: USB disconnect, device number 28 15:25:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:25:59 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x20000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:59 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:59 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:59 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:25:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x30000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:25:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 293.441680][T11691] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 293.441680][T11691] program syz-executor.4 not setting count and/or reply_len properly [ 293.476817][ T8098] usb 6-1: new high-speed USB device number 29 using dummy_hcd 15:25:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x50000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 293.481111][T11691] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.502950][T11691] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:25:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x80020000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:00 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xf0010000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:00 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 293.894051][ T8098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.911914][ T8098] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 293.929337][ T8098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.946420][ T8098] usb 6-1: config 0 descriptor?? [ 294.010230][T11718] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 294.010230][T11718] program syz-executor.1 not setting count and/or reply_len properly [ 294.040324][T11718] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.053083][T11718] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 294.676929][ T8098] usbhid 6-1:0.0: can't add hid device: -71 [ 294.683804][ T8098] usbhid: probe of 6-1:0.0 failed with error -71 [ 294.698892][ T8098] usb 6-1: USB disconnect, device number 29 15:26:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xff000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:01 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:01 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:01 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:01 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xff010000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xff7f0000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 295.502568][ T8169] usb 6-1: new high-speed USB device number 30 using dummy_hcd 15:26:02 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, 0xffffffffffffffff) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 295.684188][T11745] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 295.684188][T11745] program syz-executor.1 not setting count and/or reply_len properly 15:26:02 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 295.753230][T11745] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.767521][T11745] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 295.895254][ T8169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.895287][ T8169] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 295.895304][ T8169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.897736][ T8169] usb 6-1: config 0 descriptor?? [ 296.009154][T11781] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 296.009154][T11781] program syz-executor.3 not setting count and/or reply_len properly [ 296.019928][T11781] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.024909][T11781] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 296.626623][ T8169] usbhid 6-1:0.0: can't add hid device: -71 [ 296.632682][ T8169] usbhid: probe of 6-1:0.0 failed with error -71 [ 296.641467][ T8169] usb 6-1: USB disconnect, device number 30 15:26:03 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:03 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:03 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, 0xffffffffffffffff) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:03 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:04 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, 0xffffffffffffffff) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:04 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)="89") [ 297.761202][T11809] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 297.761202][T11809] program syz-executor.1 not setting count and/or reply_len properly [ 297.862499][T11809] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.874213][T11809] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:04 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:04 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 298.244495][T11855] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 298.244495][T11855] program syz-executor.4 not setting count and/or reply_len properly 15:26:04 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:04 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)="89") [ 298.322279][T11855] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.375200][T11855] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:05 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:05 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:05 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:05 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 299.146035][T11895] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 299.146035][T11895] program syz-executor.1 not setting count and/or reply_len properly [ 299.173246][T11895] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.184717][T11895] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:05 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:05 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:05 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:05 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 299.316072][T11902] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 299.316072][T11902] program syz-executor.4 not setting count and/or reply_len properly 15:26:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x30, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") [ 299.320588][T11902] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:26:05 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 299.321125][T11902] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:06 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x50, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 300.308777][T11906] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 300.308777][T11906] program syz-executor.0 not setting count and/or reply_len properly [ 300.347003][T11906] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.358983][T11906] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:06 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:06 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x1f0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:06 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:06 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 300.691551][T11951] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 300.691551][T11951] program syz-executor.4 not setting count and/or reply_len properly [ 300.723151][T11951] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.749258][T11951] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:07 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x500, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:07 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:07 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 301.436260][ T5] usb 6-1: new high-speed USB device number 31 using dummy_hcd 15:26:07 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:08 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:08 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x600, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:08 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) [ 301.736830][ T5] usb 6-1: device descriptor read/64, error 18 15:26:08 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) [ 302.057500][T11986] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 302.057500][T11986] program syz-executor.1 not setting count and/or reply_len properly [ 302.086834][T11986] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.111208][T11986] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 302.146169][ T5] usb 6-1: device descriptor read/64, error 18 [ 302.426168][ T5] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 302.736151][ T5] usb 6-1: device descriptor read/64, error 18 [ 303.166075][ T5] usb 6-1: device descriptor read/64, error 18 [ 303.287175][ T5] usb usb6-port1: attempt power cycle [ 303.996013][ T5] usb 6-1: new high-speed USB device number 33 using dummy_hcd 15:26:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:10 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x700, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:10 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 15:26:10 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:10 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 304.088691][ T5] usb 6-1: Invalid ep0 maxpacket: 0 15:26:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:10 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 304.460013][T12027] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 304.460013][T12027] program syz-executor.0 not setting count and/or reply_len properly [ 304.471098][T12027] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.473161][T12027] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 304.535964][ T5] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 304.640599][ T5] usb 6-1: Invalid ep0 maxpacket: 0 15:26:11 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 304.642924][ T5] usb usb6-port1: unable to enumerate USB device 15:26:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x2000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 304.895169][T12047] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 304.895169][T12047] program syz-executor.1 not setting count and/or reply_len properly [ 304.951845][T12047] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.982125][T12047] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:13 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) 15:26:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x3000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:13 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:13 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x4000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) 15:26:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x5000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:14 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 307.595771][ T8098] usb 6-1: new high-speed USB device number 35 using dummy_hcd 15:26:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x8002, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:14 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 307.730930][T12069] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 307.730930][T12069] program syz-executor.1 not setting count and/or reply_len properly [ 307.733732][T12069] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.734283][T12069] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 307.885754][ T8098] usb 6-1: device descriptor read/64, error 18 [ 308.305834][ T8098] usb 6-1: device descriptor read/64, error 18 [ 308.575842][ T8098] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 308.845698][ T8098] usb 6-1: device descriptor read/64, error 18 [ 309.235647][ T8098] usb 6-1: device descriptor read/64, error 18 [ 309.355795][ T8098] usb usb6-port1: attempt power cycle [ 310.065687][ T8098] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 310.155904][ T8098] usb 6-1: Invalid ep0 maxpacket: 0 15:26:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:16 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0xf001, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:16 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30}) 15:26:16 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:16 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 310.305629][ T8098] usb 6-1: new high-speed USB device number 38 using dummy_hcd 15:26:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0xff00, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:16 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30}) 15:26:16 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x30}) 15:26:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0xff01, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:16 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0xff7f, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 310.805555][ T8098] usb 6-1: device not accepting address 38, error -71 [ 310.815254][ T8098] usb usb6-port1: unable to enumerate USB device [ 310.869976][T12116] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 310.869976][T12116] program syz-executor.4 not setting count and/or reply_len properly [ 310.911405][T12116] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.924076][T12116] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 311.215573][ T8098] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 311.575835][ T8098] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 311.589582][ T8098] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 311.600646][ T8098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.613997][ T8098] usb 6-1: config 0 descriptor?? [ 311.657108][ T8098] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 15:26:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x40000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:20 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:20 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:20 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:20 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 313.771118][ T3614] usb 6-1: USB disconnect, device number 39 15:26:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 313.944538][T12180] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 313.944538][T12180] program syz-executor.4 not setting count and/or reply_len properly 15:26:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 314.008559][T12180] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.029683][T12180] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x3000000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x4000000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 314.255379][ T3614] usb 6-1: new high-speed USB device number 40 using dummy_hcd 15:26:20 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r4, r3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, 0x0, 0x1ee) fcntl$dupfd(r2, 0x406, r5) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x5000000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 314.615685][ T3614] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 314.644877][ T3614] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.665322][ T3614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.695752][ T3614] usb 6-1: config 0 descriptor?? [ 314.733644][T12205] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 314.733644][T12205] program syz-executor.4 not setting count and/or reply_len properly [ 314.736346][ T3614] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 314.772079][T12205] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.784140][T12205] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:23 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:23 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, 0xffffffffffffffff) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x6000000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:23 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:23 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 316.862086][ T8098] usb 6-1: USB disconnect, device number 40 15:26:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x7000000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 316.994176][T12228] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 316.994176][T12228] program syz-executor.1 not setting count and/or reply_len properly 15:26:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x8000000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:23 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 317.191320][T12236] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:26:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x10000000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:23 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 317.365942][ T8098] usb 6-1: new high-speed USB device number 41 using dummy_hcd 15:26:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x20000000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 317.544483][T12236] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 317.725343][ T8098] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 317.742907][ T8098] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 317.762237][ T8098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.780919][ T8098] usb 6-1: config 0 descriptor?? [ 317.826221][ T8098] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 15:26:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x30000000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:26 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:26 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:26 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, 0xffffffffffffffff) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 319.972868][ T8098] usb 6-1: USB disconnect, device number 41 15:26:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x40000000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 320.222102][T12292] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 320.222102][T12292] program syz-executor.1 not setting count and/or reply_len properly [ 320.249431][T12292] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.262238][T12292] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x50000000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:26 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:26 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, 0xffffffffffffffff) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x80020000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 320.528022][T12318] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 320.528022][T12318] program syz-executor.4 not setting count and/or reply_len properly [ 320.584902][ T8098] usb 6-1: new high-speed USB device number 42 using dummy_hcd 15:26:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0xf0010000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 320.629875][T12313] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.790305][T12313] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 321.005291][ T8098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.024891][ T8098] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.050272][ T8098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.076236][ T8098] usb 6-1: config 0 descriptor?? [ 321.126037][ T8098] usbhid 6-1:0.0: can't add hid device: -22 [ 321.132608][ T8098] usbhid: probe of 6-1:0.0 failed with error -22 15:26:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="89") 15:26:29 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0xff000000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:29 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r2, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r4) write$binfmt_aout(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) 15:26:29 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 323.236793][ T17] usb 6-1: USB disconnect, device number 42 15:26:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0xff010000, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 323.431897][T12347] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 323.431897][T12347] program syz-executor.1 not setting count and/or reply_len properly 15:26:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0xff7f0000, 0x0, 0x30, 0x0, 0x0, 0x4}) 15:26:29 executing program 4: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 323.502426][T12347] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.537292][T12347] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 15:26:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4}) [ 323.755412][ T17] usb 6-1: new high-speed USB device number 43 using dummy_hcd 15:26:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1ee) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x30, 0x0, 0x0, 0x4}) 15:26:30 executing program 4: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$packet(0x11, 0x3, 0x300) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) write$apparmor_exec(r1, 0x0, 0x1ee) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x1ee) fcntl$dupfd(r1, 0x406, r4) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffdeb525bd4286be9084"], 0x92) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001580)=""/4119) [ 324.080910][T12386] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 324.080910][T12386] program syz-executor.4 not setting count and/or reply_len properly [ 324.090057][T12386] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.091154][T12386] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 324.125134][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.125167][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 324.125184][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.126532][ T17] usb 6-1: config 0 descriptor?? [ 324.166003][ T17] usbhid 6-1:0.0: can't add hid device: -22 [ 324.166114][ T17] usbhid: probe of 6-1:0.0 failed with error -22 [ 324.314767][ T0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 324.314777][ T0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 324.314789][ T0] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 324.314796][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.314819][ T0] RIP: 0010:__switch_to_asm+0x0/0x40 [ 324.314832][ T0] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.314838][ T0] RSP: 0018:ffffc90000d3fd90 EFLAGS: 00010046 [ 324.314848][ T0] RAX: dffffc0000000000 RBX: ffff8880ae735e18 RCX: 0000000000000000 [ 324.314856][ T0] RDX: 1ffff11015ce6bc2 RSI: ffff8880a963c440 RDI: ffff8880a95f0340 [ 324.314863][ T0] RBP: ffffc90000d3fe60 R08: 0000000000000001 R09: ffff8880a95f0c10 [ 324.314870][ T0] R10: fffffbfff155e051 R11: 0000000000000000 R12: ffff8880ae735e00 [ 324.314877][ T0] R13: ffff8880a95f0340 R14: ffff8880a963c440 R15: ffff8880a95f0770 [ 324.314886][ T0] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 324.314894][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.314900][ T0] CR2: 0000558a19c54520 CR3: 0000000098281000 CR4: 00000000001506e0 [ 324.314910][ T0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.314917][ T0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.314920][ T0] Call Trace: [ 324.314935][ T0] __schedule+0x8b4/0x1e80 [ 324.314951][ T0] ? io_schedule_timeout+0x140/0x140 [ 324.314965][ T0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 324.314977][ T0] ? trace_hardirqs_on+0x5f/0x220 [ 324.314988][ T0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 324.314999][ T0] schedule_idle+0x53/0x90 [ 324.315012][ T0] do_idle+0x323/0x6d0 [ 324.315025][ T0] ? arch_cpu_idle_exit+0x70/0x70 [ 324.315041][ T0] cpu_startup_entry+0x14/0x20 [ 324.315052][ T0] secondary_startup_64+0xa4/0xb0 [ 324.315061][ T0] Modules linked in: [ 324.315076][ T0] ---[ end trace 86e8d30c1be12f3f ]--- [ 324.315088][ T0] RIP: 0010:__switch_to_asm+0x0/0x40 [ 324.315099][ T0] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.315106][ T0] RSP: 0018:ffffc90000d3fd90 EFLAGS: 00010046 [ 324.315115][ T0] RAX: dffffc0000000000 RBX: ffff8880ae735e18 RCX: 0000000000000000 [ 324.315122][ T0] RDX: 1ffff11015ce6bc2 RSI: ffff8880a963c440 RDI: ffff8880a95f0340 [ 324.315129][ T0] RBP: ffffc90000d3fe60 R08: 0000000000000001 R09: ffff8880a95f0c10 [ 324.315136][ T0] R10: fffffbfff155e051 R11: 0000000000000000 R12: ffff8880ae735e00 [ 324.315143][ T0] R13: ffff8880a95f0340 R14: ffff8880a963c440 R15: ffff8880a95f0770 [ 324.315152][ T0] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 324.315160][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.315167][ T0] CR2: 0000558a19c54520 CR3: 0000000098281000 CR4: 00000000001506e0 [ 324.315173][ T0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.315180][ T0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.315186][ T0] Kernel panic - not syncing: Fatal exception [ 324.316921][ T0] Kernel Offset: disabled